Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c78a905-cc59-31cd-83c3-621966f475aa.roa
File:                     2c78a905-cc59-31cd-83c3-621966f475aa.roa (raw, json)
Hash identifier:          echtcWLm3LeNd4Cpr0ncAROZbpKNvsVmdj8QOGtS8W8=
Subject key identifier:   27:C2:76:74:FF:09:C0:01:69:55:F0:38:4F:AA:09:BF:57:FC:D8:C4
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4112DC2747475739A9830400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c78a905-cc59-31cd-83c3-621966f475aa.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        98.179.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:dc:27:47:47:57:39:a9:83:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=e631e495-413c-4f80-b99f-d39ff2e9af8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:06:80:35:30:20:83:9e:8d:88:65:43:8c:b7:
                    d5:74:5a:22:6c:87:84:f5:58:fc:c4:66:d2:1d:65:
                    03:49:c9:b1:12:6e:1b:2f:03:8c:bc:a3:2d:e9:f5:
                    d2:f6:b0:7e:f5:91:dc:4f:4a:8e:33:8b:2b:62:f6:
                    c8:5e:79:0b:5f:f1:16:32:2b:f1:c9:27:36:54:e8:
                    d5:e0:26:b7:c8:90:b1:61:03:18:a2:ea:e7:2e:ce:
                    43:32:2f:a4:8d:38:3d:b4:6f:53:e9:49:aa:02:0c:
                    14:bd:d0:14:42:90:6b:c8:9d:d4:b9:9f:f0:04:98:
                    22:9b:3f:07:47:ba:65:28:9b:dd:0e:b5:92:1e:8a:
                    44:a6:27:38:9c:fc:dd:90:1e:a2:a2:6d:a7:35:48:
                    da:36:1d:ae:d1:63:59:7e:43:b3:65:0d:2a:60:73:
                    5c:89:cb:a4:a4:f1:8b:cd:56:0a:fc:cc:a2:9f:4a:
                    85:f9:c0:ae:8b:5f:ba:c2:a8:34:a6:a6:f7:52:1e:
                    d8:41:05:67:c6:7e:8b:43:dc:8a:f0:ec:d7:b1:b5:
                    55:5d:c1:3f:cc:0b:c2:71:5f:5a:66:13:5a:4d:55:
                    6c:f2:24:79:59:d1:c1:8d:4a:2e:da:16:fc:9b:ba:
                    20:d3:31:a7:83:ea:f1:90:ac:16:92:5f:d0:66:60:
                    26:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C2:76:74:FF:09:C0:01:69:55:F0:38:4F:AA:09:BF:57:FC:D8:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c78a905-cc59-31cd-83c3-621966f475aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.179.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:b1:8f:8c:bb:3c:fc:00:cf:0c:e1:b3:1c:77:05:6f:44:c7:
         99:48:3d:a5:61:d4:51:88:12:90:ef:fd:f4:05:ef:10:cd:7e:
         b7:f8:65:26:e8:6c:e8:3f:47:e0:70:4a:de:67:01:c6:92:8e:
         24:93:a4:26:9e:d8:3a:ad:89:94:86:3e:57:0b:dc:77:55:47:
         ac:c0:88:35:11:48:8f:d5:d7:a2:45:0a:80:88:af:44:f6:ca:
         11:30:c7:4d:24:45:81:6d:cf:56:51:c0:e9:24:0f:0e:6c:01:
         22:2f:7b:e4:0e:ce:7d:1e:6c:a4:c7:7f:2a:f0:ac:d3:05:2a:
         1e:58:46:c3:3b:47:8a:6e:8b:c7:2b:a4:19:6b:6c:a9:17:33:
         e6:aa:80:1c:5f:89:7b:d1:a9:bf:ee:67:6f:75:2e:cf:d2:17:
         cc:c4:ca:b7:65:40:c1:f3:59:04:e8:b0:8d:ff:eb:41:bd:de:
         76:15:a0:53:f5:36:33:83:7b:26:41:3d:f9:26:5d:bc:90:68:
         7c:f3:72:70:fa:3d:2b:9d:01:fc:f2:2e:78:04:20:42:58:7d:
         3f:a4:53:57:f2:0d:c5:3c:5b:ef:9f:3b:c7:56:65:91:7f:09:
         9b:f3:47:7a:58:ac:0f:8d:98:0b:47:25:30:dd:73:cc:94:66:
         d1:3a:76:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEtwnR0dXOamDBAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk
ZTYzMWU0OTUtNDEzYy00ZjgwLWI5OWYtZDM5ZmYyZTlhZjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgaANTAgg56NiGVDjLfVdFoibIeE9Vj8xGbS
HWUDScmxEm4bLwOMvKMt6fXS9rB+9ZHcT0qOM4srYvbIXnkLX/EWMivxySc2VOjV
4Ca3yJCxYQMYournLs5DMi+kjTg9tG9T6UmqAgwUvdAUQpBryJ3UuZ/wBJgimz8H
R7plKJvdDrWSHopEpic4nPzdkB6iom2nNUjaNh2u0WNZfkOzZQ0qYHNcicukpPGL
zVYK/Myin0qF+cCui1+6wqg0pqb3Uh7YQQVnxn6LQ9yK8OzXsbVVXcE/zAvCcV9a
ZhNaTVVs8iR5WdHBjUou2hb8m7og0zGng+rxkKwWkl/QZmAm1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCfCdnT/CcABaVXwOE+qCb9X/NjEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmM3OGE5MDUtY2M1OS0z
MWNkLTgzYzMtNjIxOTY2ZjQ3NWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYrNXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEuxj4y7PPwAzwzhsxx3BW9Ex5lIPaVh1FGIEpDv/fQF7xDNfrf4ZSbo
bOg/R+BwSt5nAcaSjiSTpCae2DqtiZSGPlcL3HdVR6zAiDURSI/V16JFCoCIr0T2
yhEwx00kRYFtz1ZRwOkkDw5sASIve+QOzn0ebKTHfyrwrNMFKh5YRsM7R4pui8cr
pBlrbKkXM+aqgBxfiXvRqb/uZ291Ls/SF8zEyrdlQMHzWQTosI3/60G93nYVoFP1
NjODeyZBPfkmXbyQaHzzcnD6PSudAfzyLngEIEJYfT+kU1fyDcU8W++fO8dWZZF/
CZvzR3pYrA+NmAtHJTDdc8yUZtE6dsY=
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:35:03 2026 by rpki-client