Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99e00571-a3f7-3bd8-8c3e-c7e93c6b01e3.roa
File:                     99e00571-a3f7-3bd8-8c3e-c7e93c6b01e3.roa (raw, json)
Hash identifier:          GY6WzOYEJk0lZo3HWAOgtWWpsw+cdXDLLCWnQzXi3zM=
Subject key identifier:   79:90:A2:90:B5:D7:FB:C7:D0:21:05:E7:6F:3A:47:38:2E:9D:83:4B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D300A7CC4FD6EA7E6A00C5980
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99e00571-a3f7-3bd8-8c3e-c7e93c6b01e3.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     19905
IP address blocks:        184.179.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:7c:c4:fd:6e:a7:e6:a0:0c:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=9df3340d-f562-40d2-b3dd-36521ee002db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6c:ef:8e:2a:6a:b5:7d:fd:46:7e:29:ba:26:
                    cd:fc:8d:c4:84:cd:22:16:51:51:3e:6a:7f:5e:88:
                    4f:c6:55:85:6f:7f:3e:ee:cd:ae:78:3b:e2:68:21:
                    2a:c6:64:24:94:f3:28:d6:79:87:b0:91:64:be:72:
                    65:59:5e:93:7a:bc:12:f8:1d:fe:00:ec:99:68:ba:
                    1e:14:e5:4e:1b:ab:00:77:3e:5e:a5:23:09:fa:4c:
                    8b:30:6e:06:b5:f9:da:11:5b:d8:10:73:9a:ad:da:
                    b2:d1:b0:bb:7b:9a:c4:18:b3:d1:39:68:b3:ea:69:
                    14:cf:87:b7:a3:b3:67:22:a7:83:eb:a7:50:ef:b3:
                    24:c0:2f:8f:91:53:f0:5e:73:43:22:ae:2f:ae:51:
                    82:ed:9f:e5:07:03:67:da:27:68:b5:c3:6f:10:c6:
                    77:36:ca:79:ad:ea:cf:a5:f2:44:aa:6a:1b:34:9e:
                    0e:87:76:9c:0f:0a:bb:8b:c9:30:63:9f:64:7c:a9:
                    87:ef:70:80:8b:0b:c3:d9:e9:d3:26:bc:78:d2:85:
                    83:6a:1c:8d:1c:2b:60:40:bf:4f:17:a4:85:dd:23:
                    23:cd:2f:74:5f:4e:fe:9c:49:81:0a:7c:37:2c:d4:
                    c3:d3:2d:b7:15:6a:73:c8:40:59:aa:c5:f9:59:98:
                    f0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:90:A2:90:B5:D7:FB:C7:D0:21:05:E7:6F:3A:47:38:2E:9D:83:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99e00571-a3f7-3bd8-8c3e-c7e93c6b01e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.179.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ce:d5:14:b1:01:cc:62:58:1d:68:f7:54:56:80:ac:42:25:
         6d:b3:ff:43:4f:7b:4a:39:45:34:0e:22:5b:92:48:a2:9c:d7:
         2f:c6:7c:1b:cb:88:9e:b2:0a:66:8a:e4:ac:e3:cd:65:c8:29:
         99:8a:f8:a4:89:51:d4:ab:c7:ee:51:37:c0:f0:87:47:4a:18:
         e6:88:33:86:28:eb:83:67:4e:fc:93:5f:d9:bc:d4:a3:77:26:
         6f:92:07:bc:66:bd:ca:37:87:fb:99:69:62:cc:b9:9e:2e:f0:
         09:3c:34:e5:d6:ba:7e:6e:33:78:ae:82:b6:5a:5e:3c:da:38:
         e0:3a:eb:c4:af:4c:96:c3:82:97:a3:58:b1:e0:d2:3d:9d:64:
         2c:c8:bc:93:e9:e7:a1:28:d0:00:68:23:ef:3c:87:9c:39:c5:
         16:6b:80:6e:8c:90:23:c1:de:5b:b1:ca:9e:33:b5:e3:78:1a:
         81:24:aa:a5:99:f5:45:00:1e:a3:7c:fd:32:90:c2:dd:a0:01:
         a6:e6:7f:cb:d5:2c:aa:da:48:7d:ab:d9:f9:5c:75:39:36:71:
         32:ec:b1:a5:ca:5f:ce:16:63:3e:41:38:b6:b6:88:5a:5b:2b:
         41:f6:79:a4:fe:9f:3c:a6:41:bd:53:d6:e1:c9:63:33:c3:34:
         1a:23:9f:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnzE/W6n5qAMWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk
OWRmMzM0MGQtZjU2Mi00MGQyLWIzZGQtMzY1MjFlZTAwMmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2zvjipqtX39Rn4puibN/I3EhM0iFlFRPmp/
XohPxlWFb38+7s2ueDviaCEqxmQklPMo1nmHsJFkvnJlWV6TerwS+B3+AOyZaLoe
FOVOG6sAdz5epSMJ+kyLMG4GtfnaEVvYEHOardqy0bC7e5rEGLPROWiz6mkUz4e3
o7NnIqeD66dQ77MkwC+PkVPwXnNDIq4vrlGC7Z/lBwNn2idotcNvEMZ3Nsp5rerP
pfJEqmobNJ4Oh3acDwq7i8kwY59kfKmH73CAiwvD2enTJrx40oWDahyNHCtgQL9P
F6SF3SMjzS90X07+nEmBCnw3LNTD0y23FWpzyEBZqsX5WZjwlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHmQopC11/vH0CEF5286RzgunYNLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTllMDA1NzEtYTNmNy0z
YmQ4LThjM2UtYzdlOTNjNmIwMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuLN8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHO1RSxAcxiWB1o91RWgKxCJW2z/0NPe0o5RTQOIluSSKKc1y/GfBvL
iJ6yCmaK5KzjzWXIKZmK+KSJUdSrx+5RN8Dwh0dKGOaIM4Yo64NnTvyTX9m81KN3
Jm+SB7xmvco3h/uZaWLMuZ4u8Ak8NOXWun5uM3iugrZaXjzaOOA668SvTJbDgpej
WLHg0j2dZCzIvJPp56Eo0ABoI+88h5w5xRZrgG6MkCPB3luxyp4zteN4GoEkqqWZ
9UUAHqN8/TKQwt2gAabmf8vVLKraSH2r2flcdTk2cTLssaXKX84WYz5BOLa2iFpb
K0H2eaT+nzymQb1T1uHJYzPDNBojn3g=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:34:31 2026 by rpki-client