Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9292994-664d-3a6d-8342-2643328cd64b.roa
File:                     e9292994-664d-3a6d-8342-2643328cd64b.roa (raw, json)
Hash identifier:          t0xlHdipeyPTIT6CACi2KQnzQGRoV7VNQIb8pUZr08M=
Subject key identifier:   96:61:37:60:7B:FE:D3:EB:DF:7C:9E:6E:0F:39:29:96:11:F8:09:67
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D3F64F81628F6CBFBF650EF00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9292994-664d-3a6d-8342-2643328cd64b.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        98.173.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:f8:16:28:f6:cb:fb:f6:50:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=242dde7c-f0be-47ff-a697-00a12e741846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4f:21:c6:af:ae:31:56:ab:ad:a0:14:f2:39:
                    04:cf:1b:1d:f8:42:fa:72:22:d0:f0:2d:ee:5f:f2:
                    3b:04:46:b2:04:27:d6:87:c3:8e:87:8e:b3:09:a6:
                    6c:10:a3:1e:29:39:1c:c9:cc:28:11:6e:a3:67:04:
                    7c:8a:56:a5:a6:b7:7d:8b:9d:4d:f9:78:a8:33:b1:
                    ca:1a:8a:05:c7:17:42:62:85:1d:e3:3e:d2:61:78:
                    07:62:95:e1:81:4f:cd:74:0a:bb:a7:9f:37:ee:f0:
                    b5:fa:95:f2:2f:9c:08:62:ab:ac:c8:6a:e9:d0:ec:
                    8d:c1:5d:a0:e6:d5:7a:3d:78:bc:0b:3a:d9:16:22:
                    c1:40:0b:ef:ad:94:d4:24:94:06:eb:1e:d6:43:7b:
                    b6:73:46:63:a9:49:73:5f:84:a6:38:8a:f1:84:08:
                    19:bd:47:f7:54:6e:31:f2:92:82:38:b2:fa:73:7f:
                    ef:7e:22:86:33:6d:10:05:69:09:3a:73:56:93:e6:
                    73:6c:36:0e:c8:5a:85:46:a8:ba:fa:07:38:5f:b0:
                    65:8f:2a:a3:8e:f0:e0:57:a6:12:d4:8a:5b:47:67:
                    9e:b1:35:40:15:f0:e2:57:c2:d4:78:93:0f:61:4c:
                    65:05:14:76:3a:36:54:e2:86:07:20:fd:c3:ca:ff:
                    5e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:61:37:60:7B:FE:D3:EB:DF:7C:9E:6E:0F:39:29:96:11:F8:09:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9292994-664d-3a6d-8342-2643328cd64b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.173.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:94:18:1e:4d:d2:91:58:b3:e1:f0:7b:6c:6e:2a:c0:d6:0c:
         0c:0c:e2:2f:5c:a9:a6:3b:68:0e:68:9a:25:f9:57:ca:b0:da:
         22:f8:6e:37:56:b0:39:af:cc:86:26:24:e9:db:24:55:89:8d:
         00:a3:4b:3a:0c:23:8f:ac:de:7e:6d:a4:a8:82:c9:fc:8b:e0:
         3a:fa:d7:bb:00:6c:c4:29:03:1b:49:a9:ad:86:89:fc:70:f6:
         85:d7:60:54:27:9b:c9:28:05:5e:24:ff:51:5b:a0:c0:88:26:
         96:3a:68:55:0c:d4:0f:51:9b:ef:6b:16:ba:b1:89:cf:9a:ad:
         8f:0a:23:cc:30:aa:1b:d5:f9:ec:ef:4d:32:81:97:29:85:76:
         77:96:87:29:32:fd:52:df:d2:e4:0d:6b:80:75:60:b0:65:a4:
         64:25:00:e7:c3:43:1b:95:24:d0:a7:02:bc:ef:57:5c:07:70:
         1a:fc:91:7b:0f:54:af:85:37:00:5a:3f:09:3f:a2:f3:ae:9c:
         47:ef:47:78:cf:8e:2a:eb:9e:03:eb:6b:1a:45:06:f8:df:89:
         05:6c:91:63:1d:f7:44:08:e4:bf:d8:7e:f2:03:3c:10:4e:38:
         c5:43:2b:e4:2c:4e:88:41:ef:6d:40:40:b3:23:d3:cc:59:c1:
         a2:ad:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 06:59:34 2026 by rpki-client