Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f071123f-c0ff-3048-af76-5f38555db22a.roa
File:                     f071123f-c0ff-3048-af76-5f38555db22a.roa (raw, json)
Hash identifier:          coK0S3M95ZNuLk2gpQSE644evgwK4QWf+/ntSMoYLDU=
Subject key identifier:   49:15:58:90:65:F2:E8:FD:19:A6:DB:E2:94:09:AE:23:A3:2E:76:FF
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F63F82654B5D0D73BE58D0840
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f071123f-c0ff-3048-af76-5f38555db22a.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     19905
IP address blocks:        98.173.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:26:54:b5:d0:d7:3b:e5:8d:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=dac3277d-fec4-416f-bb38-643638083c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:56:16:14:52:56:1a:89:bf:cb:72:62:f8:09:
                    84:12:f4:63:20:66:93:72:9b:a7:d9:a8:24:35:58:
                    8e:82:d9:20:fb:b2:79:24:b4:83:07:7c:37:ae:90:
                    5e:d6:ab:d0:af:91:6e:b2:57:15:dc:e8:bb:5e:f4:
                    9e:66:84:29:c1:47:4a:83:44:b0:0b:27:d2:1b:1a:
                    a7:64:03:c4:ae:85:f8:1d:85:44:3f:62:cc:c8:e3:
                    26:59:77:85:4c:73:51:bf:c1:f7:46:bc:c2:e7:4f:
                    00:d6:dd:e8:3f:13:6b:50:c9:dd:bd:b5:44:7c:f7:
                    8a:13:6d:f5:15:d2:04:e7:28:bd:a6:31:4b:df:02:
                    d2:01:59:1b:c6:a4:44:7d:1c:38:c6:36:c9:8f:6f:
                    62:e0:49:ae:81:88:69:12:1f:00:a4:bb:e6:94:58:
                    44:bc:f4:9c:f5:c3:6d:ef:d6:23:d1:f6:51:3a:38:
                    eb:93:f8:56:c6:ea:31:33:3d:1c:b2:a7:ba:6d:6f:
                    62:69:f9:39:68:f4:44:6b:e1:7b:02:57:3b:55:56:
                    b0:49:b2:22:61:fb:af:f9:6e:da:96:27:9e:ff:88:
                    0c:9e:aa:8a:ca:8b:2b:d7:b6:5a:63:dc:58:99:9d:
                    65:98:b5:95:eb:b4:60:33:7e:3d:8f:d1:a1:cb:47:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:15:58:90:65:F2:E8:FD:19:A6:DB:E2:94:09:AE:23:A3:2E:76:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f071123f-c0ff-3048-af76-5f38555db22a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.173.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:00:aa:45:c1:37:e6:73:fc:bf:97:ac:bc:e4:30:d6:64:a8:
         fc:3b:0e:3b:e3:41:9e:bf:a7:f0:87:4f:87:bf:bf:16:14:f1:
         db:a5:1f:59:c0:89:4c:e5:8c:08:4d:2c:7c:f9:d5:51:11:47:
         d4:4b:b7:53:80:ac:0d:f0:2f:ac:be:cd:fa:a0:ed:d0:26:bb:
         0b:8f:65:5e:b4:a9:d0:97:e9:01:a3:ec:11:4c:25:0a:1d:2b:
         f2:c5:c2:f9:7e:a6:55:02:f5:5e:0d:2c:24:ad:5e:7d:ec:04:
         ee:87:16:73:7b:de:3a:9e:61:24:f9:07:4f:7b:27:2d:d0:11:
         de:e9:bd:f6:a2:92:13:70:1d:82:09:ce:49:2b:19:3b:a5:ea:
         08:e5:3f:4a:13:67:28:46:39:3a:ec:7b:97:92:78:b0:fb:4f:
         0d:aa:ae:f6:a4:b6:d9:5c:5e:f2:00:40:ee:bb:db:b9:34:70:
         ec:40:d1:e8:b9:27:f7:92:65:85:57:ee:e0:e4:de:30:20:74:
         d1:24:ff:c6:2f:96:12:21:1f:dd:ef:ff:c1:09:9d:0a:f0:4d:
         94:64:95:94:74:dd:42:05:2a:f8:99:e3:5e:0d:fc:e6:9f:54:
         7e:16:5c:a7:fc:cc:a6:67:49:d1:97:8b:2a:1f:92:d8:88:9c:
         48:5c:b2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 08:07:24 2026 by rpki-client