Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24a18e71-e1af-3a6a-9453-5ef79825ec83.roa
File:                     24a18e71-e1af-3a6a-9453-5ef79825ec83.roa (raw, json)
Hash identifier:          JrdLksw0JBVYH8FMvMJDRpirqrgxeEbQm5CRndIvKhY=
Subject key identifier:   03:16:73:CD:78:61:CA:E7:4F:36:03:6A:8F:9A:06:3E:6D:D0:61:5A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F93BD7C9FF4C2BC71D113C75C
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24a18e71-e1af-3a6a-9453-5ef79825ec83.roa
Signing time:             Wed 21 Oct 2026 15:41:04 +0000
ROA not before:           Wed 21 Oct 2026 15:41:04 +0000
ROA not after:            Tue 19 Jan 2027 16:41:04 +0000
asID:                     22773
IP address blocks:        98.176.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:93:bd:7c:9f:f4:c2:bc:71:d1:13:c7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct 21 15:41:04 2026 GMT
            Not After : Jan 19 16:41:04 2027 GMT
        Subject: CN=e6b4eb35-a60b-4e32-9ab5-760dfbd009f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b3:29:6a:be:dc:70:5c:8a:95:c0:a0:2d:28:
                    75:d8:4b:56:0b:56:8b:c7:cf:4b:d5:4f:a0:25:7f:
                    01:af:f6:fa:d1:c6:05:a3:2b:70:a8:3f:e0:62:1a:
                    81:df:c6:62:0c:e3:0e:09:7c:a4:cf:9b:22:96:17:
                    f8:43:71:22:2a:83:79:67:3c:79:68:61:53:38:d9:
                    44:76:04:9a:c2:e3:99:4c:01:b0:b7:2d:b3:61:6d:
                    bd:6d:53:2d:31:43:3b:c7:c6:9b:25:50:b7:64:b2:
                    8a:c1:1d:1a:d4:df:28:15:a7:86:5c:a6:06:ad:45:
                    60:48:21:60:11:23:8b:11:e3:5a:6f:83:d3:56:67:
                    6c:8f:bc:1d:2b:2b:57:f1:71:7b:d1:e3:6e:b3:1a:
                    d3:aa:16:80:6f:e0:e8:d9:9d:ca:ef:98:77:40:ec:
                    bf:72:50:7b:ab:69:06:18:63:3c:c2:c9:a2:b0:9f:
                    0f:d7:e3:7e:5c:3a:40:e2:b5:f5:02:8f:86:6a:ff:
                    82:12:cf:71:17:2a:e7:86:0b:cb:61:73:04:74:40:
                    6d:cd:5b:5c:e9:b6:71:13:6e:7c:40:ce:6d:1c:4e:
                    07:b5:11:d5:60:45:d8:8c:73:f2:a1:9a:86:00:ab:
                    2b:bc:94:87:17:ed:c8:47:b8:38:71:94:3c:7b:bb:
                    cd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:16:73:CD:78:61:CA:E7:4F:36:03:6A:8F:9A:06:3E:6D:D0:61:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24a18e71-e1af-3a6a-9453-5ef79825ec83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.176.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:75:ba:9e:03:45:c7:70:9b:02:6c:c2:fb:c9:5f:53:53:97:
         f3:fb:8e:59:0c:4f:19:f0:fb:18:95:5a:8e:27:a2:f6:da:bd:
         13:18:02:fb:da:dc:59:f8:fe:c1:b9:cf:25:be:74:2a:ce:9e:
         5e:44:6a:cf:a6:6c:34:51:c9:3f:c6:d1:8b:f5:09:52:70:2f:
         3c:13:08:97:91:78:79:93:bc:30:3d:76:e8:fc:5a:8f:97:2d:
         68:c0:1c:41:84:be:fc:17:e3:b3:ca:27:ed:91:c6:4f:c3:02:
         6c:ee:91:c8:02:10:09:29:97:e4:37:fd:7f:d3:7a:31:f1:6c:
         31:37:43:71:a4:0f:47:e1:0f:27:91:9c:7b:23:b8:78:4a:09:
         b2:11:19:6e:ae:04:44:14:61:8c:88:e1:56:b8:a4:9f:46:da:
         2f:ea:ab:84:2c:c3:62:1c:2b:ef:9c:05:21:18:c4:d0:cd:ff:
         9f:7a:3c:a6:b4:3f:1d:d8:dd:68:04:27:ae:d7:d4:48:16:75:
         d0:40:55:94:86:67:b8:be:4e:5d:19:a2:d6:c7:e5:e5:b0:7b:
         86:ad:8d:ff:c1:ac:60:22:f0:a1:5d:1f:41:dd:9e:a8:1b:62:
         7a:a8:ce:f5:56:5c:78:46:9a:e1:05:7e:79:c2:0f:4c:9a:7a:
         32:2a:99:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:10:09 2026 by rpki-client