Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb71d41f-e2ea-3900-83c4-5dab7dcb1277.roa
File:                     bb71d41f-e2ea-3900-83c4-5dab7dcb1277.roa (raw, json)
Hash identifier:          BsmxnO6ot5kPHLxy+0BkEH9CTRexqoIogCAcmHTexbw=
Subject key identifier:   1D:8D:0F:28:FA:E0:B5:05:97:81:08:E6:EE:8B:1B:EF:3F:89:AB:CD
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE097842341AD5F95E889B100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb71d41f-e2ea-3900-83c4-5dab7dcb1277.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        98.164.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:84:23:41:ad:5f:95:e8:89:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=1096516e-9635-41c9-ac99-b4bd0d5071ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:c9:3d:20:1d:e1:55:9e:5e:89:3e:f8:5b:
                    4f:94:36:e4:49:cb:3a:d8:18:2c:3c:99:e3:6f:d9:
                    fb:fb:a1:1d:79:da:c2:d0:1c:59:8e:2f:5f:46:58:
                    62:90:66:ef:46:34:8d:f7:3a:df:da:51:37:29:fb:
                    b9:2d:9e:52:5b:be:89:4d:57:ef:b5:f2:94:f5:75:
                    d2:29:a5:27:0b:9c:ed:72:f0:34:97:78:ec:51:27:
                    08:51:66:80:85:1c:5a:54:45:f6:e1:0d:64:b3:01:
                    73:3e:75:b6:b2:64:84:c7:cb:cf:7a:74:e8:dc:cd:
                    7a:92:69:c6:ed:ef:e9:68:7c:28:10:3c:16:78:68:
                    83:6e:db:03:c9:8c:88:dd:8f:ea:94:1c:17:75:55:
                    39:95:cc:5b:f3:67:25:fd:95:d1:2b:27:5a:ce:8a:
                    2c:af:66:2f:a8:93:39:21:a6:f2:62:9d:ed:5a:06:
                    60:79:ad:a5:22:43:3f:46:75:88:9b:e8:9a:af:07:
                    1a:97:22:e8:05:db:27:44:17:f4:31:7a:0a:30:97:
                    0a:04:16:cd:81:43:37:f5:64:bf:09:4e:dc:54:b6:
                    bd:ee:73:d4:8f:d5:fa:59:18:60:a4:cc:a1:50:44:
                    cd:ad:c9:9b:b1:f8:bf:c0:d6:cb:bd:38:12:c7:3c:
                    29:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8D:0F:28:FA:E0:B5:05:97:81:08:E6:EE:8B:1B:EF:3F:89:AB:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb71d41f-e2ea-3900-83c4-5dab7dcb1277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.164.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:bb:cf:4f:8c:ea:37:b7:44:91:20:0a:9d:0a:e4:84:9b:d2:
         e6:27:17:56:d3:b5:7c:07:70:6b:27:d1:45:ff:8b:7f:d8:51:
         1d:74:68:2d:4e:fa:ce:42:d9:e8:fb:55:f9:d6:34:79:b6:f8:
         2c:d7:3b:39:a3:25:26:0e:96:20:b3:41:98:08:d9:74:f9:66:
         cf:75:db:f8:40:54:3d:5d:d9:68:75:55:0c:d3:11:f7:45:07:
         2f:be:c7:43:a2:66:ca:a9:2c:65:1d:48:b4:87:e4:ef:88:f3:
         97:ee:f0:c3:bf:b0:98:b5:55:c2:32:6e:be:ca:ec:df:4c:88:
         d4:7e:50:a9:62:04:32:17:27:e8:25:2c:21:13:5a:7c:18:8d:
         55:c1:8b:d3:b8:20:ef:bd:56:61:fd:a2:6b:f0:69:dc:d6:25:
         6a:1c:3c:a1:31:98:5e:a2:5f:fd:30:e9:69:f7:33:0d:35:27:
         1f:ed:6c:19:0a:19:75:6f:ca:12:f9:df:a3:29:20:bc:44:05:
         28:68:f0:bd:46:a5:c3:e3:37:5f:27:75:7a:2e:62:94:6e:f1:
         e2:f1:2d:e9:f2:24:d2:3f:eb:7d:05:47:3b:a9:f1:45:49:52:
         a0:9d:cd:ae:4e:77:4d:be:1e:7f:6f:dc:fe:0f:7a:84:8d:23:
         da:c6:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:14 2026 by rpki-client