Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f0c19a32-df6f-3c05-bff4-7753f8c7f9f9.roa
File:                     f0c19a32-df6f-3c05-bff4-7753f8c7f9f9.roa (raw, json)
Hash identifier:          XPkA0kIy0Vt90Ik4n96SK7eMFEcPxW/5xb/ZB7wf7zY=
Subject key identifier:   89:17:0D:30:E6:C6:DB:CB:52:76:7F:D6:5B:AF:CA:86:74:A2:00:04
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDDCD23CA6DD1010AD36A71F3
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f0c19a32-df6f-3c05-bff4-7753f8c7f9f9.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        98.171.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cd:23:ca:6d:d1:01:0a:d3:6a:71:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=13e7098d-d14f-4683-8958-d2887b415b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:72:e9:1d:f2:24:b6:3f:28:d2:2d:8d:f8:
                    67:87:8b:16:6b:6d:22:4b:09:7d:8d:ff:41:97:45:
                    bc:22:82:b3:6d:f7:7d:12:67:8b:b4:66:58:bd:51:
                    a5:6b:45:6a:19:46:01:c1:33:8e:db:01:b7:24:61:
                    33:83:32:73:27:51:a2:a6:14:64:e1:0f:97:06:67:
                    71:bf:55:b9:ca:96:ca:eb:c1:14:cf:e4:db:b0:2b:
                    a0:76:07:60:d4:f4:7c:ae:25:5c:da:7f:bd:4b:f7:
                    5e:3d:a3:1a:04:12:48:d5:7c:2e:b5:73:02:97:4d:
                    50:47:aa:7a:80:54:03:aa:0b:a4:b4:b3:d3:4c:d2:
                    d0:de:d7:1c:c9:a5:bd:70:6b:8e:d0:ba:f2:ee:48:
                    7e:55:35:26:f2:84:83:0c:10:8e:66:f6:c0:60:1b:
                    86:61:c6:b2:8e:d2:04:54:75:83:8d:67:9b:87:7c:
                    41:7f:71:e1:a8:7e:a8:f0:7c:da:fb:24:22:e9:62:
                    45:70:d4:2c:a4:de:bc:cc:5b:13:4b:ec:06:70:cc:
                    17:47:fe:1a:7c:31:37:e8:00:15:be:6f:22:d7:b2:
                    42:07:0b:e6:39:65:d3:8f:9c:b3:5e:d1:c5:c3:92:
                    13:73:85:5f:67:be:52:33:f7:2e:83:75:71:3a:2a:
                    88:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:17:0D:30:E6:C6:DB:CB:52:76:7F:D6:5B:AF:CA:86:74:A2:00:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f0c19a32-df6f-3c05-bff4-7753f8c7f9f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.171.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:4a:fa:18:b4:a6:8c:7d:dc:04:bd:9c:4d:7c:4f:38:ae:fe:
         1e:61:be:04:7e:0b:6e:55:ac:a0:60:b4:73:c9:cc:50:ed:88:
         7f:5e:86:14:ff:b4:8e:21:ad:1e:bb:6b:ab:94:07:ed:71:59:
         ec:9f:34:e4:9e:8e:fd:19:0c:c8:a4:fd:f3:c4:1a:45:44:f2:
         84:3a:65:18:6b:b3:ee:b2:fa:d6:32:00:63:56:25:43:d5:db:
         8d:0f:17:86:6d:86:74:a3:e5:54:67:7b:9b:35:85:60:8b:01:
         94:1c:f6:5b:09:03:06:01:4e:fc:fc:93:25:40:6d:30:a0:40:
         85:fc:de:be:14:40:cd:96:7d:02:12:69:15:34:52:b2:ba:24:
         39:e4:9f:fe:9b:a0:4f:28:43:45:d8:71:00:d5:10:41:97:00:
         b3:9e:40:d7:45:74:d4:e3:75:ec:9e:dc:24:a0:82:2b:e7:b9:
         9e:5d:dc:b3:77:e3:38:c7:b3:92:45:66:d2:8e:6f:2b:0f:72:
         7d:33:b4:d3:be:56:ec:ac:a6:a3:e3:35:87:e4:21:e7:37:b1:
         a0:a5:5b:f9:ee:a5:f2:4d:1e:c8:7b:5b:b4:9c:34:60:c9:83:
         3a:89:09:05:02:58:fe:ab:8d:91:b0:43:c0:75:ac:02:67:38:
         c9:2b:b2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:29 2026 by rpki-client