Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eb38c334-881a-3558-bd8c-eafb915a5199.roa
File:                     eb38c334-881a-3558-bd8c-eafb915a5199.roa (raw, json)
Hash identifier:          hjkoxwDhx8mh76ue5r1AaRAtVT6Yj3S3EWJjOlnsf1c=
Subject key identifier:   35:C0:E6:6E:8B:41:F2:18:FB:DD:61:2D:B8:C5:25:1A:E1:3E:B3:A4
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C8EEE5698DA1570D81440
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eb38c334-881a-3558-bd8c-eafb915a5199.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        98.167.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:8e:ee:56:98:da:15:70:d8:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=929ef856-5968-441c-9c75-971afb58193f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fc:a9:6f:9f:df:0a:aa:71:d0:99:27:92:4c:
                    df:e8:2f:54:73:13:50:ec:1d:0c:83:97:5f:e2:23:
                    90:f8:74:be:49:70:af:3f:c6:f8:a6:02:bd:19:a4:
                    07:d8:67:02:71:d5:26:60:b3:de:15:29:8e:09:45:
                    51:48:f8:19:66:e8:15:d2:a3:a8:28:10:d9:32:8d:
                    70:b4:2e:ba:45:de:ab:ea:d3:21:37:01:92:2b:d8:
                    2d:b7:90:68:40:7c:84:e7:f2:a4:a4:a9:4f:02:45:
                    ac:21:17:89:41:9d:34:d7:64:a2:25:0d:43:43:64:
                    6b:c6:c5:f0:c5:43:95:76:f1:2b:7e:58:de:72:a7:
                    26:8b:f5:30:9f:7e:d3:39:6e:2f:d8:15:fc:cc:f5:
                    65:82:4f:23:7a:90:4d:96:69:6a:0c:4c:c9:35:b2:
                    a6:86:3b:8f:02:3c:8b:6e:99:6d:65:30:83:4e:e7:
                    f5:5b:f4:94:fd:e4:73:4e:fa:2b:f4:13:46:1e:60:
                    b6:80:8b:03:64:be:91:7c:a9:5e:ef:fd:47:ab:00:
                    3f:dc:84:21:00:1f:cd:fa:c7:d2:34:ff:e8:3a:dd:
                    f3:29:a4:85:5e:85:ae:a9:80:46:e9:1b:05:ff:ac:
                    18:62:1d:bf:71:dd:15:95:4c:4e:97:02:eb:77:46:
                    35:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C0:E6:6E:8B:41:F2:18:FB:DD:61:2D:B8:C5:25:1A:E1:3E:B3:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eb38c334-881a-3558-bd8c-eafb915a5199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.167.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:73:5d:2d:51:83:33:6f:25:25:47:62:04:f6:0a:99:74:ef:
         b9:26:f1:f5:da:a3:75:eb:73:e2:04:c4:a0:07:41:59:05:e8:
         d4:e6:1c:43:10:99:2d:af:2f:19:2d:48:14:6a:7a:a1:61:b5:
         7e:9e:52:64:e8:8b:3a:d2:11:4b:94:f7:26:49:09:da:42:ca:
         c9:95:12:2a:75:dd:87:3f:ac:af:ab:76:3e:fd:21:95:7c:1f:
         4a:68:1c:35:81:6f:dc:1c:03:33:65:9c:ab:4e:e0:be:bf:a1:
         2b:99:17:0e:34:4c:b6:0a:e2:12:c6:cb:1f:ac:85:5e:29:79:
         3d:08:da:bd:ce:4d:8c:f8:0e:2c:7e:65:4d:4f:bd:f6:8d:ad:
         ee:1c:4c:b9:c8:cb:1a:3c:fd:b5:d3:12:00:01:f2:9a:1a:7b:
         a8:c6:af:71:69:81:83:d0:7f:fd:1d:2c:c4:6b:2c:07:f0:40:
         7e:cf:dd:58:ad:07:20:27:3d:03:ff:51:84:f1:75:af:b4:a2:
         bd:7a:d0:01:0e:05:83:16:7f:23:a3:ed:1f:24:1f:72:8f:68:
         dc:28:56:eb:7e:95:75:81:69:a5:a9:4c:15:33:ae:e8:35:d2:
         a9:a8:ec:06:f0:98:93:1f:7e:64:0b:d3:1b:7b:a9:c4:6f:cc:
         f3:6d:c0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 02:06:11 2025 by rpki-client