Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd26ee04-d2dd-3948-8efd-3b2a11c847de.roa
File:                     bd26ee04-d2dd-3948-8efd-3b2a11c847de.roa (raw, json)
Hash identifier:          97ozJE6ehvo6CH1yM/goU9uIFqiNiu4XWygCgBBm7Hs=
Subject key identifier:   93:AC:30:CB:39:73:45:44:DC:D9:34:F6:84:C7:84:78:28:AC:2B:F8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E4F1F4521C6EEB6F7617B5E00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd26ee04-d2dd-3948-8efd-3b2a11c847de.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     33438
IP address blocks:        98.190.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:45:21:c6:ee:b6:f7:61:7b:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=185b4613-8816-4066-8b50-cba3f47660de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:4a:ce:75:2e:29:66:22:3b:16:44:d9:dc:
                    bf:a7:d3:c7:e1:9e:f6:c8:ed:22:b1:77:80:66:a4:
                    53:78:fa:3b:ec:0f:a1:ff:62:22:4a:01:f2:c2:63:
                    16:4b:a3:82:5c:93:88:75:c8:73:09:d4:ea:89:6c:
                    2e:72:5f:fa:38:ae:e0:01:b0:07:0f:3a:3f:80:19:
                    e1:4a:48:70:d7:a6:9d:7d:5b:f2:a2:7a:7e:60:c4:
                    df:17:0c:f0:0d:f3:88:f8:c8:99:fb:fc:7c:3e:fd:
                    a5:4e:6d:c8:82:e0:73:5f:61:66:ae:79:3a:47:e7:
                    d7:9d:fa:9a:86:2d:bc:51:b2:04:06:72:fd:4e:fe:
                    da:5b:7c:07:00:d8:aa:23:ac:3d:49:6c:d4:8f:d0:
                    58:16:ce:ab:49:b1:ae:0b:44:19:fc:d6:c6:7f:0c:
                    ba:db:9b:ff:07:04:2f:5c:66:d9:33:39:aa:ad:a3:
                    92:4b:98:17:f4:e8:f2:32:53:c7:3f:b3:a1:dc:fb:
                    88:3f:26:75:6a:00:b8:e3:34:45:a4:49:ea:46:c6:
                    6b:9f:f5:77:c3:11:93:53:c6:cd:28:37:77:a0:8c:
                    bc:f0:a4:5a:82:52:84:7a:03:2e:ae:2c:67:a8:6b:
                    44:11:5c:6f:11:5b:a9:9d:f9:b9:24:37:bf:e1:1b:
                    87:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AC:30:CB:39:73:45:44:DC:D9:34:F6:84:C7:84:78:28:AC:2B:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd26ee04-d2dd-3948-8efd-3b2a11c847de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.190.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:29:66:92:5c:f3:95:67:90:fe:be:fc:f7:b9:f4:64:97:07:
         36:0f:20:1f:c2:f7:3f:01:57:8b:92:fa:c7:a4:1e:3c:df:0b:
         31:9a:4b:95:c7:e8:50:4d:a1:96:48:1e:33:52:c9:a7:dd:8e:
         5a:dc:bd:cb:20:cc:d3:80:ac:8b:32:e1:63:be:71:0d:98:90:
         61:32:4c:e8:74:ed:68:54:bc:d5:68:c4:76:bb:72:a7:ec:af:
         29:6e:7d:30:22:b1:da:47:ef:c8:62:f1:3b:4b:64:d2:58:55:
         a3:3e:b7:99:e2:61:2f:83:c8:cf:2c:7e:6a:66:c4:64:50:a4:
         22:3d:1c:2c:28:98:0d:8d:95:a7:da:25:1f:a3:72:da:e6:d3:
         91:a0:2b:ff:93:6e:b3:b0:5e:92:db:89:dd:aa:36:02:b8:bc:
         f3:4f:8d:68:88:3e:03:09:d3:1e:76:41:b6:b2:59:d1:c1:cd:
         f2:b9:85:8c:ad:7c:b6:9d:61:b8:76:18:36:cf:8a:b0:81:b9:
         de:7c:8b:55:81:f0:c1:64:f1:2f:59:bf:d4:8b:36:27:d4:d9:
         a6:16:36:b2:ec:f2:40:0d:ee:10:f5:fe:41:51:22:0d:a7:f5:
         26:77:8f:df:48:2c:86:f5:c1:5a:f7:72:01:5a:56:7f:cc:45:
         c8:3f:78:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:38:18 2026 by rpki-client