Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7994f30c-6dbe-3076-8e0a-ff64e24aa160.roa
File:                     7994f30c-6dbe-3076-8e0a-ff64e24aa160.roa (raw, json)
Hash identifier:          oYZD5w+tpalOCGLbiMmAbsQGoJIBH/fggVra1YENIq4=
Subject key identifier:   B7:46:29:AF:B3:69:73:7A:9E:9A:69:BF:E7:D0:0E:E0:F9:6D:B7:8A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4112C01F7DF493A3867F8F00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7994f30c-6dbe-3076-8e0a-ff64e24aa160.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        98.161.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:c0:1f:7d:f4:93:a3:86:7f:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=1eb3e748-e37c-42eb-9837-fccc09c3a28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:44:d9:8e:87:a1:c6:63:57:50:aa:ff:d3:aa:
                    f6:aa:ad:e4:b7:74:c7:31:04:bb:0a:21:12:df:9a:
                    09:27:3f:f3:ba:b0:c2:9e:68:a3:79:eb:48:72:d6:
                    4d:83:9e:c7:5c:a7:f9:59:9d:2a:e0:c5:29:52:66:
                    16:1d:06:cd:cd:ed:cc:11:fc:03:5b:92:7c:bf:00:
                    a9:4d:ea:9e:05:38:f4:86:05:e4:23:64:c5:0b:70:
                    10:16:f1:27:5a:89:fd:d1:1f:59:51:17:17:36:c0:
                    ea:e3:5d:76:a1:95:62:eb:cd:c2:fa:f5:4b:6e:36:
                    b7:c2:f3:4e:48:04:f8:32:00:c5:ba:02:94:a0:89:
                    7a:0b:49:98:6f:bd:88:c7:54:55:bf:35:77:a0:c8:
                    8c:55:87:ba:0f:05:2f:a9:a0:a1:dc:f0:5b:52:e0:
                    31:0a:c2:bb:85:53:52:d2:b8:4d:08:58:f6:fa:02:
                    7f:ed:d3:e7:69:6d:b1:26:93:bb:1f:e2:0c:06:cb:
                    41:f9:05:73:b2:72:cc:e8:3e:0c:6c:ac:9c:1e:27:
                    94:51:19:32:4c:f5:21:f3:68:f6:56:1f:c4:79:e8:
                    13:a7:f4:99:38:c7:58:c6:80:fb:74:33:2a:d6:1c:
                    73:28:9c:5c:88:5d:25:31:5e:c1:fc:68:c9:8f:44:
                    11:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:46:29:AF:B3:69:73:7A:9E:9A:69:BF:E7:D0:0E:E0:F9:6D:B7:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7994f30c-6dbe-3076-8e0a-ff64e24aa160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.161.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c7:11:d3:76:cd:f8:17:a1:9a:3e:80:8d:36:a7:63:3b:f4:
         6b:67:a5:5b:b7:77:dd:19:7e:66:5b:f9:21:98:14:15:f3:df:
         65:ad:61:b7:46:09:ff:6b:96:58:37:55:53:32:1c:5a:0d:ca:
         d7:fb:27:85:26:7f:96:b0:e0:d3:9a:4f:53:06:50:8e:88:35:
         83:2d:03:5d:85:1a:78:81:fb:5b:5b:c0:7c:60:f7:c1:14:f9:
         17:70:90:ce:5b:db:75:a5:49:8d:36:d2:61:9b:14:97:c2:ec:
         ec:76:ce:32:49:3f:e9:01:6a:7c:24:dd:71:e5:f9:bb:16:43:
         a5:3c:06:62:72:50:30:ba:27:fd:c6:13:a5:ba:eb:8a:6a:54:
         78:06:28:03:24:3f:3e:75:07:89:ab:1a:5b:cc:c6:bb:d5:c4:
         58:bd:ca:b3:68:62:3d:d0:f4:0f:6a:72:a0:a6:d9:3c:98:33:
         4d:5e:a8:a7:cf:29:c5:05:81:c8:22:ee:39:4d:7e:79:a5:f6:
         44:f1:0f:80:b2:9c:19:d9:dc:6e:ce:b6:51:b9:47:02:38:9a:
         48:0d:23:10:77:29:3e:b3:a3:9c:55:73:ff:c7:38:42:b9:58:
         db:90:60:00:58:aa:1e:e0:bd:95:d2:a8:e2:6a:95:8c:34:a9:
         12:77:fc:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEsAfffSTo4Z/jwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk
MWViM2U3NDgtZTM3Yy00MmViLTk4MzctZmNjYzA5YzNhMjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkTZjoehxmNXUKr/06r2qq3kt3THMQS7CiES
35oJJz/zurDCnmijeetIctZNg57HXKf5WZ0q4MUpUmYWHQbNze3MEfwDW5J8vwCp
TeqeBTj0hgXkI2TFC3AQFvEnWon90R9ZURcXNsDq4112oZVi683C+vVLbja3wvNO
SAT4MgDFugKUoIl6C0mYb72Ix1RVvzV3oMiMVYe6DwUvqaCh3PBbUuAxCsK7hVNS
0rhNCFj2+gJ/7dPnaW2xJpO7H+IMBstB+QVzsnLM6D4MbKycHieUURkyTPUh82j2
Vh/EeegTp/SZOMdYxoD7dDMq1hxzKJxciF0lMV7B/GjJj0QRZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLdGKa+zaXN6npppv+fQDuD5bbeKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzk5NGYzMGMtNmRiZS0z
MDc2LThlMGEtZmY2NGUyNGFhMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqHlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGrHEdN2zfgXoZo+gI02p2M79GtnpVu3d90ZfmZb+SGYFBXz32WtYbdG
Cf9rllg3VVMyHFoNytf7J4Umf5aw4NOaT1MGUI6INYMtA12FGniB+1tbwHxg98EU
+RdwkM5b23WlSY020mGbFJfC7Ox2zjJJP+kBanwk3XHl+bsWQ6U8BmJyUDC6J/3G
E6W664pqVHgGKAMkPz51B4mrGlvMxrvVxFi9yrNoYj3Q9A9qcqCm2TyYM01eqKfP
KcUFgcgi7jlNfnml9kTxD4CynBnZ3G7OtlG5RwI4mkgNIxB3KT6zo5xVc//HOEK5
WNuQYABYqh7gvZXSqOJqlYw0qRJ3/Go=
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:02:46 2026 by rpki-client