Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddc755d4-ec28-3aae-9102-9439c578075c.roa
File:                     ddc755d4-ec28-3aae-9102-9439c578075c.roa (raw, json)
Hash identifier:          LGYVfOcWFmBlw0ooYZJftAKhtg7q5i/RxfLqJ+9sD/U=
Subject key identifier:   62:9F:B7:4F:DF:5D:8A:6D:56:88:F9:2E:0C:B6:83:FC:EA:DE:F9:92
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDDCD132D23EFFA7D2B000380
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddc755d4-ec28-3aae-9102-9439c578075c.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        98.177.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cd:13:2d:23:ef:fa:7d:2b:00:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=ee86be02-a318-4328-b1bd-fac0c7a4b966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:8d:89:4e:cf:6a:96:6b:ef:f3:26:fb:57:
                    ae:95:84:f2:3d:4e:c5:bb:68:44:7b:a7:b0:53:2d:
                    bf:18:b0:86:86:50:13:8d:5a:66:06:52:01:0b:63:
                    ed:09:5a:d0:58:d0:71:69:52:cd:bc:ea:f0:c9:2b:
                    cc:ce:2f:54:7d:fa:ee:29:00:4f:d2:e0:bd:37:55:
                    56:ab:53:11:31:6a:71:25:7c:fb:75:37:79:59:58:
                    2a:92:12:b9:26:8b:d4:04:33:2f:43:47:b9:aa:fc:
                    f5:92:46:00:d2:4d:72:cd:c8:4e:43:1f:17:aa:c1:
                    be:7d:a2:86:d4:34:1f:76:5f:61:11:ed:8f:c0:2e:
                    78:50:89:21:c8:6d:eb:18:0e:61:af:8c:9f:ee:ad:
                    b6:1b:ba:0d:14:c4:b3:0c:54:79:15:5e:cb:fb:76:
                    eb:15:d0:a8:23:1c:4d:3b:17:be:c1:d0:0a:ac:55:
                    9b:54:82:5d:04:27:e0:46:de:27:92:85:54:f9:46:
                    47:9f:87:69:fc:12:c2:d4:14:47:9c:fa:46:6f:87:
                    80:cb:53:c9:aa:d4:db:a6:77:7d:7a:20:88:54:1d:
                    5a:83:5e:66:97:08:34:34:0c:79:b0:d3:70:a2:25:
                    bf:81:ef:f3:41:f5:71:24:ec:63:3c:c5:06:54:9d:
                    bf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9F:B7:4F:DF:5D:8A:6D:56:88:F9:2E:0C:B6:83:FC:EA:DE:F9:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddc755d4-ec28-3aae-9102-9439c578075c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.177.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:e4:43:29:ac:64:c6:50:f1:ee:fb:c6:ae:ac:77:95:28:b7:
         13:da:3a:a5:6d:ef:ae:1a:a0:63:28:23:ed:b2:4c:1b:45:27:
         40:da:6b:26:9c:57:cc:4f:56:96:49:f7:7b:60:a0:38:55:75:
         e7:89:7b:f2:fb:ed:71:b7:60:d6:d5:84:17:6f:bf:1e:fc:a4:
         d9:9f:41:46:d1:5f:bb:01:5f:0f:3f:87:b0:da:07:83:80:f4:
         7e:be:d2:46:24:14:98:9f:2f:00:00:e2:d3:8d:fa:7e:e3:96:
         84:26:8a:6d:70:b5:6f:ee:93:8b:da:23:64:dd:43:f7:fb:55:
         3d:84:1c:de:80:9a:92:2e:a0:5c:e5:ce:c6:39:3b:91:f8:a4:
         06:f6:0a:71:66:e1:15:57:4a:c8:55:0a:3e:e5:c7:b8:d2:be:
         bb:a5:a8:94:72:23:d0:d1:e8:67:5b:4e:7b:d7:40:03:47:56:
         93:32:bb:4d:97:dd:7c:c3:18:2d:38:56:9f:56:55:7c:8f:92:
         25:eb:24:69:b1:22:9c:52:1b:94:37:19:57:5a:45:e8:c4:ae:
         40:11:5c:e1:13:29:aa:62:c6:8a:27:95:17:e5:ea:39:af:bf:
         df:cc:7f:89:6d:82:49:88:ca:32:26:f8:51:70:04:87:52:e3:
         c0:e0:bc:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzRMtI+/6fSsAA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk
ZWU4NmJlMDItYTMxOC00MzI4LWIxYmQtZmFjMGM3YTRiOTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob6NiU7PapZr7/Mm+1eulYTyPU7Fu2hEe6ew
Uy2/GLCGhlATjVpmBlIBC2PtCVrQWNBxaVLNvOrwySvMzi9UffruKQBP0uC9N1VW
q1MRMWpxJXz7dTd5WVgqkhK5JovUBDMvQ0e5qvz1kkYA0k1yzchOQx8XqsG+faKG
1DQfdl9hEe2PwC54UIkhyG3rGA5hr4yf7q22G7oNFMSzDFR5FV7L+3brFdCoIxxN
Oxe+wdAKrFWbVIJdBCfgRt4nkoVU+UZHn4dp/BLC1BRHnPpGb4eAy1PJqtTbpnd9
eiCIVB1ag15mlwg0NAx5sNNwoiW/ge/zQfVxJOxjPMUGVJ2/+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGKft0/fXYptVoj5Lgy2g/zq3vmSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGRjNzU1ZDQtZWMyOC0z
YWFlLTkxMDItOTQzOWM1NzgwNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYrHuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTkQymsZMZQ8e77xq6sd5UotxPaOqVt764aoGMoI+2yTBtFJ0Daayac
V8xPVpZJ93tgoDhVdeeJe/L77XG3YNbVhBdvvx78pNmfQUbRX7sBXw8/h7DaB4OA
9H6+0kYkFJifLwAA4tON+n7jloQmim1wtW/uk4vaI2TdQ/f7VT2EHN6AmpIuoFzl
zsY5O5H4pAb2CnFm4RVXSshVCj7lx7jSvrulqJRyI9DR6GdbTnvXQANHVpMyu02X
3XzDGC04Vp9WVXyPkiXrJGmxIpxSG5Q3GVdaRejErkARXOETKapixoonlRfl6jmv
v9/Mf4ltgkmIyjIm+FFwBIdS48DgvPY=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:10:24 2026 by rpki-client