Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35a3a727-ca0c-3c3b-8c86-dfb4cd1327d0.roa
File:                     35a3a727-ca0c-3c3b-8c86-dfb4cd1327d0.roa (raw, json)
Hash identifier:          6yO0JXYtj3nJh2j1tWGYcGiOBWnqHdz2NEmh02pN0as=
Subject key identifier:   1A:60:D8:81:3C:42:8C:FF:44:8C:E6:6E:3D:C3:C9:7A:38:BD:54:AB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F53A502159320040DECEB0540
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35a3a727-ca0c-3c3b-8c86-dfb4cd1327d0.roa
Signing time:             Mon 28 Sep 2026 16:40:01 +0000
ROA not before:           Mon 28 Sep 2026 16:40:01 +0000
ROA not after:            Sun 27 Dec 2026 17:40:01 +0000
asID:                     22773
IP address blocks:        98.191.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:a5:02:15:93:20:04:0d:ec:eb:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:40:01 2026 GMT
            Not After : Dec 27 17:40:01 2026 GMT
        Subject: CN=72c4a75d-885f-46d9-bf59-96766dd3230b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d6:81:4c:dc:75:9b:41:d6:59:60:6a:e7:51:
                    84:2f:4b:fb:87:94:b6:55:51:7a:81:ad:e4:4f:c8:
                    f7:b9:2d:85:70:d2:dd:b1:5a:c2:39:9d:68:cd:e6:
                    f6:9b:59:9a:5c:30:51:52:9c:79:6e:6f:99:30:0e:
                    e0:0a:e9:c9:94:5c:ed:53:23:f4:f9:29:d3:f2:63:
                    05:36:ee:7d:d3:28:4b:a7:c8:d7:4c:83:7b:b4:38:
                    b8:fa:88:d4:d8:c6:1a:5c:47:25:af:a1:01:16:8b:
                    67:4c:24:ee:fe:4d:3a:4a:2d:de:e5:15:c3:35:d1:
                    83:00:a3:d0:75:dc:82:65:48:12:6f:ad:d6:50:f1:
                    d5:32:e9:01:60:44:4e:3d:d4:37:12:5a:b3:af:d2:
                    8e:fd:3e:d1:95:c8:16:e3:9e:c1:36:f3:aa:67:b5:
                    33:76:97:b9:0a:02:96:58:79:88:26:b6:33:5b:1f:
                    13:9e:af:a9:0e:fb:2f:49:ea:16:75:8d:6f:93:ff:
                    a2:df:91:e7:d2:06:62:1d:ba:82:dd:9b:d4:42:5b:
                    71:67:96:43:70:cb:68:f7:e3:ad:9d:06:6c:89:6f:
                    fa:ab:70:58:c6:53:a6:db:f2:55:c5:48:dc:15:9e:
                    31:e2:5c:70:0f:70:f9:3f:78:a2:f7:c6:87:3d:92:
                    c6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:60:D8:81:3C:42:8C:FF:44:8C:E6:6E:3D:C3:C9:7A:38:BD:54:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35a3a727-ca0c-3c3b-8c86-dfb4cd1327d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.191.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:9b:83:3a:c1:49:07:b7:af:e5:a3:33:b4:97:4f:d2:d2:99:
         c1:13:32:e2:e8:4f:44:a7:10:26:49:12:b6:a5:13:4a:12:81:
         ee:0b:c4:4e:c2:4c:29:0f:63:8a:42:f4:d3:88:0c:1d:40:04:
         30:9b:e2:60:7e:77:5f:97:9b:99:3c:8b:d2:80:e8:e6:49:a6:
         8d:05:ca:38:10:94:ce:5e:ca:52:b8:5e:d5:38:6a:55:b3:c2:
         57:d9:91:2c:06:c1:68:4f:cf:f4:c3:cc:e9:51:f3:35:19:8f:
         f2:b8:fc:7a:41:be:e1:86:0a:92:77:c3:30:35:fd:48:f3:55:
         84:02:c3:18:22:b2:b5:41:d9:85:c0:5e:b9:e4:83:a3:ca:9a:
         b1:80:3a:6f:83:76:57:91:e4:c2:13:0e:7a:37:78:8b:a7:5e:
         42:e4:be:20:97:1e:48:06:2d:8d:fc:8b:5d:46:44:70:00:21:
         29:e3:12:fe:68:c7:d2:73:2e:31:19:c0:98:ac:ea:bf:05:fa:
         15:89:37:78:ae:e6:bf:c9:a9:67:f7:a3:25:ae:38:70:3d:1d:
         09:7f:27:e4:4e:8a:8f:c7:02:d2:30:66:d0:44:54:d2:8b:24:
         c5:99:4f:ef:20:6e:67:14:60:85:80:c6:09:11:4a:f6:b1:bc:
         98:72:84:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 18:53:45 2026 by rpki-client