Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f77e4c3-0ebd-3ca5-9e2f-beb11ad99e9a.roa
File:                     7f77e4c3-0ebd-3ca5-9e2f-beb11ad99e9a.roa (raw, json)
Hash identifier:          eEwAqhjGmjRwjH/GXqNQnCT1jG03L3B9ScBQiUfMrIE=
Subject key identifier:   35:71:64:AC:3A:E6:4A:3C:02:7A:E1:E1:8B:2F:B5:8E:CB:1F:23:FE
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE09796E63D387FDE55F7A3C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f77e4c3-0ebd-3ca5-9e2f-beb11ad99e9a.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        98.160.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:96:e6:3d:38:7f:de:55:f7:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=2ab90542-060c-41ff-9baa-764ba809547b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:97:0b:31:52:c2:cc:27:fe:5a:25:eb:ca:44:
                    57:39:24:a3:a8:19:81:f0:61:72:ca:76:d7:a4:67:
                    be:ee:db:21:67:05:43:5b:48:df:82:d6:25:78:25:
                    1d:9c:a9:55:dc:18:d7:97:a6:ec:d5:e8:4d:7f:24:
                    82:b5:16:bc:43:1e:ba:37:8f:5b:be:05:a0:68:cd:
                    23:e6:ec:d6:2b:b5:c0:9f:b9:cf:75:a6:79:43:97:
                    69:0e:a8:59:e1:20:0a:9f:53:26:ec:44:57:a3:e7:
                    27:8c:7a:01:93:e9:a8:58:f4:9a:a3:f9:34:d0:44:
                    35:5e:0f:8d:ed:8e:a4:1c:ec:bc:a8:89:92:7b:f1:
                    06:3f:4b:15:62:2d:37:30:f0:89:41:db:24:82:df:
                    a1:f7:21:59:07:b4:43:6c:21:41:45:f6:fe:82:12:
                    cb:6d:68:90:77:75:d6:44:90:23:00:f5:ec:23:43:
                    49:bb:cf:83:1a:25:5d:e4:d4:41:9e:08:13:a3:e9:
                    d7:01:2f:07:c1:1c:d1:29:70:65:a8:14:96:6b:2e:
                    ec:82:2f:99:cd:19:48:68:09:3d:6b:ff:ed:c4:df:
                    2f:23:16:10:0c:10:64:ea:08:b2:6b:2e:47:e1:ab:
                    1a:6e:c0:0b:8d:f1:d0:a8:03:0b:b4:ca:db:f9:a8:
                    71:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:71:64:AC:3A:E6:4A:3C:02:7A:E1:E1:8B:2F:B5:8E:CB:1F:23:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f77e4c3-0ebd-3ca5-9e2f-beb11ad99e9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.160.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b2:e0:7b:92:8a:9c:83:b6:83:99:88:e3:0e:cf:a1:b7:47:
         6d:c3:7e:89:c2:d8:30:28:5e:aa:e8:df:fd:0e:f3:34:0e:c3:
         d0:cf:ed:07:b8:11:08:49:c0:b8:bc:61:b3:3d:cc:68:8b:97:
         86:06:fd:24:3e:8a:8c:0e:7a:c6:7e:7b:2a:1f:26:18:ed:50:
         a1:8c:dc:1f:0f:4c:5c:0e:e2:72:b8:01:54:86:4b:4b:4e:ad:
         46:c3:d2:61:7b:07:8f:83:7d:88:b0:45:f9:56:72:8f:67:fc:
         95:18:da:99:c7:81:6f:f2:ac:15:5d:89:75:8b:f1:1a:cc:e6:
         43:38:32:08:75:20:e7:d9:05:01:03:a2:06:97:ac:87:e1:73:
         8e:c8:cd:8d:4a:0e:3a:2a:cf:db:be:a7:da:0d:3c:16:17:a2:
         48:fd:08:38:08:47:13:46:2a:ef:eb:90:cc:1a:49:8d:c6:9e:
         86:c3:1d:6c:05:1e:07:fb:2b:05:8e:dd:df:19:fd:c1:45:1a:
         5a:55:49:92:95:04:5e:1e:6c:0f:07:51:cf:0f:01:cd:93:f0:
         28:20:47:c3:ea:52:68:25:71:0b:75:63:cd:62:d8:43:a3:1a:
         28:2d:e3:81:40:03:79:9d:35:40:ec:e0:96:74:8e:20:95:81:
         05:d2:03:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl5bmPTh/3lX3o8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk
MmFiOTA1NDItMDYwYy00MWZmLTliYWEtNzY0YmE4MDk1NDdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55cLMVLCzCf+WiXrykRXOSSjqBmB8GFyynbX
pGe+7tshZwVDW0jfgtYleCUdnKlV3BjXl6bs1ehNfySCtRa8Qx66N49bvgWgaM0j
5uzWK7XAn7nPdaZ5Q5dpDqhZ4SAKn1Mm7ERXo+cnjHoBk+moWPSao/k00EQ1Xg+N
7Y6kHOy8qImSe/EGP0sVYi03MPCJQdskgt+h9yFZB7RDbCFBRfb+ghLLbWiQd3XW
RJAjAPXsI0NJu8+DGiVd5NRBnggTo+nXAS8HwRzRKXBlqBSWay7sgi+ZzRlIaAk9
a//txN8vIxYQDBBk6giyay5H4asabsALjfHQqAMLtMrb+ahxVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVxZKw65ko8Anrh4YsvtY7LHyP+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2Y3N2U0YzMtMGViZC0z
Y2E1LTllMmYtYmViMTFhZDk5ZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqDKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2y4HuSipyDtoOZiOMOz6G3R23DfonC2DAoXqro3/0O8zQOw9DP7Qe4
EQhJwLi8YbM9zGiLl4YG/SQ+iowOesZ+eyofJhjtUKGM3B8PTFwO4nK4AVSGS0tO
rUbD0mF7B4+DfYiwRflWco9n/JUY2pnHgW/yrBVdiXWL8RrM5kM4Mgh1IOfZBQED
ogaXrIfhc47IzY1KDjoqz9u+p9oNPBYXokj9CDgIRxNGKu/rkMwaSY3GnobDHWwF
Hgf7KwWO3d8Z/cFFGlpVSZKVBF4ebA8HUc8PAc2T8CggR8PqUmglcQt1Y81i2EOj
Gigt44FAA3mdNUDs4JZ0jiCVgQXSA/I=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:23 2026 by rpki-client