Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff2fa2d7-fdb9-3856-a632-cc72a55f2b0a.roa
File:                     ff2fa2d7-fdb9-3856-a632-cc72a55f2b0a.roa (raw, json)
Hash identifier:          I06+SM0ZbAvrA7AorOZl8bH2SIjGnN2a8vvXcC5Rxw8=
Subject key identifier:   19:EC:6F:48:25:D4:7C:B2:16:62:37:67:A8:20:FD:6A:02:6D:43:55
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDDCD35A5FF77E67C29D52840
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff2fa2d7-fdb9-3856-a632-cc72a55f2b0a.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        98.165.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cd:35:a5:ff:77:e6:7c:29:d5:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=5f0e528c-bd6c-4c6a-b6bf-17b7c95ca77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:82:6d:b3:59:61:27:85:27:16:15:a5:93:
                    ad:b5:40:e4:a4:e9:f0:84:0a:4e:d0:87:2f:85:21:
                    76:c3:6a:16:77:0b:7f:2c:a8:e3:dc:c0:69:60:b9:
                    9d:db:e2:66:12:b4:92:6a:f8:9c:fc:97:9f:22:b1:
                    8d:71:c7:20:d5:b0:0b:db:89:67:64:9f:70:e0:85:
                    9a:40:c1:56:a0:8a:15:d0:6a:ef:d9:cf:bf:f2:28:
                    a2:8a:95:56:22:6c:ce:4a:65:69:1f:a2:a3:e1:e4:
                    7c:86:52:07:fc:88:2a:bf:b1:e4:0e:cb:2e:69:1b:
                    82:d5:45:e4:10:17:ff:39:c3:56:00:3f:e1:cb:e5:
                    6e:48:dc:3c:47:cc:69:9a:7e:90:9d:69:1a:4a:30:
                    45:ff:93:35:1e:d3:16:76:ad:fb:ed:a3:2c:fb:8f:
                    a1:81:3a:1e:34:d1:f9:5d:0c:c2:e1:ae:c6:94:6d:
                    d6:d0:0c:32:02:4f:45:7b:23:c9:99:6c:b3:6f:74:
                    6c:72:ea:b7:85:86:3e:63:42:c3:ff:03:0c:c0:ab:
                    9d:f2:2b:7c:6a:3d:6b:d7:84:5e:07:ea:d8:6c:10:
                    2d:ab:f9:b1:66:f9:eb:6f:15:b1:b5:64:b6:3b:ba:
                    d0:a0:ad:e6:3f:f5:f5:82:0d:ba:2a:24:1a:06:30:
                    3e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EC:6F:48:25:D4:7C:B2:16:62:37:67:A8:20:FD:6A:02:6D:43:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff2fa2d7-fdb9-3856-a632-cc72a55f2b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.165.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:78:07:7c:d1:cd:18:b9:af:45:73:75:68:a4:73:d0:ee:bf:
         fe:46:01:b2:c5:9c:4d:2a:c5:27:2e:3d:af:ee:0f:bd:54:a7:
         0a:50:ec:99:be:e7:60:1a:03:7c:bd:38:49:7c:7b:ab:c0:fd:
         a1:ce:6a:f8:81:2a:dd:97:b6:74:c0:9c:6f:e2:33:c6:39:50:
         f0:4d:7b:e6:1e:28:82:6e:65:28:ed:5f:bc:1d:9d:22:c7:1a:
         0b:10:05:37:ee:8d:05:26:d4:d2:ef:6c:85:0b:8a:35:1f:24:
         17:85:00:49:4c:5b:de:cf:f9:e4:e0:a8:f9:24:00:32:f4:06:
         bc:e6:ee:89:16:d1:3d:bf:74:da:f7:24:56:87:af:9c:4f:d0:
         93:7e:5d:8c:25:28:cc:73:b7:aa:d1:89:31:2e:e8:15:01:af:
         9d:69:7d:f5:08:89:78:53:45:3b:0c:46:02:a4:dd:6c:f0:2a:
         55:44:c7:d3:a7:b8:2f:df:38:ad:8b:ab:22:79:8d:86:ee:f1:
         e2:8b:79:79:ee:83:3e:67:66:05:32:08:00:88:11:2e:4d:42:
         16:f2:9f:35:ee:ca:c5:34:74:4b:ae:72:c5:94:d5:11:3c:02:
         5f:1f:59:3c:32:2a:2d:2b:08:73:56:7b:b4:7f:16:a5:8e:58:
         23:ff:3d:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzTWl/3fmfCnVKEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk
NWYwZTUyOGMtYmQ2Yy00YzZhLWI2YmYtMTdiN2M5NWNhNzdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS2CbbNZYSeFJxYVpZOttUDkpOnwhApO0Icv
hSF2w2oWdwt/LKjj3MBpYLmd2+JmErSSavic/JefIrGNcccg1bAL24lnZJ9w4IWa
QMFWoIoV0Grv2c+/8iiiipVWImzOSmVpH6Kj4eR8hlIH/Igqv7HkDssuaRuC1UXk
EBf/OcNWAD/hy+VuSNw8R8xpmn6QnWkaSjBF/5M1HtMWdq377aMs+4+hgToeNNH5
XQzC4a7GlG3W0AwyAk9FeyPJmWyzb3Rscuq3hYY+Y0LD/wMMwKud8it8aj1r14Re
B+rYbBAtq/mxZvnrbxWxtWS2O7rQoK3mP/X1gg26KiQaBjA+6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBnsb0gl1HyyFmI3Z6gg/WoCbUNVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmYyZmEyZDctZmRiOS0z
ODU2LWE2MzItY2M3MmE1NWYyYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqV/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHF4B3zRzRi5r0VzdWikc9Duv/5GAbLFnE0qxScuPa/uD71UpwpQ7Jm+
52AaA3y9OEl8e6vA/aHOaviBKt2XtnTAnG/iM8Y5UPBNe+YeKIJuZSjtX7wdnSLH
GgsQBTfujQUm1NLvbIULijUfJBeFAElMW97P+eTgqPkkADL0Brzm7okW0T2/dNr3
JFaHr5xP0JN+XYwlKMxzt6rRiTEu6BUBr51pffUIiXhTRTsMRgKk3WzwKlVEx9On
uC/fOK2LqyJ5jYbu8eKLeXnugz5nZgUyCACIES5NQhbynzXuysU0dEuucsWU1RE8
Al8fWTwyKi0rCHNWe7R/FqWOWCP/PV8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:18 2026 by rpki-client