Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/298f863f-0009-3042-b3bb-e20f84827bbe.roa
File:                     298f863f-0009-3042-b3bb-e20f84827bbe.roa (raw, json)
Hash identifier:          oXkhvo4b4bs25AMYL34PsZ7inyKaCcLLK+/cmPAxjdQ=
Subject key identifier:   05:4C:CB:6C:10:81:CD:06:4B:7B:B4:2F:91:81:CB:2F:6F:E1:69:42
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D3DFF812C5F9162848005CA80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/298f863f-0009-3042-b3bb-e20f84827bbe.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     22773
IP address blocks:        72.192.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:81:2c:5f:91:62:84:80:05:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=1495bb7f-d5d1-4f58-b479-67fe7c2dfab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c9:f6:0c:aa:7c:17:14:fe:1b:42:c2:03:7f:
                    4c:ca:d3:5e:f2:db:c0:ab:a7:0d:51:87:e0:53:1c:
                    80:4f:6e:3a:b2:63:9d:3a:bd:d4:30:90:9d:86:5b:
                    48:d9:56:52:bc:a2:88:70:2d:9b:82:6b:bb:18:57:
                    67:75:dc:d1:9b:8c:2a:83:77:69:bf:35:f2:ea:ce:
                    69:ad:8c:25:a2:d9:41:a7:54:8e:0b:96:c6:7f:b9:
                    21:f4:db:84:94:36:41:0a:d2:97:80:b2:6e:1c:06:
                    ed:cf:a5:87:72:41:72:36:2b:19:7b:1a:e4:b6:08:
                    c2:11:2e:fa:2c:38:6c:5b:20:a0:4e:82:16:1f:2d:
                    75:e4:ed:63:8a:02:34:d9:49:7d:9a:93:b8:c6:92:
                    ac:2f:95:80:8c:25:22:2e:90:27:30:aa:c6:3b:ab:
                    00:a9:13:ac:97:05:a1:f4:92:d2:59:ce:39:52:be:
                    c9:02:17:6a:9a:ac:d9:31:38:25:68:00:a5:2d:75:
                    5c:3f:50:48:79:e8:48:91:e4:e4:81:69:ea:f6:a7:
                    dd:af:32:26:2d:26:4e:8b:da:35:fa:3f:35:8a:9d:
                    52:b1:5c:72:2e:e0:e1:ef:a6:7d:a7:25:25:a9:bb:
                    35:bc:6e:86:47:64:00:e6:16:7e:9c:3b:07:dc:c9:
                    8c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4C:CB:6C:10:81:CD:06:4B:7B:B4:2F:91:81:CB:2F:6F:E1:69:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/298f863f-0009-3042-b3bb-e20f84827bbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.192.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e8:ed:79:e1:82:9d:dd:6c:56:16:72:7b:a4:51:d6:3b:21:
         13:7e:9c:19:ad:7c:16:f6:b1:05:aa:99:35:48:08:13:16:c1:
         54:2e:43:89:43:05:8b:36:1d:fc:4b:ef:69:8b:ec:75:74:e8:
         79:0f:06:55:3f:1e:12:69:9e:31:84:46:60:62:ad:a8:e9:e8:
         58:26:e3:e1:99:b7:3e:86:2a:3a:47:76:fc:69:32:31:0a:ce:
         ed:27:30:58:61:79:a6:f1:da:bb:71:e6:48:05:10:d1:e3:9b:
         73:bc:14:7e:76:93:65:13:a5:7b:7c:33:63:ef:50:2e:7b:f3:
         c3:9e:d9:0a:31:24:db:9b:56:da:71:c2:a0:88:01:4c:de:76:
         94:0a:78:cf:a3:07:62:b1:9e:1a:f5:34:25:79:69:d4:15:e9:
         9f:84:e7:5c:b7:2d:c8:e9:8d:ca:6f:0c:cb:c8:8b:b2:f7:44:
         5d:e0:bd:37:34:3a:3e:8e:b2:a7:17:dd:fc:2c:da:39:ed:7e:
         ab:b6:8d:f7:4b:bc:f0:a6:a1:2b:dd:6b:1a:eb:b8:05:0b:de:
         e1:8d:53:3b:87:8e:2b:2f:3e:9e:5a:10:05:ea:b6:2a:d9:87:
         7b:0e:f5:3d:7c:93:55:cb:0d:4b:ca:be:10:21:0f:eb:8f:02:
         28:81:97:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/4EsX5FihIAFyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
MTQ5NWJiN2YtZDVkMS00ZjU4LWI0NzktNjdmZTdjMmRmYWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcn2DKp8FxT+G0LCA39MytNe8tvAq6cNUYfg
UxyAT246smOdOr3UMJCdhltI2VZSvKKIcC2bgmu7GFdnddzRm4wqg3dpvzXy6s5p
rYwlotlBp1SOC5bGf7kh9NuElDZBCtKXgLJuHAbtz6WHckFyNisZexrktgjCES76
LDhsWyCgToIWHy115O1jigI02Ul9mpO4xpKsL5WAjCUiLpAnMKrGO6sAqROslwWh
9JLSWc45Ur7JAhdqmqzZMTglaAClLXVcP1BIeehIkeTkgWnq9qfdrzImLSZOi9o1
+j81ip1SsVxyLuDh76Z9pyUlqbs1vG6GR2QA5hZ+nDsH3MmMIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAVMy2wQgc0GS3u0L5GByy9v4WlCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjk4Zjg2M2YtMDAwOS0z
MDQyLWIzYmItZTIwZjg0ODI3YmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMDmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfo7Xnhgp3dbFYWcnukUdY7IRN+nBmtfBb2sQWqmTVICBMWwVQuQ4lD
BYs2HfxL72mL7HV06HkPBlU/HhJpnjGERmBirajp6Fgm4+GZtz6GKjpHdvxpMjEK
zu0nMFhheabx2rtx5kgFENHjm3O8FH52k2UTpXt8M2PvUC5788Oe2QoxJNubVtpx
wqCIAUzedpQKeM+jB2Kxnhr1NCV5adQV6Z+E51y3LcjpjcpvDMvIi7L3RF3gvTc0
Oj6OsqcX3fws2jntfqu2jfdLvPCmoSvdaxrruAUL3uGNUzuHjisvPp5aEAXqtirZ
h3sO9T18k1XLDUvKvhAhD+uPAiiBl2w=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:50 2026 by rpki-client