Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9c14bd55-5125-3910-a0b2-c13956384c3d.roa
File:                     9c14bd55-5125-3910-a0b2-c13956384c3d.roa (raw, json)
Hash identifier:          gTjpaxEi0W5MJWzs55m5yO9re3/e8LvH3YR3KeLYS5A=
Subject key identifier:   29:0D:3E:9B:8D:1A:D7:65:09:9B:52:E6:73:F9:95:A5:86:62:6B:51
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584CCA41FAAE6AC0145588B55880
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9c14bd55-5125-3910-a0b2-c13956384c3d.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     21859
IP address blocks:        98.98.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:fa:ae:6a:c0:14:55:88:b5:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=23a950e6-371c-4e38-a98d-24da1b7362f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:cf:73:39:7f:1d:3b:d0:2d:f8:6d:a1:ef:
                    da:73:1c:96:b9:fb:fc:e7:d4:ba:59:bb:7f:e5:1e:
                    97:21:29:b3:e8:c9:55:a5:de:9d:4b:38:b6:ae:8c:
                    c4:fc:7d:2b:76:91:aa:8f:12:a3:58:d2:20:4f:98:
                    e9:76:4e:3b:2c:7f:4a:9f:f9:71:37:3f:b5:44:0a:
                    12:8f:9f:f8:21:9d:cc:71:a0:a2:02:c3:1e:48:25:
                    7d:ea:e2:73:45:18:a6:d8:29:28:d4:66:53:0b:88:
                    3b:0f:54:45:bb:7c:b7:48:0b:71:6a:8e:80:a4:03:
                    bd:6c:27:09:e7:0e:da:29:4a:8f:04:b3:6c:54:8b:
                    22:f3:6b:85:60:a9:cb:ce:d8:0f:b9:34:1b:eb:76:
                    4c:e0:10:f4:73:0a:dd:4a:7d:9b:fa:a0:96:e2:23:
                    a3:b1:ba:39:bd:a3:53:f3:ec:4a:75:e4:ce:ec:9c:
                    8d:14:bf:65:a5:be:6a:a4:87:2a:72:b9:99:fe:0d:
                    2d:32:a5:38:de:b7:f3:a4:32:02:d6:7d:c1:c4:98:
                    80:9d:0d:ca:be:81:10:b6:ca:29:f2:45:78:05:c8:
                    87:17:dd:19:88:d8:9e:37:9f:be:e8:20:91:1e:04:
                    19:55:12:a9:d8:bb:9b:08:6d:ce:6a:6a:67:a6:ea:
                    3a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0D:3E:9B:8D:1A:D7:65:09:9B:52:E6:73:F9:95:A5:86:62:6B:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9c14bd55-5125-3910-a0b2-c13956384c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:73:90:5f:00:53:3b:45:ac:c7:27:0f:85:1d:4b:46:b2:a8:
         b1:2b:d7:e9:ca:f6:8d:da:df:43:15:09:90:7d:e8:2e:1d:5b:
         6d:be:66:33:3f:ad:d9:81:70:42:da:e5:1e:fe:ff:87:db:d9:
         0f:35:5a:35:37:d2:cd:f1:6b:41:48:4b:b2:9c:47:ed:d6:6b:
         9a:b7:15:68:63:2c:0e:6f:2e:7a:41:f0:bc:45:3e:71:35:40:
         bd:f0:f7:eb:36:ed:57:3b:32:b4:3f:d0:b3:b7:d1:63:34:63:
         3d:ed:21:e8:51:a6:99:cc:13:30:a9:cb:18:62:6b:7c:83:f9:
         92:ae:c5:49:b6:3b:83:8d:0b:ae:7d:ca:57:c0:bf:ae:33:2c:
         28:95:cf:78:a2:eb:f7:ff:14:7c:43:55:1d:bb:a7:34:13:03:
         30:b8:06:b1:98:39:58:dd:57:c7:55:0a:bc:cb:d7:30:8d:6e:
         ca:73:a6:a0:14:78:78:86:78:15:33:b3:f5:24:d6:8e:2d:a3:
         2e:6c:3e:68:dd:67:5d:ad:4b:64:b2:41:6b:0c:ce:c5:0d:f7:
         0e:05:8e:71:1f:e1:16:32:0e:57:02:35:bf:ad:bf:58:05:2c:
         9f:51:f0:31:8b:fb:c9:3a:ab:3f:c3:6b:a7:27:50:24:cd:34:
         93:09:c0:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzKQfquasAUVYi1WIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk
MjNhOTUwZTYtMzcxYy00ZTM4LWE5OGQtMjRkYTFiNzM2MmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJzPczl/HTvQLfhtoe/acxyWufv859S6Wbt/
5R6XISmz6MlVpd6dSzi2rozE/H0rdpGqjxKjWNIgT5jpdk47LH9Kn/lxNz+1RAoS
j5/4IZ3McaCiAsMeSCV96uJzRRim2Cko1GZTC4g7D1RFu3y3SAtxao6ApAO9bCcJ
5w7aKUqPBLNsVIsi82uFYKnLztgPuTQb63ZM4BD0cwrdSn2b+qCW4iOjsbo5vaNT
8+xKdeTO7JyNFL9lpb5qpIcqcrmZ/g0tMqU43rfzpDIC1n3BxJiAnQ3KvoEQtsop
8kV4BciHF90ZiNieN5++6CCRHgQZVRKp2LubCG3Oampnpuo6MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCkNPpuNGtdlCZtS5nP5laWGYmtRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvOWMxNGJkNTUtNTEyNS0z
OTEwLWEwYjItYzEzOTU2Mzg0YzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmKtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGRzkF8AUztFrMcnD4UdS0ayqLEr1+nK9o3a30MVCZB96C4dW22+ZjM/
rdmBcELa5R7+/4fb2Q81WjU30s3xa0FIS7KcR+3Wa5q3FWhjLA5vLnpB8LxFPnE1
QL3w9+s27Vc7MrQ/0LO30WM0Yz3tIehRppnMEzCpyxhia3yD+ZKuxUm2O4ONC659
ylfAv64zLCiVz3ii6/f/FHxDVR27pzQTAzC4BrGYOVjdV8dVCrzL1zCNbspzpqAU
eHiGeBUzs/Uk1o4toy5sPmjdZ12tS2SyQWsMzsUN9w4FjnEf4RYyDlcCNb+tv1gF
LJ9R8DGL+8k6qz/Da6cnUCTNNJMJwG8=
-----END CERTIFICATE-----
Generated at Sun Feb 22 22:04:34 2026 by rpki-client