Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/801ef0ee-13db-3b7b-9ed8-007fdd727fd9.roa
File:                     801ef0ee-13db-3b7b-9ed8-007fdd727fd9.roa (raw, json)
Hash identifier:          zPPzcX97F34JN/uEEOES9lLtiYZyI7SYlWUrKPAWkX0=
Subject key identifier:   84:E3:CC:5B:4A:D6:F9:A5:45:55:82:8F:63:E7:50:2B:CB:EB:50:2E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE097A11B30B510902018E900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/801ef0ee-13db-3b7b-9ed8-007fdd727fd9.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        98.167.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:a1:1b:30:b5:10:90:20:18:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=c8217083-2fb7-41b1-bbe4-4633ac1247d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:21:ed:01:8b:1e:1a:00:04:2a:a3:d5:a2:1f:
                    13:19:06:cd:38:d2:53:dd:c0:fd:e6:cb:08:14:09:
                    de:c4:26:be:f1:89:6f:72:56:1c:d7:69:7e:8d:58:
                    15:4e:d3:02:8d:87:bd:ed:af:bc:06:a7:6f:d0:05:
                    8f:4e:32:ae:c4:5c:60:da:f2:40:12:b8:31:6c:83:
                    15:18:dc:1e:db:de:b6:ba:b6:28:5a:04:b6:75:a8:
                    66:26:98:ed:59:e9:3d:af:fc:18:76:ad:99:1e:79:
                    df:dc:3f:24:ef:91:7a:98:52:a1:58:63:0f:fb:39:
                    fe:54:a7:39:da:1c:f5:05:cd:4a:3d:23:51:51:c0:
                    f2:24:42:8c:82:b1:d6:9f:98:34:66:bc:e2:76:1d:
                    8c:52:77:e0:84:9d:cd:a6:56:dd:ff:ef:49:98:fc:
                    75:a5:91:fa:82:cf:34:ee:67:61:49:5f:ad:23:3c:
                    8a:c6:12:79:a4:d3:59:bc:60:30:93:d5:d5:80:44:
                    34:86:a1:54:b0:17:bf:86:38:20:cd:d2:11:b9:ee:
                    42:ae:f0:0c:74:d4:64:99:4e:57:fe:39:23:94:d3:
                    75:03:3b:93:8d:18:93:ae:aa:09:6a:15:9f:3c:7c:
                    e8:ac:69:fe:ab:71:6f:13:dd:cd:3b:6a:64:41:ee:
                    7e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E3:CC:5B:4A:D6:F9:A5:45:55:82:8F:63:E7:50:2B:CB:EB:50:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/801ef0ee-13db-3b7b-9ed8-007fdd727fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.167.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b0:dd:ae:b5:7b:0f:ad:30:20:4b:ec:c9:bc:3e:d9:a5:37:
         41:e9:2a:94:1b:32:16:ac:70:8f:c3:0f:3d:11:3f:99:3d:6f:
         e8:0e:8d:a8:de:57:3c:b5:85:f3:fe:e1:30:fa:42:21:92:05:
         ab:69:10:0d:fb:37:fc:71:15:f8:e1:fe:54:3b:d7:c5:79:05:
         45:52:2b:64:40:ea:c8:3b:de:fc:db:7c:01:75:f8:d2:50:23:
         d5:c1:f4:2e:37:11:f4:cc:08:31:00:1a:8a:63:f4:8b:d2:01:
         99:e3:9b:87:9d:e1:c0:74:4c:a6:d5:68:0b:e0:e9:8e:e3:98:
         8c:71:6b:39:77:5c:32:c9:f5:9a:39:f2:d3:2f:db:1f:6d:f9:
         2c:fb:34:2e:bf:f7:82:e6:3f:b7:1b:88:8c:5a:09:14:d0:b8:
         16:ac:d0:22:79:66:bd:6e:c9:64:42:0a:3c:ee:7d:7b:2e:7d:
         ae:c6:9b:4c:6c:2e:7d:aa:60:b6:52:63:c3:9c:8e:1a:cc:2c:
         34:1d:c6:8f:42:69:05:1f:81:ba:8e:3e:02:01:17:ca:da:81:
         e0:a2:ee:8f:db:93:88:e1:11:84:07:e6:e7:9b:f7:f1:58:01:
         52:00:52:a0:53:80:ae:ac:e9:1d:cf:8a:cb:54:50:88:89:16:
         f1:00:6c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:42:39 2026 by rpki-client