Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f63a87b-cdbb-3fe3-8cb5-074789e7bf03.roa
File:                     3f63a87b-cdbb-3fe3-8cb5-074789e7bf03.roa (raw, json)
Hash identifier:          oJbcwMFCFyqpDrTKUky3tPRBq+PtbUXs3OPPgp7n8Lg=
Subject key identifier:   85:01:80:C6:38:63:54:EF:72:0B:37:14:07:30:B2:6A:09:AD:4A:52
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F27B582D76AD8688A85080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f63a87b-cdbb-3fe3-8cb5-074789e7bf03.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        98.166.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:7b:58:2d:76:ad:86:88:a8:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=8971ae92-40b6-46f5-bffd-fdc3ed96e7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3b:4c:bc:91:61:26:5c:c3:4a:3c:ad:9c:e3:
                    e0:a8:12:69:ef:d6:f4:72:8a:89:a2:11:0a:44:37:
                    74:ab:f3:1a:8d:a3:5f:7a:2a:ee:3b:65:bb:ec:45:
                    70:52:0c:48:da:c2:1e:54:7e:f7:72:17:0a:2a:11:
                    a2:1b:7c:d2:5f:f5:8b:a8:dc:a9:81:b2:ad:52:a3:
                    bc:c7:14:4a:19:a9:9c:d8:b3:48:53:14:4c:85:13:
                    be:98:82:b7:06:43:72:9d:07:fe:aa:f0:8b:15:93:
                    e4:2e:c7:12:68:e5:f4:d1:b5:ad:8c:ca:11:87:af:
                    9a:c1:2c:76:f3:3d:13:f7:6e:4d:ca:d5:8d:80:5f:
                    37:fa:a3:46:cc:06:2c:19:2b:7c:21:8a:e0:ce:0b:
                    f0:4b:7e:55:5a:fa:3a:aa:ac:72:f9:f1:fc:0c:6e:
                    ec:17:7d:37:db:7f:db:a3:8c:74:2b:56:fd:44:4c:
                    61:f9:c2:10:78:99:25:66:95:ad:5e:66:8b:90:06:
                    61:83:a0:fb:07:26:88:bf:2d:78:75:34:46:de:14:
                    05:b0:57:ff:47:73:74:93:ce:3e:61:e5:ae:cd:58:
                    8c:c5:ad:84:fd:82:0a:4a:20:4a:17:69:6b:88:d8:
                    36:65:ca:b0:de:ac:80:a1:9a:4c:80:62:44:c5:e7:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:01:80:C6:38:63:54:EF:72:0B:37:14:07:30:B2:6A:09:AD:4A:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f63a87b-cdbb-3fe3-8cb5-074789e7bf03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.166.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:5d:a1:96:b4:72:dc:e0:73:61:c6:22:e6:56:bf:66:31:a2:
         c9:c9:17:5f:24:dd:b6:53:73:89:b4:af:a4:b8:6b:19:1b:cc:
         7b:c9:99:75:b6:40:a1:b0:ef:dc:0c:d7:69:b3:a7:e0:49:a9:
         8e:93:19:11:7b:f5:ed:90:50:d8:a1:32:d0:7c:e9:84:a5:02:
         4b:c2:38:a4:5b:93:1e:32:83:cf:8f:06:fa:7f:b2:85:05:3f:
         9c:4f:a7:ae:44:9b:90:ea:8d:c2:0b:20:33:42:f3:b5:b9:c7:
         b4:b3:b2:94:3f:7e:72:4c:57:64:1e:bf:7b:ca:5d:bd:f4:44:
         26:81:79:41:bd:21:02:91:90:c9:db:27:4b:f0:61:af:2b:d6:
         01:78:20:3f:0f:28:f7:24:f4:2c:4c:46:9c:51:25:10:76:c0:
         30:f8:99:9f:c6:e4:cd:57:aa:43:d0:98:0d:56:24:ad:66:2d:
         1e:e5:f7:db:77:bb:53:96:5e:fc:fd:1d:d9:69:57:5d:d3:82:
         7a:37:89:ba:a1:65:12:b0:80:00:d2:be:71:63:25:a6:3a:18:
         f7:10:61:a2:35:cb:fd:95:45:60:ac:aa:a9:91:7e:9c:09:3c:
         e2:6f:f2:ef:c7:8d:d6:dd:22:92:5b:cb:81:55:c8:6f:c1:24:
         63:7f:96:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 04:49:48 2025 by rpki-client