Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/19c997fb-6633-3174-b08c-843aa95f1c71.roa
File:                     19c997fb-6633-3174-b08c-843aa95f1c71.roa (raw, json)
Hash identifier:          jhHqUIGMUHy2I2OTPKcka8IwfCXYjEhlMOrRuIFR9h0=
Subject key identifier:   A6:BD:5C:79:CF:C3:F0:FF:C5:BC:56:2D:AA:EF:97:42:7F:98:41:66
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DC135B858C5B19440ADEFF880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/19c997fb-6633-3174-b08c-843aa95f1c71.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     22773
IP address blocks:        98.160.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:b8:58:c5:b1:94:40:ad:ef:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=43a07e27-e89f-45fb-a897-149d8681797f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8b:17:2f:66:32:b7:46:72:d4:4f:26:ec:c6:
                    67:d0:d9:9d:e1:91:fe:26:75:fb:23:b6:f7:a6:9e:
                    c4:72:a5:c8:f4:8d:02:f9:15:9b:51:04:0e:be:2d:
                    67:03:19:9a:86:1c:f4:ea:07:9d:53:b8:83:52:c5:
                    98:9b:0c:87:7c:df:ff:16:ab:dc:20:52:97:79:b0:
                    83:cc:d8:03:e9:b9:30:98:da:d8:d5:6c:32:5f:d7:
                    90:0b:95:fa:90:e0:a7:2c:2a:83:8f:a8:08:0f:1f:
                    6f:ee:04:16:30:63:0d:e0:ae:57:99:8d:08:a8:e3:
                    f0:cc:8f:e3:08:69:71:01:80:0f:67:14:eb:93:4d:
                    55:20:be:f9:3d:1e:b1:95:56:06:b3:d4:87:2c:47:
                    a5:e2:63:c1:4f:c9:57:43:52:92:c5:e0:00:d9:a2:
                    a2:af:2a:de:5d:5e:cf:e2:cd:6a:08:e8:f6:e3:15:
                    46:c9:e0:f1:72:88:9c:35:e0:16:5c:b8:47:67:78:
                    53:e4:7d:63:0a:ef:d7:45:5e:82:88:84:88:59:40:
                    cd:85:48:f8:bb:01:c5:05:c3:a5:23:3b:5d:6f:2e:
                    df:95:37:3c:66:aa:b4:dc:91:01:e7:33:f7:c1:6f:
                    05:20:27:ed:f7:3f:11:3d:19:f5:f9:a7:f5:2d:58:
                    18:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BD:5C:79:CF:C3:F0:FF:C5:BC:56:2D:AA:EF:97:42:7F:98:41:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/19c997fb-6633-3174-b08c-843aa95f1c71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.160.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:bc:75:eb:54:b7:14:ac:94:d5:78:7e:3e:5d:f2:48:b6:a2:
         48:2c:1b:49:13:27:d9:86:6d:81:69:f8:2c:10:4e:f6:16:f3:
         9d:d1:64:64:46:d8:ce:8e:9d:63:6d:7b:d1:90:6c:11:f4:d6:
         ca:a0:93:60:87:a1:18:71:50:c2:90:bd:28:35:01:5b:d1:c5:
         a4:f3:77:93:e5:84:43:0c:c3:f6:88:fc:ac:7e:4d:a2:3c:d1:
         0d:b7:ce:77:2c:cf:0a:b8:e3:d2:b2:15:66:83:05:84:78:d6:
         e3:bd:7f:e3:32:1d:a4:0d:5b:6a:b7:ca:e8:2d:fe:d5:eb:a6:
         d4:a7:dc:af:b6:17:ea:91:fb:1b:eb:dc:33:c2:f9:58:5a:04:
         0e:3f:e9:32:14:90:c7:d7:d8:10:a4:26:f2:a8:18:5e:93:ee:
         23:2c:26:ed:f1:27:a1:d1:ef:24:9a:7a:b2:36:e1:5a:03:a4:
         f8:6d:0c:58:fe:3d:ec:31:eb:2b:a5:85:8b:79:65:40:d5:0d:
         ec:5a:98:8e:0a:75:cb:56:8e:f1:78:5c:f0:0f:f8:cd:b5:ba:
         e3:b6:2e:4e:34:a8:51:b2:72:8a:99:6e:ec:10:76:58:33:d7:
         52:36:86:5c:29:a7:72:1c:6b:29:f8:5e:9b:9d:2c:a7:b4:91:
         20:6f:c4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:25:55 2026 by rpki-client