Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0669eb59-d1e3-32d7-8713-88851e800123.roa
File:                     0669eb59-d1e3-32d7-8713-88851e800123.roa (raw, json)
Hash identifier:          gdE2PhIyfmop8WJWyDYu6mYwFIJSH0cht6MiQ1gXkV0=
Subject key identifier:   58:44:25:37:26:5E:88:A9:CC:8B:5B:B6:B5:0F:20:67:36:7A:2C:F4
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9CB020E0AE0429D8953900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0669eb59-d1e3-32d7-8713-88851e800123.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        184.179.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:b0:20:e0:ae:04:29:d8:95:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=f9d67d5b-20e9-455a-be22-a8d2a0353352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:17:fc:64:c5:60:ef:cb:0e:2e:bc:34:c0:
                    26:67:05:96:d4:20:5e:5f:dc:bf:03:ea:1a:1b:77:
                    40:4e:4f:bc:1f:f9:83:3f:e8:f7:76:53:62:1b:75:
                    93:f5:50:5b:bb:18:da:e4:65:f0:92:af:3e:b2:a3:
                    22:c3:a1:11:d8:9e:b7:a9:9f:aa:a3:94:22:bd:4b:
                    e3:6c:73:92:d3:1c:a8:ec:aa:77:7a:5d:71:81:cf:
                    4d:3d:c9:85:78:2c:0c:b7:51:1a:76:8c:05:ea:97:
                    b2:5a:55:f3:20:b5:38:fa:10:6d:e5:03:14:82:89:
                    09:53:4d:51:5b:ac:9d:96:db:36:a6:2b:b3:88:98:
                    30:68:ca:38:5b:7d:12:1d:c4:f9:6f:0b:42:b8:a1:
                    49:31:65:38:db:b9:03:c5:0f:ca:c0:bc:90:3f:50:
                    aa:48:98:67:16:0f:e4:45:a1:10:ce:17:3a:e0:9e:
                    1a:3b:6c:90:d6:d0:85:63:58:8e:cc:c6:fc:6c:d4:
                    44:8c:db:8a:c6:45:f6:0e:b1:73:bc:2b:e8:65:64:
                    78:e2:88:23:db:45:35:fb:d4:f2:65:63:ad:4d:08:
                    34:84:1f:98:38:cc:09:5d:15:63:81:c6:ca:57:7b:
                    6d:8d:1b:dc:a9:00:a3:02:40:5d:a5:5d:2b:40:ef:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:44:25:37:26:5E:88:A9:CC:8B:5B:B6:B5:0F:20:67:36:7A:2C:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0669eb59-d1e3-32d7-8713-88851e800123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.179.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:55:16:5e:a3:3d:69:74:86:0e:7b:66:0a:a3:92:2d:c7:ef:
         ad:50:5f:27:60:49:9e:26:f2:a5:f0:aa:87:18:7f:16:c3:8b:
         e1:85:da:03:7d:d9:25:4b:6d:15:f1:5e:0a:45:73:81:d3:b2:
         32:d3:7e:fc:55:c2:40:f7:51:1a:37:15:f0:ab:e3:24:f7:1c:
         37:2f:82:d3:fd:eb:4e:e1:30:f8:b2:11:f2:d9:76:6d:e6:d8:
         59:b2:93:2d:9c:11:ee:78:8d:d8:02:9c:e0:5d:69:08:dc:42:
         5f:80:b7:63:1e:c7:c9:22:90:a5:57:34:08:d1:9b:e6:75:d2:
         1a:c5:6e:ee:b2:34:82:cd:32:73:6d:cb:c4:c9:39:1a:b7:5b:
         ae:8e:28:5d:4b:52:6b:fd:f6:97:69:2b:76:81:d3:c7:27:53:
         88:ef:9e:8f:03:ea:84:a0:9a:3a:f9:5c:bd:25:79:ef:ba:13:
         a0:0d:53:6a:20:33:1e:ec:72:53:74:fb:ad:ca:ac:cd:bc:c3:
         87:76:72:4f:6c:25:2e:3e:66:11:27:e5:3b:7f:e0:e9:65:72:
         98:ec:76:d8:22:e6:c0:8b:f1:08:a1:9f:bf:fb:3c:1d:a0:66:
         dc:36:28:2e:9c:b7:9d:52:6e:d2:b9:89:89:93:6d:da:f2:c8:
         25:10:11:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:23:36 2025 by rpki-client