Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/347d50ab-1479-3adb-8456-2c352d32f6ae.roa
File:                     347d50ab-1479-3adb-8456-2c352d32f6ae.roa (raw, json)
Hash identifier:          8GHGAOe1lppNPcwrGFIZ7FFIONqK4nGpsomigqjIhm8=
Subject key identifier:   FF:E6:6F:17:71:DC:9F:A1:2E:C8:FB:9E:74:A7:41:C3:A9:F6:72:8B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDDCCD1E39890738876A15F80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/347d50ab-1479-3adb-8456-2c352d32f6ae.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        98.161.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:d1:e3:98:90:73:88:76:a1:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=9dfaecea-dbc4-4c53-9fc5-d51c5ced09e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0f:12:4e:75:cc:a2:66:d3:a3:b3:41:dc:d1:
                    f1:b4:48:09:d8:7c:3a:83:13:ab:22:6b:21:9f:49:
                    9e:20:25:5d:d3:3a:3e:5f:42:67:1c:14:5c:56:32:
                    a9:b6:1d:9a:86:86:f1:e0:7b:c8:65:0a:88:06:44:
                    b0:4a:a5:8e:d7:0f:d9:00:7c:d0:98:2c:6c:4d:b9:
                    75:37:2b:1b:d6:4b:72:34:0b:4d:3b:20:7c:25:cb:
                    84:c6:71:17:00:83:c2:6c:c3:0e:6e:c8:17:2a:87:
                    97:bb:d6:ca:58:56:9b:57:c6:ab:48:3c:94:78:59:
                    93:05:d8:53:29:ad:17:74:a2:f7:84:5a:f0:6f:86:
                    bd:21:3d:83:ae:06:3e:fb:09:2e:da:8c:9f:02:77:
                    dd:2b:ac:d1:e3:17:98:b9:5c:71:93:d5:48:7d:8f:
                    cb:d3:ef:10:6b:17:e3:48:86:63:67:f9:be:17:d7:
                    ae:e3:b7:bf:4d:24:0c:fa:56:96:9e:5f:bb:34:90:
                    aa:ef:cb:60:31:28:bc:f1:93:e5:3f:07:a2:09:95:
                    2f:35:db:eb:93:a7:1a:0c:62:b1:2c:b1:b3:dc:86:
                    fd:83:82:7f:fd:36:ba:10:9e:eb:d0:ae:bb:87:49:
                    8c:78:d1:13:39:bb:77:bb:93:e7:c0:50:a8:a1:b6:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E6:6F:17:71:DC:9F:A1:2E:C8:FB:9E:74:A7:41:C3:A9:F6:72:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/347d50ab-1479-3adb-8456-2c352d32f6ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.161.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:46:ae:60:fd:55:57:a6:8d:dd:41:14:df:0f:67:10:b4:93:
         87:bc:aa:b6:7e:8f:6e:4a:6c:c3:6f:1c:a7:00:df:3c:47:9f:
         32:66:5e:7c:81:9b:da:87:21:36:a0:26:1f:d9:10:13:8a:b7:
         76:f8:88:a5:08:46:04:97:7a:ea:c0:34:04:ec:15:5a:23:ca:
         b2:a2:20:e1:ba:2c:b5:28:57:6a:2b:db:d4:f7:0c:f1:63:aa:
         15:36:8e:44:33:5b:5d:5b:4e:47:4c:cc:c8:98:b8:51:33:8b:
         0b:e1:bc:68:ae:95:53:dc:df:36:ea:a8:68:87:17:c2:41:4b:
         c3:cb:20:11:d5:ce:63:43:2a:24:bb:d3:60:7f:8e:77:ad:51:
         52:46:22:5f:35:58:9a:8c:10:cd:9a:cd:94:fd:f9:7b:dc:53:
         38:e6:03:b1:66:16:23:a9:0b:98:26:b0:cc:5b:eb:a7:5d:05:
         7e:c1:9f:c4:ad:a3:fd:8f:ec:50:3e:32:b6:44:b5:ae:3d:fe:
         f0:cd:82:1d:5f:95:06:7e:2f:2d:ad:d9:36:ff:5e:d5:b6:fe:
         b2:09:25:e3:b9:89:56:7c:4f:06:6c:35:d4:60:61:a6:93:bc:
         5f:0a:9e:7c:e2:c2:93:68:db:1f:2c:1d:9c:ba:17:19:fc:7f:
         b5:88:13:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzNHjmJBziHahX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk
OWRmYWVjZWEtZGJjNC00YzUzLTlmYzUtZDUxYzVjZWQwOWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw8STnXMombTo7NB3NHxtEgJ2Hw6gxOrImsh
n0meICVd0zo+X0JnHBRcVjKpth2ahobx4HvIZQqIBkSwSqWO1w/ZAHzQmCxsTbl1
Nysb1ktyNAtNOyB8JcuExnEXAIPCbMMObsgXKoeXu9bKWFabV8arSDyUeFmTBdhT
Ka0XdKL3hFrwb4a9IT2DrgY++wku2oyfAnfdK6zR4xeYuVxxk9VIfY/L0+8Qaxfj
SIZjZ/m+F9eu47e/TSQM+laWnl+7NJCq78tgMSi88ZPlPweiCZUvNdvrk6caDGKx
LLGz3Ib9g4J//Ta6EJ7r0K67h0mMeNETObt3u5PnwFCoobb4+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/mbxdx3J+hLsj7nnSnQcOp9nKLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzQ3ZDUwYWItMTQ3OS0z
YWRiLTg0NTYtMmMzNTJkMzJmNmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqHgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRGrmD9VVemjd1BFN8PZxC0k4e8qrZ+j25KbMNvHKcA3zxHnzJmXnyB
m9qHITagJh/ZEBOKt3b4iKUIRgSXeurANATsFVojyrKiIOG6LLUoV2or29T3DPFj
qhU2jkQzW11bTkdMzMiYuFEziwvhvGiulVPc3zbqqGiHF8JBS8PLIBHVzmNDKiS7
02B/jnetUVJGIl81WJqMEM2azZT9+XvcUzjmA7FmFiOpC5gmsMxb66ddBX7Bn8St
o/2P7FA+MrZEta49/vDNgh1flQZ+Ly2t2Tb/XtW2/rIJJeO5iVZ8TwZsNdRgYaaT
vF8KnnziwpNo2x8sHZy6Fxn8f7WIE3w=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:38 2026 by rpki-client