Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51a252e6-61c8-355e-a87b-9ef0b30e4295.roa
File:                     51a252e6-61c8-355e-a87b-9ef0b30e4295.roa (raw, json)
Hash identifier:          InPPk0AZnkBGOG5F6nalLA9NH/l9Pd8wS6+ULPcxuVY=
Subject key identifier:   20:53:77:20:0E:10:82:0B:64:21:74:89:DF:85:FE:FF:91:ED:FE:94
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F1FFCAC2BB641AFBAC6600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51a252e6-61c8-355e-a87b-9ef0b30e4295.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        174.65.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f1:ff:ca:c2:bb:64:1a:fb:ac:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=b8c2fd9e-8bdb-4ff8-a6dc-f0129f1aec69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:a2:69:af:67:14:51:99:a9:7f:f0:a7:4f:
                    4f:e4:6a:a9:26:ca:42:12:e7:fb:ea:4c:a2:86:52:
                    00:fb:f0:1d:3c:b2:7c:aa:b6:b1:94:40:1a:4b:30:
                    08:ec:5d:52:3e:5c:5f:91:7f:07:a8:4d:f7:c8:d6:
                    fe:34:14:b1:30:9d:5f:04:06:d3:b2:39:cd:e1:2c:
                    27:09:89:4e:fc:f6:e5:1e:31:10:78:72:ce:7c:16:
                    2f:3a:91:e7:a7:61:cf:0c:5b:74:de:98:53:b6:07:
                    97:f6:d5:a8:04:86:9d:77:1b:0c:33:9e:50:69:fd:
                    48:9d:f3:26:a5:06:8c:5c:01:72:0b:9f:d1:4d:3b:
                    89:e5:74:3b:f9:c4:f5:16:9d:a0:ca:92:19:9c:2d:
                    60:6a:8f:73:aa:58:e0:d5:09:59:b1:19:c0:53:7c:
                    22:03:fd:de:65:35:3e:a5:4c:0e:d4:9c:bb:a7:52:
                    ab:f4:0f:44:04:8c:f3:3d:c1:fb:5b:bf:7b:ae:4a:
                    57:71:aa:d0:29:43:1f:d0:ca:69:40:0a:59:f1:02:
                    af:98:57:2c:35:26:dc:94:7b:df:45:02:ad:55:d3:
                    35:7f:77:a4:09:ff:33:0d:5d:e5:8e:df:79:3b:64:
                    b6:bb:d3:1d:0c:be:b6:3a:0b:2f:a0:12:56:fb:0a:
                    be:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:53:77:20:0E:10:82:0B:64:21:74:89:DF:85:FE:FF:91:ED:FE:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51a252e6-61c8-355e-a87b-9ef0b30e4295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.65.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:67:ea:7f:6f:3f:a4:64:83:f3:bb:e5:34:72:e5:9f:ee:08:
         69:06:1f:fd:44:65:32:6a:f3:85:cf:98:ab:49:06:1c:3a:44:
         a3:a6:96:9a:99:2e:ad:fe:4e:71:cf:e0:1e:17:16:ea:c2:a9:
         1f:1a:c6:5a:a8:d4:ab:8b:88:80:84:28:15:6b:b1:19:f3:66:
         93:05:4f:a8:58:26:ac:94:8f:5a:02:27:26:20:f0:4a:82:da:
         98:d6:ab:a6:68:0b:c1:75:5d:94:cd:f3:f6:d9:3c:c3:bf:4d:
         95:ba:e2:b6:a1:29:e3:8e:71:0c:dd:6d:23:db:0a:9a:57:fe:
         83:7f:11:ca:2a:f7:b8:0c:f8:09:a0:9d:f6:4d:91:ea:21:27:
         d4:4e:d4:99:df:ca:cf:5e:86:92:e6:43:32:0e:4b:88:ee:77:
         f1:48:c5:48:02:1e:08:28:47:0c:a8:66:e9:34:28:8e:dc:ca:
         f2:f7:a6:98:a3:47:6f:92:19:7d:84:09:5d:73:ce:89:e5:16:
         be:8c:c4:4d:53:54:d7:ff:27:00:b1:4b:54:8b:f2:24:26:f3:
         89:bb:bc:89:dc:6e:ae:53:7a:12:6b:4f:da:4e:d0:e4:28:f6:
         c2:8d:e9:dd:af:2f:97:77:a5:c7:57:f6:18:af:75:df:4e:b8:
         a9:d6:8e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 01:28:28 2025 by rpki-client