Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a27baeaa-4b36-3d29-aca8-2e047edfd9b0.roa
File:                     a27baeaa-4b36-3d29-aca8-2e047edfd9b0.roa (raw, json)
Hash identifier:          HvSPt/nY6d/HDG2Xf/m1E7BH+KpwlD5pHdgs7s6WO1E=
Subject key identifier:   65:0E:43:40:34:98:55:6A:B4:A6:7D:7E:04:04:61:E4:84:FB:2A:9D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C805FF36A454F97AC5500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a27baeaa-4b36-3d29-aca8-2e047edfd9b0.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        98.161.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:80:5f:f3:6a:45:4f:97:ac:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=bee8608e-5709-45c0-914e-c5f555689d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:06:c7:b6:24:47:32:76:be:06:5b:90:eb:d0:
                    18:66:99:de:38:89:75:c1:f8:dc:09:c4:d1:16:79:
                    98:a3:8d:5d:87:67:ef:05:a4:a2:d1:c1:d0:9d:e3:
                    79:79:e3:45:39:b4:68:5f:83:c2:19:ac:47:02:45:
                    17:c0:2e:37:d9:51:37:f5:be:6d:6f:e3:5e:96:f4:
                    f4:6e:c0:59:19:a3:24:e0:e5:75:8d:81:cc:34:b7:
                    d8:7b:33:4a:ea:f3:39:f3:74:d0:0a:16:c4:bf:f0:
                    e0:25:0d:83:ed:8b:f7:7d:7d:a5:7f:1b:9c:65:33:
                    d3:8b:96:7f:96:87:e4:36:d3:09:74:f5:86:06:35:
                    50:bf:90:2b:8d:16:5e:99:49:5a:b7:9e:93:af:37:
                    99:df:d4:41:3c:4d:ab:70:69:ea:0b:75:57:7e:48:
                    03:a2:28:5d:c7:a5:4f:c0:d3:a8:05:e7:28:ec:fd:
                    4a:20:fb:be:7b:04:95:16:4b:67:de:16:f8:63:12:
                    07:7c:cb:04:d4:50:88:e3:8a:bb:74:23:e3:c4:c3:
                    40:86:80:a4:4a:6a:e2:ca:8b:1b:03:3d:b8:b4:ee:
                    04:ff:83:3d:52:36:31:c3:e6:3a:2b:d1:42:7f:95:
                    d7:3a:9f:83:85:4c:c8:53:17:99:c8:6c:5e:46:e3:
                    09:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0E:43:40:34:98:55:6A:B4:A6:7D:7E:04:04:61:E4:84:FB:2A:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a27baeaa-4b36-3d29-aca8-2e047edfd9b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.161.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:3b:ea:f7:f8:c1:05:53:28:66:0b:38:7f:55:61:4f:8d:2a:
         c7:88:24:49:af:a3:6f:cd:87:a2:8a:42:90:70:a9:30:29:98:
         39:b3:18:74:fb:dd:f2:e7:da:33:48:42:84:56:57:6b:5f:4a:
         90:07:5c:79:00:ff:b7:33:b9:83:4b:28:cc:53:72:43:21:56:
         97:5e:fa:2c:48:0c:2d:09:98:88:74:0d:79:d6:93:23:e7:08:
         a5:83:e8:8f:c7:f5:0f:0d:de:1e:54:d0:08:7c:13:53:f8:07:
         eb:a1:12:8e:8c:ea:84:71:a8:e1:3a:af:50:c3:64:ca:7d:e7:
         cc:9b:67:4e:18:39:6f:02:6e:70:65:37:7f:82:ff:c3:f5:f2:
         af:84:d6:e9:86:3b:03:b3:36:f2:78:d8:5a:b6:06:cf:46:19:
         91:82:58:a8:cd:70:0d:12:75:11:21:c7:7d:e6:44:bd:38:33:
         bf:ef:52:03:e0:32:1f:3f:fa:4d:45:5a:1e:2a:04:e1:75:6e:
         53:b9:76:c5:63:ca:fd:96:de:b4:f4:e6:35:26:df:c0:c8:0d:
         da:a4:a1:a5:e0:c1:36:33:ba:83:12:1c:e8:4d:39:37:f5:99:
         1c:3d:a1:17:a3:b4:db:4d:18:3a:30:3e:e0:1a:a2:45:0e:bd:
         c6:35:72:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:28:26 2025 by rpki-client