Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/115123ae-3b67-3941-9d49-8771bbe9c904.roa
File:                     115123ae-3b67-3941-9d49-8771bbe9c904.roa (raw, json)
Hash identifier:          zA9yY16neETkQ/H0MQxjSiaCfgqJg+0Wl/yIjPbeMyM=
Subject key identifier:   BB:E9:9E:C7:7A:30:48:E2:4F:D7:FC:7A:E0:B8:BA:A9:81:1C:66:D3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C898DF4004AEC0DC88B80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/115123ae-3b67-3941-9d49-8771bbe9c904.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        98.165.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:89:8d:f4:00:4a:ec:0d:c8:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=251fd12b-5d73-4818-9b59-349c350a385f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a1:3c:a4:97:2d:c9:b1:5d:18:d3:4c:71:be:
                    b3:98:16:85:b2:21:09:be:a1:db:c4:cc:08:39:1b:
                    fb:ff:36:f0:ef:2a:8f:88:65:9c:1d:20:91:05:90:
                    ed:42:b6:d5:86:9e:00:33:d2:65:bd:26:3b:1b:3b:
                    f9:03:4e:e6:b7:c9:57:9c:31:58:a5:7e:1c:4f:22:
                    bb:77:81:8d:e3:6e:47:fe:6c:cb:92:00:b4:02:3a:
                    47:fa:4e:41:5b:69:c0:1c:74:4d:06:ce:63:a8:33:
                    a9:84:51:01:ed:49:58:19:73:a1:9d:20:25:f5:ab:
                    38:44:d6:bc:96:ce:77:50:0a:d5:87:bb:16:12:18:
                    06:8f:69:d4:1e:dc:6b:31:a5:c2:14:2c:68:eb:cb:
                    97:1d:5c:6e:9b:cd:ca:0f:f5:ff:42:01:66:53:07:
                    c2:71:a8:9e:13:cd:b8:86:cd:4f:1c:6d:66:bc:77:
                    af:90:1f:6e:25:de:58:55:70:8b:92:6f:b3:bc:63:
                    40:6a:71:c2:24:de:cc:50:eb:98:8d:19:f6:90:80:
                    80:ba:0b:af:eb:61:a7:3e:d1:a5:21:af:41:15:d7:
                    58:6d:b9:fc:7d:1b:e3:5c:fb:79:b3:e8:56:a8:ce:
                    88:1b:89:8c:e9:b6:e4:be:77:ca:c4:8e:d1:75:bb:
                    bf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E9:9E:C7:7A:30:48:E2:4F:D7:FC:7A:E0:B8:BA:A9:81:1C:66:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/115123ae-3b67-3941-9d49-8771bbe9c904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.165.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:92:ff:d8:b7:fe:3f:c4:ea:ad:71:8c:60:41:72:93:8b:d9:
         bb:4d:11:ea:2a:b4:14:8f:43:df:2e:6a:05:38:b0:5b:3a:16:
         03:69:61:ec:97:2e:dc:43:15:8a:9a:80:cd:81:03:92:7c:ae:
         7b:84:11:7a:ad:dc:d9:a6:63:70:ef:7e:64:fd:37:e0:7f:68:
         bd:1c:83:7f:6f:37:87:37:d8:2a:10:45:1c:ad:3c:47:2f:27:
         f6:3f:1d:3b:f6:17:d2:1b:c5:49:a6:fe:3d:ff:dc:10:31:87:
         5c:0e:9d:f0:69:a9:da:07:67:72:31:b9:ad:00:82:55:c5:7a:
         29:01:c8:12:8d:de:42:aa:fe:b9:db:a6:45:e4:07:c3:d5:4f:
         fb:e7:be:cf:a7:5b:a5:93:7b:f0:95:d6:4c:df:28:06:d2:5c:
         68:e0:49:cf:25:a3:6f:2e:e6:4f:f0:26:e2:3d:b9:9a:8d:15:
         0e:9b:2d:75:57:a5:1b:b4:8d:37:ec:bb:dd:52:67:53:0f:30:
         d5:fe:42:b9:c2:1f:ac:56:ff:e2:ab:39:17:3b:54:5d:cc:e2:
         92:88:96:c1:7f:9b:50:ca:d9:65:7c:2e:35:f5:ea:ab:46:6e:
         10:30:78:ba:87:a9:6e:b6:aa:f2:26:3d:2c:fe:1f:6e:e5:3e:
         b5:5e:de:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:28:25 2025 by rpki-client