Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/69b9f52a-d599-3630-ad14-769d8813219a.roa
File:                     69b9f52a-d599-3630-ad14-769d8813219a.roa (raw, json)
Hash identifier:          UbSaV/1cTuiPBX9yVwuu9OdBJjzJGUYW8l8VCd6J8kY=
Subject key identifier:   3E:C6:71:74:C9:3C:A8:89:4F:41:06:78:98:F6:0F:49:07:71:8B:05
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F2075E672D120C4D4088C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/69b9f52a-d599-3630-ad14-769d8813219a.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        98.166.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:07:5e:67:2d:12:0c:4d:40:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=719e5b88-f4ad-4d81-b688-ee5a7ea5e8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:36:b0:ae:59:f3:f7:27:b4:45:ec:06:26:d8:
                    e1:55:92:95:11:ef:a7:5b:3c:28:fb:64:8e:79:c4:
                    14:32:52:29:04:28:47:06:37:ba:a5:30:74:47:d2:
                    f9:d3:9b:cb:32:e4:a5:b3:00:9d:3d:1c:6a:bf:2f:
                    b7:74:e5:07:22:f1:f4:f0:ed:47:4d:fe:72:b7:93:
                    33:55:d4:b0:28:2a:12:2b:6f:7c:2c:99:10:34:b4:
                    ac:74:42:ac:6a:aa:43:0c:64:7f:f2:7d:fe:e9:83:
                    52:b7:11:bb:16:d1:f5:84:40:33:96:9c:1f:1d:28:
                    05:7d:f2:57:44:ea:03:0e:b9:95:90:7c:75:4a:33:
                    1e:db:17:9a:26:ad:3a:ea:ca:3e:7b:5e:cd:7f:9b:
                    c6:50:d4:1a:d3:cb:56:e5:ef:f7:dd:09:5e:ca:b6:
                    ff:05:3a:d1:c9:ea:0e:da:aa:cb:f2:75:6f:fa:46:
                    f6:a3:01:aa:cb:97:8e:11:29:6a:37:26:94:d8:d1:
                    df:a1:28:3d:2d:20:a5:28:0e:44:67:36:f7:02:f1:
                    f9:b4:30:ec:94:46:de:58:29:00:85:db:fb:7f:16:
                    8b:9b:f5:4f:4c:40:85:94:ce:20:0c:3f:fd:0f:2f:
                    37:62:01:9e:30:9e:4d:8c:39:94:0a:44:47:13:4f:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C6:71:74:C9:3C:A8:89:4F:41:06:78:98:F6:0F:49:07:71:8B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/69b9f52a-d599-3630-ad14-769d8813219a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.166.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:cf:38:b6:f4:4e:64:0f:64:69:29:9d:19:71:35:2e:b3:ed:
         8e:81:8e:c4:26:27:05:7f:be:d4:95:9a:c9:cc:b8:8a:d0:17:
         7f:74:7e:1c:03:4d:0c:f5:4c:1e:2f:f8:db:e9:b4:9b:45:14:
         7e:ae:40:2d:90:45:83:a9:3d:1c:5c:5f:f3:bd:de:35:3a:b9:
         42:12:f6:ae:c6:fa:43:ea:87:ad:30:43:72:11:f8:27:5a:79:
         c1:b0:10:6d:0e:86:eb:d3:2a:41:16:a3:83:3e:11:c6:52:54:
         0d:ea:70:a7:92:40:1e:b4:62:9d:ed:1d:32:c6:0d:b9:29:90:
         5c:7c:0d:2b:36:15:3b:0a:77:81:44:f2:b8:00:6f:5e:91:c3:
         36:4d:d8:dd:03:b0:9f:7f:31:6a:4e:b7:8d:04:f8:f1:72:73:
         b7:ab:7f:8c:cd:72:b1:86:c5:4b:3b:44:cb:1a:f7:e2:f7:e8:
         c5:d3:29:8c:eb:bb:4c:d2:fc:a2:38:84:e8:28:49:1f:ad:98:
         20:1b:4b:b9:bc:ea:9a:d9:e2:f5:4d:e7:ee:29:9e:1d:2f:1c:
         b5:2f:af:c1:54:27:6b:6c:2a:c0:2a:5f:aa:c0:dc:a6:e5:45:
         87:b8:73:40:8b:12:31:43:bf:c5:06:11:88:71:5d:38:8f:47:
         3f:c2:e0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 01:49:03 2025 by rpki-client