Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32fb9fee-76b5-39cc-be64-d82d14af4be7.roa
File:                     32fb9fee-76b5-39cc-be64-d82d14af4be7.roa (raw, json)
Hash identifier:          PnedKoOLk7Llk8DhjIy+U9poFXc4C9FBUGUIRwbR8aw=
Subject key identifier:   DE:C4:61:AB:1F:2A:37:CD:0F:D9:99:AA:A2:82:E0:AB:3B:07:93:D7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D359F8AADAEE1CD92CBF14090
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32fb9fee-76b5-39cc-be64-d82d14af4be7.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        98.166.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:8a:ad:ae:e1:cd:92:cb:f1:40:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=7dcf01c1-4d32-46dd-a3e3-009aef2c1505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:d0:d3:34:3e:a6:e3:04:b3:a5:99:ad:38:
                    00:9c:a2:55:10:7d:9c:c9:d0:0b:05:af:36:19:3a:
                    68:14:30:f7:00:17:63:76:70:8d:72:c8:38:69:4f:
                    11:8f:b0:09:18:dc:d6:ab:91:b1:d0:3d:a1:22:cc:
                    cf:2f:1b:22:8c:f6:ca:6b:0e:d3:2a:a4:85:05:e6:
                    31:7d:d9:59:63:b2:b9:a8:d9:b9:a5:dd:09:54:76:
                    b6:fe:9a:09:5f:4d:ab:bf:35:6d:27:09:a3:7d:e1:
                    39:5e:02:86:34:8e:8e:6a:21:35:ce:b5:c2:a7:c8:
                    8f:3e:c1:51:f9:88:47:da:68:c3:18:00:4a:2f:ed:
                    15:1b:6c:a9:ab:aa:91:dc:8d:ed:8b:50:39:12:34:
                    ad:11:02:d2:64:8f:92:e2:44:c1:7f:20:26:a0:86:
                    2f:e1:2c:20:3f:a2:57:61:74:30:b8:5d:9a:0c:eb:
                    fe:7d:26:0b:41:7c:7b:71:65:54:21:ef:b5:73:4c:
                    93:ad:42:d9:91:20:f1:13:f1:4a:02:6a:e5:05:18:
                    f5:b5:2c:7b:39:a9:45:0f:35:71:22:a5:3d:c7:4b:
                    97:4a:f6:be:7c:50:2a:58:5c:c6:de:e8:55:e6:44:
                    e2:52:3e:d5:b3:31:c1:40:3f:40:6d:b0:55:2a:a1:
                    9f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C4:61:AB:1F:2A:37:CD:0F:D9:99:AA:A2:82:E0:AB:3B:07:93:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32fb9fee-76b5-39cc-be64-d82d14af4be7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.166.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:58:e9:b5:f6:70:16:f1:28:14:25:43:fb:fe:83:e9:3a:7e:
         a8:63:0c:e5:7e:08:8f:5c:e7:ce:4b:3b:46:7e:cc:f0:06:b8:
         98:7f:21:5f:80:08:e1:fd:27:33:08:0a:49:40:91:ca:6c:eb:
         e0:3c:a2:46:16:a0:ca:90:14:e3:81:4d:bb:c1:2d:3a:84:9f:
         52:82:d1:c1:e6:5e:33:8f:e8:62:c8:1d:d9:9a:91:09:c8:45:
         52:b3:f7:52:a0:dc:9e:b9:a1:d8:3f:40:95:44:42:c7:19:4f:
         d7:80:70:48:64:c4:f4:2e:e9:35:0f:a2:6e:b4:a6:be:d6:c0:
         e0:6c:21:52:59:f0:fc:c5:d7:da:93:75:1a:3e:cd:98:88:0c:
         82:fe:58:2f:56:32:52:0e:97:75:fb:3b:9d:ee:d2:4a:d3:98:
         40:6e:26:a9:76:fe:00:ea:4e:c8:96:bd:3d:52:d7:c6:93:f5:
         c3:f4:1e:d4:63:50:15:69:bb:c5:b1:f3:41:39:b4:f5:07:d9:
         28:1d:55:18:91:d4:2d:1d:4d:22:29:74:44:cb:fb:c0:c0:c2:
         40:06:fb:f0:95:69:c8:50:cf:31:99:c4:66:65:43:76:42:7d:
         2a:36:a2:34:4f:42:56:5d:fa:20:1a:27:19:d4:b1:9c:84:83:
         bf:a9:72:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n4qtruHNksvxQJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk
N2RjZjAxYzEtNGQzMi00NmRkLWEzZTMtMDA5YWVmMmMxNTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyfQ0zQ+puMEs6WZrTgAnKJVEH2cydALBa82
GTpoFDD3ABdjdnCNcsg4aU8Rj7AJGNzWq5Gx0D2hIszPLxsijPbKaw7TKqSFBeYx
fdlZY7K5qNm5pd0JVHa2/poJX02rvzVtJwmjfeE5XgKGNI6OaiE1zrXCp8iPPsFR
+YhH2mjDGABKL+0VG2ypq6qR3I3ti1A5EjStEQLSZI+S4kTBfyAmoIYv4SwgP6JX
YXQwuF2aDOv+fSYLQXx7cWVUIe+1c0yTrULZkSDxE/FKAmrlBRj1tSx7OalFDzVx
IqU9x0uXSva+fFAqWFzG3uhV5kTiUj7VszHBQD9AbbBVKqGf1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN7EYasfKjfND9mZqqKC4Ks7B5PXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzJmYjlmZWUtNzZiNS0z
OWNjLWJlNjQtZDgyZDE0YWY0YmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqYIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJhY6bX2cBbxKBQlQ/v+g+k6fqhjDOV+CI9c585LO0Z+zPAGuJh/IV+A
COH9JzMICklAkcps6+A8okYWoMqQFOOBTbvBLTqEn1KC0cHmXjOP6GLIHdmakQnI
RVKz91Kg3J65odg/QJVEQscZT9eAcEhkxPQu6TUPom60pr7WwOBsIVJZ8PzF19qT
dRo+zZiIDIL+WC9WMlIOl3X7O53u0krTmEBuJql2/gDqTsiWvT1S18aT9cP0HtRj
UBVpu8Wx80E5tPUH2SgdVRiR1C0dTSIpdETL+8DAwkAG+/CVachQzzGZxGZlQ3ZC
fSo2ojRPQlZd+iAaJxnUsZyEg7+pcic=
-----END CERTIFICATE-----
Generated at Thu Mar 19 05:34:51 2026 by rpki-client