Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/90e1992e-5134-339d-915e-0244df4e5d1b.roa
File:                     90e1992e-5134-339d-915e-0244df4e5d1b.roa (raw, json)
Hash identifier:          d6YRqhW+yA5QIn7TFM6c4YdsOJ+DM5zSFF110FtmTKc=
Subject key identifier:   48:9D:CB:9D:2D:0E:05:BC:45:8C:CA:CE:54:10:5A:F3:F4:51:28:C7
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584F4975DACE40BC32641A67D180
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/90e1992e-5134-339d-915e-0244df4e5d1b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     965
IP address blocks:        162.244.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:da:ce:40:bc:32:64:1a:67:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7dbdf10a-f661-47d0-b7a8-1d5db861e0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:74:63:8a:ce:5e:83:f2:92:bd:f1:5f:99:29:
                    6e:05:e4:13:af:17:04:d4:a9:9b:a6:55:b4:b1:91:
                    15:b3:00:d4:99:30:85:ba:5f:88:82:3c:0c:3e:66:
                    b0:ad:33:93:58:2e:60:24:94:5b:8c:4b:52:80:76:
                    84:3d:d3:8f:0d:bf:f7:a4:e9:be:0a:1f:48:6c:9a:
                    df:a1:13:ac:8e:c8:40:97:64:20:8d:ab:16:38:a0:
                    58:25:b6:2f:38:60:ee:93:f4:b5:59:65:57:57:3e:
                    bc:fa:7b:06:b2:d8:7b:d8:4c:04:72:ca:fb:6e:c7:
                    82:a8:4f:60:34:33:29:c6:c7:34:fa:83:1a:96:ec:
                    b5:24:ff:df:dc:ed:b9:e9:94:0c:46:32:05:34:d6:
                    db:24:bf:4d:6f:00:d1:36:af:23:db:f7:e3:ab:69:
                    6b:17:10:b4:0a:d3:2b:22:31:20:99:b9:a8:96:28:
                    2d:76:b4:00:75:bf:67:2c:32:84:23:3b:ea:96:da:
                    9e:3f:09:34:1a:0a:08:52:83:e6:46:92:99:76:07:
                    16:b5:b5:5a:31:f4:87:db:3c:4b:8e:16:2c:08:c3:
                    8a:a4:86:7d:c0:1d:a5:b8:65:3a:80:1c:9d:c0:c2:
                    69:56:50:3f:dc:a5:c7:a4:82:c6:e1:9c:ae:6d:76:
                    88:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9D:CB:9D:2D:0E:05:BC:45:8C:CA:CE:54:10:5A:F3:F4:51:28:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/90e1992e-5134-339d-915e-0244df4e5d1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:4f:63:f9:0e:f7:ed:88:a2:c3:37:1e:76:84:44:51:65:d5:
         14:bc:ee:03:fd:54:33:3f:4a:ae:d7:e3:e0:86:9a:eb:a3:e2:
         a4:f1:7d:38:74:e0:4d:ec:2c:ab:54:31:74:0a:f3:7c:6a:95:
         08:1a:53:17:8f:09:c7:7a:a8:c0:fd:cc:04:fd:db:b1:83:a9:
         19:f8:f2:8a:61:65:12:e7:5e:d1:06:12:3c:27:1e:bd:4a:d3:
         b0:c5:88:61:cc:1c:70:0d:3e:70:fb:68:d6:3f:54:4a:7a:9f:
         a7:87:f3:da:d5:ba:ae:31:f2:79:9b:30:6d:b3:d2:be:89:81:
         ab:74:ae:52:2f:46:a1:9a:16:d7:08:98:02:aa:47:7d:61:bc:
         19:18:94:98:db:83:c0:c9:73:f1:03:0f:bb:46:90:e5:f5:3e:
         a2:68:5a:f4:ea:a0:73:65:79:b7:15:de:d4:4d:cb:3d:5a:82:
         0b:0b:1b:8f:3b:95:cf:af:78:7a:da:76:50:5d:5e:cd:d5:59:
         e0:23:d5:fe:1b:80:ae:9e:4c:c7:26:23:52:22:d4:7c:c8:c1:
         b3:72:3e:33:7e:20:07:54:fc:b8:d6:f4:8f:75:15:97:f2:a8:
         8c:52:19:39:b0:65:77:92:72:ea:07:aa:87:6b:47:0f:0b:0b:
         09:d7:90:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JddrOQLwyZBpn0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi
OWQ3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
N2RiZGYxMGEtZjY2MS00N2QwLWI3YTgtMWQ1ZGI4NjFlMGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHRjis5eg/KSvfFfmSluBeQTrxcE1KmbplW0
sZEVswDUmTCFul+IgjwMPmawrTOTWC5gJJRbjEtSgHaEPdOPDb/3pOm+Ch9IbJrf
oROsjshAl2QgjasWOKBYJbYvOGDuk/S1WWVXVz68+nsGsth72EwEcsr7bseCqE9g
NDMpxsc0+oMaluy1JP/f3O256ZQMRjIFNNbbJL9NbwDRNq8j2/fjq2lrFxC0CtMr
IjEgmbmoligtdrQAdb9nLDKEIzvqltqePwk0GgoIUoPmRpKZdgcWtbVaMfSH2zxL
jhYsCMOKpIZ9wB2luGU6gBydwMJpVlA/3KXHpILG4ZyubXaINwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEidy50tDgW8RYzKzlQQWvP0USjHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi
NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvOTBlMTk5MmUtNTEzNC0z
MzlkLTkxNWUtMDI0NGRmNGU1ZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj
MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi
YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm
NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovRcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRPY/kO9+2IosM3HnaERFFl1RS87gP9VDM/Sq7X4+CGmuuj4qTxfTh0
4E3sLKtUMXQK83xqlQgaUxePCcd6qMD9zAT927GDqRn48ophZRLnXtEGEjwnHr1K
07DFiGHMHHANPnD7aNY/VEp6n6eH89rVuq4x8nmbMG2z0r6Jgat0rlIvRqGaFtcI
mAKqR31hvBkYlJjbg8DJc/EDD7tGkOX1PqJoWvTqoHNlebcV3tRNyz1aggsLG487
lc+veHradlBdXs3VWeAj1f4bgK6eTMcmI1Ii1HzIwbNyPjN+IAdU/LjW9I91FZfy
qIxSGTmwZXeScuoHqodrRw8LCwnXkJU=
-----END CERTIFICATE-----
Generated at Wed Sep 30 11:41:45 2026 by rpki-client