Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0559c6f4-2852-3821-8e70-f251589a8e91.roa
File:                     0559c6f4-2852-3821-8e70-f251589a8e91.roa (raw, json)
Hash identifier:          Xlc/gkQNRvtX8lrYM41HKpwO1VDwdvHuTGkU0HsaxEE=
Subject key identifier:   5C:06:67:DE:60:E6:74:BF:1C:9E:CA:69:FE:7D:5B:1E:2A:43:E4:BF
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4112DEBED137FE90079E0000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0559c6f4-2852-3821-8e70-f251589a8e91.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        98.177.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:de:be:d1:37:fe:90:07:9e:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=44c5bfab-5668-44eb-ae5b-d1eb6d4a1d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b8:b2:6e:ea:00:e5:8a:c4:8a:17:f4:22:8c:
                    09:66:71:59:e9:85:a9:58:15:9f:5b:8d:52:ee:62:
                    89:c8:ee:de:7f:f5:bb:4e:32:7a:cc:06:cf:9b:a2:
                    80:80:d2:ca:bb:21:f4:ee:a8:07:a1:e1:c6:7c:e0:
                    fc:4d:98:50:81:8d:3f:46:cc:58:03:67:18:96:e0:
                    d6:b6:a3:99:96:f6:e4:a0:5e:83:01:b9:2e:b9:3c:
                    9f:8b:fc:83:62:10:91:ae:68:20:d7:af:e7:dc:47:
                    7f:dc:03:4d:52:3e:bc:10:39:41:87:27:52:a6:ba:
                    6c:85:1d:2f:bf:74:82:4c:c6:36:69:b6:33:02:8f:
                    b8:70:ca:7f:63:c7:ac:9c:1a:c5:3f:6c:1b:ac:b1:
                    0d:ae:47:cb:95:05:22:a6:f0:72:54:f5:33:8e:75:
                    2d:50:86:00:76:2b:2e:e8:fe:d0:b2:15:6f:5e:7f:
                    19:de:8e:45:e5:d2:f1:cf:2f:8f:87:9b:94:28:db:
                    96:ad:e8:80:08:99:7b:66:9e:59:11:75:6a:19:48:
                    37:3a:2d:43:d3:0d:56:a4:57:1b:ae:16:52:a0:34:
                    5f:75:c6:06:b5:41:9b:07:33:52:4d:de:b4:dd:36:
                    c7:a5:26:9f:07:87:af:f9:c1:81:c7:f1:18:36:63:
                    92:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:06:67:DE:60:E6:74:BF:1C:9E:CA:69:FE:7D:5B:1E:2A:43:E4:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0559c6f4-2852-3821-8e70-f251589a8e91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.177.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7e:3b:f6:9e:9e:fa:f7:e8:9c:3e:2a:17:06:25:98:61:a3:
         4b:8d:38:ba:df:20:5d:53:2e:82:39:b5:63:b5:82:58:85:0c:
         27:93:c4:dc:6f:99:e3:4e:aa:24:cb:a2:b8:cb:e8:31:c1:d6:
         59:05:51:4c:61:9f:99:da:85:79:91:24:43:8a:56:ff:c2:83:
         ce:fd:e8:0e:eb:51:05:92:44:db:58:09:c6:a1:16:f7:72:89:
         b6:66:a2:25:e1:36:9d:c8:1a:1d:4b:b7:9c:d3:c7:46:f8:d5:
         62:6a:91:ae:96:aa:36:ac:b0:0d:cc:c1:1d:c6:8c:f9:1b:2b:
         3e:0d:a6:d4:6e:6b:37:2d:ac:96:55:ea:aa:46:49:5f:ab:24:
         e3:ed:f4:5f:e4:05:d2:82:26:91:89:6c:89:1e:ee:17:aa:53:
         9a:c6:90:9c:8a:14:69:5a:21:f0:f0:8a:df:2c:c7:9b:17:96:
         66:13:7d:91:bc:34:53:2a:cf:ae:83:52:49:a1:fa:e2:15:a9:
         63:b5:62:06:4b:4b:4f:f6:1c:5a:02:2c:1f:bf:e8:5d:68:d9:
         c8:b4:05:ff:62:f1:40:0e:b5:9d:91:05:8e:f1:8e:c3:5e:98:
         31:00:94:d5:ee:05:c3:26:3d:d8:18:4e:e3:24:7b:ea:4f:ee:
         36:59:c7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:04:53 2026 by rpki-client