Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/168fb363-2bc0-3944-8737-5c7cd6752691.roa
File:                     168fb363-2bc0-3944-8737-5c7cd6752691.roa (raw, json)
Hash identifier:          F1MuzTnROye4wPktnHtyUc2xFoKgFjk9zu8I0GbbX+k=
Subject key identifier:   E1:80:9B:35:2B:AF:A9:EF:75:3A:B4:EA:B9:28:B5:43:0A:76:EC:8F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B6BC74667959038D9F7E38A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/168fb363-2bc0-3944-8737-5c7cd6752691.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     7029
IP address blocks:        98.18.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:46:67:95:90:38:d9:f7:e3:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=86c127f9-9d33-46fa-87e4-20cc6ef0ca7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b4:5c:c1:c1:68:04:d9:23:ae:cf:6b:b2:d2:
                    ec:2d:9b:db:37:cf:ec:6a:e2:26:4b:d3:38:59:35:
                    ab:5e:df:d1:fc:52:bb:a8:a6:26:4d:4d:42:44:95:
                    2c:67:f7:c4:70:68:c4:1d:37:fd:0a:49:66:7c:e0:
                    30:98:81:f8:b9:89:f5:db:10:82:e2:02:20:80:81:
                    90:e4:49:1f:09:cd:1d:49:9a:77:5b:c8:fd:0f:68:
                    84:c6:5e:2a:11:a9:09:d6:23:a1:d4:bc:14:1b:b4:
                    71:1a:79:ca:29:3e:64:93:bc:50:a5:55:dd:57:c3:
                    4b:dc:f7:d8:a5:8b:5f:16:22:86:30:30:eb:6e:62:
                    10:72:41:2d:a7:8a:68:e0:87:80:6f:16:6b:29:d1:
                    29:10:5e:bf:5d:cb:c4:8a:7b:94:95:8c:1b:ea:c3:
                    10:5e:7a:26:e7:2d:fc:ce:a4:8c:e9:66:33:90:86:
                    6f:72:5f:4f:db:99:b8:e3:05:e5:6c:ec:64:5f:be:
                    53:fe:ff:96:49:28:14:4e:f5:20:9a:4f:b0:6f:cb:
                    05:fc:1e:7d:a2:cd:1b:4b:ca:68:f8:5c:01:3f:8d:
                    81:0d:e7:fb:10:52:4f:71:63:e9:0a:27:37:a3:75:
                    d4:d0:32:3c:86:83:0e:13:c8:f7:44:94:d1:98:23:
                    b2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:80:9B:35:2B:AF:A9:EF:75:3A:B4:EA:B9:28:B5:43:0A:76:EC:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/168fb363-2bc0-3944-8737-5c7cd6752691.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.18.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:cc:38:03:28:b0:ee:79:0f:d5:4d:97:0c:ff:5c:9e:3c:eb:
         c8:66:80:68:1e:5c:0a:11:a0:20:b1:f3:0e:b4:a7:ac:f2:9f:
         33:6a:ff:7c:7b:e7:a7:aa:cb:6a:10:f5:cf:f6:1b:54:5f:a0:
         23:86:f3:bb:61:4f:ef:6e:7b:a3:74:a9:4b:8b:46:74:61:6a:
         b6:ab:c2:7e:68:4a:a5:74:ee:b8:d1:aa:b6:80:bb:f4:37:81:
         3c:bb:96:ce:9e:82:c6:23:27:41:fc:23:86:7e:e6:d5:bd:67:
         6d:9b:88:bb:5f:20:05:82:09:19:4c:41:db:ea:5d:85:0a:fe:
         99:39:76:47:44:80:b7:56:16:50:94:32:a3:54:91:9e:3f:58:
         a1:3d:64:44:a9:cc:e0:e9:2d:41:77:89:8f:95:b9:52:62:04:
         ea:d9:8b:f7:6b:72:81:12:11:90:49:52:64:94:97:63:d9:98:
         9e:fb:15:b9:31:37:e4:32:ab:01:12:79:dd:fb:ff:02:76:05:
         6b:6d:94:17:d1:2d:e1:27:74:da:22:27:06:fe:53:78:a2:81:
         0a:d2:6f:38:08:dd:e3:88:df:00:3b:7d:ba:7b:75:1e:b6:01:
         c5:8c:80:c2:d7:25:a2:16:8c:2f:1b:ab:3b:1c:a9:0c:ec:8f:
         e1:42:d8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:51:31 2025 by rpki-client