Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2334574-45f4-339b-82d4-1924b014991b.roa
File:                     b2334574-45f4-339b-82d4-1924b014991b.roa (raw, json)
Hash identifier:          /C+rOms7tc2d4gfhz3O5TQJBAPYhbUdZ1MERnrromHU=
Subject key identifier:   86:36:5C:41:32:21:28:6F:1C:29:C8:BA:95:C9:20:53:FB:31:D9:6A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF324EF5DF5FECC3C4564500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2334574-45f4-339b-82d4-1924b014991b.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        98.179.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:4e:f5:df:5f:ec:c3:c4:56:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=8ce12485-ea64-40d6-b4bc-9a90ec7db054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8b:23:88:b6:ae:8a:87:b2:ab:13:36:e4:14:
                    ea:85:4d:e8:e4:14:51:b3:2e:2a:29:69:54:08:16:
                    df:f1:e6:97:02:d9:72:69:01:36:f5:6d:28:de:b4:
                    34:ab:b1:25:0d:cc:f6:95:5a:a2:a4:34:fd:ad:78:
                    2e:b2:66:dd:3d:65:6c:d4:4f:51:31:78:82:80:3c:
                    0c:e4:aa:07:69:d6:f2:19:70:e2:f9:dc:d3:eb:4c:
                    24:7b:b6:50:b2:9b:d6:11:a8:36:74:3f:a6:6c:2c:
                    f5:52:90:98:9e:fc:25:af:c4:3c:d5:69:95:c9:65:
                    9c:33:b1:01:4d:92:c7:07:64:79:ef:8c:91:f5:ca:
                    44:1f:d2:7c:fc:41:c1:17:68:92:66:47:92:a7:29:
                    ed:07:5f:3a:79:14:c0:d3:4f:01:0b:3e:75:3d:7e:
                    af:8f:e9:d3:db:7e:d9:c2:87:e6:b5:fe:46:7b:6b:
                    ca:43:35:d3:95:c0:89:4f:f5:0a:26:a0:52:70:67:
                    2c:45:35:90:67:a0:3d:b0:31:c0:e2:63:74:39:81:
                    f5:2e:b7:6a:9f:c4:1b:6a:ac:37:77:ec:13:0b:84:
                    86:df:c9:28:22:fc:c9:b8:b1:5a:d2:e3:3e:37:2b:
                    ba:1f:69:34:20:cc:42:c6:f1:3e:6b:98:e9:2b:a2:
                    92:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:36:5C:41:32:21:28:6F:1C:29:C8:BA:95:C9:20:53:FB:31:D9:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2334574-45f4-339b-82d4-1924b014991b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.179.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:6f:d1:df:2c:92:60:4a:48:d7:27:e4:04:f8:f3:04:7c:06:
         0e:c1:66:ec:1a:de:9f:fe:6a:24:d3:ac:fa:e4:fd:0e:e5:0e:
         c2:d5:a6:99:86:06:0e:7e:9d:1e:61:94:40:e2:95:9f:80:b1:
         b1:03:3c:5e:02:0f:d3:62:b9:b1:bd:41:c7:b0:7c:04:84:bb:
         cf:f2:40:c1:45:72:75:f2:18:85:09:99:e8:e3:98:01:a0:c5:
         95:34:d3:0c:56:46:ce:b0:67:a7:34:94:d2:66:cf:39:0b:d3:
         e5:e6:ec:a5:ec:89:8e:1c:0d:ab:ca:e4:80:88:0e:74:7a:39:
         28:0a:48:9a:92:ce:53:9f:01:56:52:ba:c7:86:da:70:60:88:
         bb:13:5b:41:28:df:dc:7e:1e:e2:79:79:63:23:3e:56:d2:e0:
         30:7d:ea:20:21:1f:e4:a2:0e:73:32:25:a5:b0:3c:74:1a:cc:
         58:08:08:2e:f2:01:6e:d3:25:e8:18:ad:e9:b3:69:62:7e:48:
         84:b0:99:35:90:81:66:8f:f4:db:d5:0a:82:b5:c0:ca:86:a3:
         7a:0d:15:8b:22:f2:2b:a7:bd:4f:61:ef:d6:d4:0d:fd:b9:1e:
         79:a7:ee:d1:f7:eb:29:44:55:54:a3:d2:3f:70:13:14:1f:ca:
         4e:b8:18:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMk7131/sw8RWRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk
OGNlMTI0ODUtZWE2NC00MGQ2LWI0YmMtOWE5MGVjN2RiMDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24sjiLauioeyqxM25BTqhU3o5BRRsy4qKWlU
CBbf8eaXAtlyaQE29W0o3rQ0q7ElDcz2lVqipDT9rXgusmbdPWVs1E9RMXiCgDwM
5KoHadbyGXDi+dzT60wke7ZQspvWEag2dD+mbCz1UpCYnvwlr8Q81WmVyWWcM7EB
TZLHB2R574yR9cpEH9J8/EHBF2iSZkeSpyntB186eRTA008BCz51PX6vj+nT237Z
wofmtf5Ge2vKQzXTlcCJT/UKJqBScGcsRTWQZ6A9sDHA4mN0OYH1Lrdqn8Qbaqw3
d+wTC4SG38koIvzJuLFa0uM+Nyu6H2k0IMxCxvE+a5jpK6KSOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIY2XEEyIShvHCnIupXJIFP7MdlqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjIzMzQ1NzQtNDVmNC0z
MzliLTgyZDQtMTkyNGIwMTQ5OTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYrNsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxv0d8skmBKSNcn5AT48wR8Bg7BZuwa3p/+aiTTrPrk/Q7lDsLVppmG
Bg5+nR5hlEDilZ+AsbEDPF4CD9NiubG9QcewfASEu8/yQMFFcnXyGIUJmejjmAGg
xZU00wxWRs6wZ6c0lNJmzzkL0+Xm7KXsiY4cDavK5ICIDnR6OSgKSJqSzlOfAVZS
useG2nBgiLsTW0Eo39x+HuJ5eWMjPlbS4DB96iAhH+SiDnMyJaWwPHQazFgICC7y
AW7TJegYremzaWJ+SISwmTWQgWaP9NvVCoK1wMqGo3oNFYsi8iunvU9h79bUDf25
Hnmn7tH36ylEVVSj0j9wExQfyk64GOE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:15 2026 by rpki-client