Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33eb9e8e-0864-3ed6-82bd-4aa8db3e30c3.roa
File:                     33eb9e8e-0864-3ed6-82bd-4aa8db3e30c3.roa (raw, json)
Hash identifier:          ir8cM6lZX8YQD3IdU9GTtEpV7PVnmEI5l5Zz5fCSCQA=
Subject key identifier:   CF:E5:4B:7D:7A:8A:6B:1D:79:F6:9C:EF:F2:E1:11:A2:FF:7C:57:1D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E9EB009FAB9122D20D3A49080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33eb9e8e-0864-3ed6-82bd-4aa8db3e30c3.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     22773
IP address blocks:        98.165.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:b0:09:fa:b9:12:2d:20:d3:a4:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=23b2fd21-acab-47f8-a2f9-dceca7e784bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:0c:0d:21:cf:c9:b8:6d:c9:d6:1f:45:9c:
                    fb:69:5c:46:02:82:22:c0:82:f8:2a:b2:65:b2:f5:
                    77:3e:49:01:71:bd:cb:01:5d:f7:29:15:b1:ef:d8:
                    4d:23:a1:3b:38:4f:62:2e:5b:70:f3:49:98:42:b2:
                    9b:18:e7:ee:99:d4:49:d3:03:63:f7:4a:79:9f:fa:
                    c3:a4:d9:f0:ca:d3:1e:5f:46:aa:f7:2e:29:78:8c:
                    a4:18:0c:05:d8:1e:2e:6d:7e:36:16:d0:d1:e2:40:
                    a0:f8:29:0d:83:7c:c4:34:a4:bb:e8:07:ef:69:b0:
                    17:e4:6c:ec:1d:d8:b3:4b:a6:e0:ed:47:d6:61:34:
                    cd:ba:93:e4:fb:f2:e3:2e:8a:67:db:e2:ab:d3:ed:
                    47:5f:01:0f:1b:a0:27:a8:23:03:f6:1a:da:25:b4:
                    bb:62:dc:59:d9:bc:83:46:21:30:e7:e8:69:07:15:
                    d8:f4:33:ca:b3:c7:cc:a5:77:04:69:b7:49:46:9f:
                    e7:cb:be:f2:43:13:38:59:44:92:df:d2:f0:45:89:
                    b3:dc:ef:dc:d9:85:78:a8:35:d2:85:4d:8d:b1:a0:
                    a9:5d:52:b9:e1:e3:72:6e:ea:90:af:35:0a:e2:93:
                    c9:5a:3c:ee:78:62:82:6d:e4:d0:93:21:52:c2:e5:
                    90:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E5:4B:7D:7A:8A:6B:1D:79:F6:9C:EF:F2:E1:11:A2:FF:7C:57:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33eb9e8e-0864-3ed6-82bd-4aa8db3e30c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.165.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b5:8a:9d:cd:4b:69:20:aa:aa:03:07:5b:5f:84:3c:ee:03:
         17:14:89:53:5f:ff:fc:ab:f0:39:9a:fc:c3:0f:09:fc:3f:31:
         f9:33:34:ce:c1:53:70:46:cf:41:0e:42:a6:b1:17:cb:18:d3:
         0a:47:2c:fc:f1:6e:b8:12:e5:82:99:90:a3:d2:aa:2c:df:2a:
         39:68:6c:9e:63:10:cc:2a:55:55:c0:fc:af:c9:e3:4c:a1:c1:
         78:af:9b:fa:62:75:11:71:b2:42:7e:20:e2:d5:58:4b:05:57:
         7c:e6:76:34:6a:7c:ba:8e:28:32:35:9d:7d:e4:93:13:63:f4:
         58:14:f8:e9:b8:90:41:2f:82:73:58:ed:35:64:43:27:e4:2f:
         a4:26:51:1e:5a:45:73:b1:31:e4:50:a3:20:44:98:e9:0d:da:
         e6:10:8c:ce:45:f0:4e:d1:d7:d6:53:d1:39:b6:38:54:74:c3:
         b3:af:0c:6e:54:aa:10:6d:46:7c:fb:3b:2d:35:b7:d6:94:d3:
         d2:02:30:bb:5e:de:02:37:ce:7b:97:69:a3:a9:bf:a9:d8:95:
         3f:80:a5:dc:a5:46:99:ba:3b:b5:8b:0d:89:ac:0f:64:42:59:
         a1:ca:6d:4a:8a:be:af:d1:3b:4d:c8:ad:b6:33:47:9b:2d:74:
         0e:c6:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:57:27 2026 by rpki-client