Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99f5d0da-3f88-37e4-aecf-036a801925c0.roa
File:                     99f5d0da-3f88-37e4-aecf-036a801925c0.roa (raw, json)
Hash identifier:          Z6B2rvBfIlyeS+MYf78cfSsBJj9QezttK4S7SyM7/X8=
Subject key identifier:   0F:79:3D:7C:25:96:AB:74:53:69:6E:6A:8C:A1:4D:87:F9:13:58:5E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDDCCAB995D8CD5D61CADF900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99f5d0da-3f88-37e4-aecf-036a801925c0.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        98.168.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:ab:99:5d:8c:d5:d6:1c:ad:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=8457c0bc-ebc8-443f-a5e2-3422b5e3e05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:66:3f:ae:3a:92:a8:8f:51:56:5c:44:b7:a8:
                    20:4c:35:94:42:b8:e1:71:3a:db:eb:51:2f:e4:64:
                    a1:f2:c4:52:2a:79:bb:7b:07:31:a3:03:84:bd:35:
                    41:36:f7:75:97:b5:98:c0:74:43:eb:f0:17:47:da:
                    25:99:b9:73:2b:29:8a:10:77:02:01:df:02:2b:37:
                    f5:99:17:f4:2b:6e:44:18:18:76:69:e0:ae:3b:d3:
                    eb:25:93:60:0e:14:a4:fc:13:05:81:96:20:38:c1:
                    cb:9e:f5:21:7b:19:b4:27:ed:1d:41:b8:68:9c:d1:
                    85:f8:e2:91:ee:a7:0b:be:49:e5:6f:cb:5c:cb:a9:
                    ec:4e:6b:64:bb:2a:86:a9:9e:8d:7a:b7:bf:42:32:
                    3d:e9:87:d6:fd:cb:c1:60:ac:35:18:60:8d:ea:c6:
                    da:d2:ed:00:1e:26:f6:b5:c5:0f:26:cf:6d:a1:93:
                    49:10:57:1d:fe:79:b8:77:5e:49:99:a1:dd:54:10:
                    19:60:ec:a8:95:76:e0:d6:b1:aa:40:6f:33:29:9f:
                    b3:49:5b:28:48:1a:cd:73:5b:07:0e:cf:07:80:0f:
                    5d:de:aa:0b:1c:75:d5:79:02:fa:3c:41:b2:55:3a:
                    f0:40:8d:91:77:ba:d3:97:cd:e7:80:e9:ff:23:23:
                    d0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:79:3D:7C:25:96:AB:74:53:69:6E:6A:8C:A1:4D:87:F9:13:58:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99f5d0da-3f88-37e4-aecf-036a801925c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.168.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:5e:66:d5:9d:3d:3d:90:2d:2b:00:1b:27:7d:92:b7:5b:93:
         72:f8:54:ac:95:28:35:09:dd:4d:44:f1:a3:81:14:95:60:48:
         e6:f3:6c:29:77:5d:ec:15:15:7e:dd:67:89:02:62:c7:6a:a4:
         97:fd:71:8e:0c:6d:0d:72:57:b9:f2:a3:ff:dc:8a:8c:b4:6f:
         bc:21:27:48:b2:56:a4:e5:50:55:81:a2:69:79:28:dc:74:f9:
         a1:c7:13:4d:01:06:07:74:ce:e3:b5:b4:9e:d5:cb:5b:4f:4e:
         aa:c3:36:aa:e0:ad:66:a5:06:f8:05:fa:0e:4a:37:be:9c:18:
         0e:e2:4b:d9:be:a0:65:f8:9b:d0:44:f8:0f:72:bb:a1:e2:dc:
         cb:92:d3:9c:ca:d4:75:4d:b0:a7:e1:0a:f1:3b:bd:30:89:9f:
         65:ab:dc:97:15:fc:0b:bb:78:fd:1b:4a:68:a9:e8:07:4e:e6:
         15:fd:5a:d7:44:bc:f7:de:16:c4:8c:3f:c4:27:ae:1f:0e:3f:
         1b:bc:41:ab:be:5c:79:37:18:c0:5e:ad:de:03:e3:a6:b5:56:
         7e:2c:e0:90:d7:41:10:cc:be:b6:af:82:f3:4c:3e:c2:d0:d5:
         89:e1:3b:0f:d7:f1:8f:ba:fd:ca:30:3f:e8:6f:15:3a:14:7d:
         bf:51:47:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:49:10 2026 by rpki-client