Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c4212e5-52d7-338d-b5c9-1f4652fb10c0.roa
File:                     5c4212e5-52d7-338d-b5c9-1f4652fb10c0.roa (raw, json)
Hash identifier:          uWkxPljdFje9JrSDP8kyVpV7e6xZ6YAY9qgsTntemhs=
Subject key identifier:   5A:83:C2:EF:B5:F2:A9:3E:DE:5E:57:7C:5C:15:36:2B:BE:B3:5A:7B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B20673018D1A6FFDC26D6CBC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c4212e5-52d7-338d-b5c9-1f4652fb10c0.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        98.167.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:30:18:d1:a6:ff:dc:26:d6:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=dd5a7552-e742-4a26-aa29-5f24a9a73367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:37:ff:c5:38:31:4f:32:68:87:e1:01:10:3b:
                    d4:ba:ff:ac:1a:9b:55:f3:b7:e0:82:f8:43:8c:c9:
                    13:65:50:10:5c:15:37:6c:43:84:cb:48:39:34:25:
                    ff:57:99:ed:80:a3:e3:78:7a:a2:ef:e2:85:a2:e4:
                    d1:bd:b8:e1:43:cf:85:93:89:4d:bd:fb:da:65:1b:
                    c0:5c:76:86:67:59:73:d9:66:5d:e4:df:fe:ed:c9:
                    1c:e5:9c:2a:d2:b6:ee:81:b7:f8:29:7f:6e:b4:13:
                    a4:de:ba:bd:99:63:97:0a:11:d3:fe:ca:c2:7c:4f:
                    a3:49:93:e1:25:be:18:c8:dd:50:bc:b9:24:35:b3:
                    1d:d0:af:2b:9c:d1:f5:d1:2f:87:1c:d4:26:7d:22:
                    f5:2d:b9:88:79:d7:40:13:7e:c7:76:ad:8d:0b:05:
                    0c:63:f6:ca:8d:3f:dd:45:09:31:ea:e2:47:a2:86:
                    ef:6e:60:1c:13:a9:35:d1:a2:d6:2e:7a:f6:25:b5:
                    2a:d3:5b:57:26:fd:47:5e:ad:c1:64:f0:93:34:7b:
                    ad:e2:bb:de:1e:5f:ef:50:09:72:60:2f:54:b8:14:
                    9d:c5:09:f1:34:16:52:06:f7:71:30:53:21:f5:2d:
                    fa:77:ee:2e:9c:a0:b4:31:aa:e2:41:ae:20:ef:2a:
                    b0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:83:C2:EF:B5:F2:A9:3E:DE:5E:57:7C:5C:15:36:2B:BE:B3:5A:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c4212e5-52d7-338d-b5c9-1f4652fb10c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.167.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:78:26:59:2d:1c:c8:6c:d0:83:60:3c:fc:3e:a0:26:89:ba:
         2a:15:35:dd:9b:e0:e4:42:58:5f:0e:fc:15:69:f7:6c:38:a2:
         90:11:63:f3:47:af:8f:7d:38:a6:b9:c1:ce:c3:d2:12:46:96:
         86:5f:8f:1d:44:79:95:91:ba:58:b1:3c:58:69:e3:18:c4:d9:
         76:8d:0e:19:27:1f:ce:4e:e8:63:56:07:78:09:22:a2:d3:ce:
         94:1a:15:41:af:ba:4f:17:83:ef:da:bd:cd:dc:2d:cf:de:80:
         58:f9:af:d8:db:fa:40:76:12:73:62:a7:d9:2c:42:47:8b:e2:
         aa:30:a9:bc:62:e9:66:66:1e:30:11:55:19:5f:3c:07:0a:38:
         36:51:2e:65:20:50:d9:9b:fa:77:e8:40:aa:e5:8f:03:98:f1:
         96:bc:d5:60:9d:aa:5e:1b:b1:e1:9b:68:52:6a:0a:40:e2:1b:
         fb:ce:ed:ba:f8:39:28:0c:b3:77:b6:24:21:9e:23:a4:77:d6:
         0e:92:86:32:59:52:61:b3:86:37:51:d3:01:47:1a:47:a9:2f:
         98:f7:ca:fe:04:fc:6d:2f:ac:e2:32:e1:09:12:bd:f3:82:dd:
         5f:f6:cd:02:7b:e7:7a:31:8f:eb:f5:10:bf:34:05:b2:71:bf:
         d8:f4:19:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:28:36 2025 by rpki-client