Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6417566c-cfb1-33dd-833f-646846f906ec.roa
File:                     6417566c-cfb1-33dd-833f-646846f906ec.roa (raw, json)
Hash identifier:          PavK30/odUzPbPtdOrFSv+ZM+AswK4uCruqRnqPFdao=
Subject key identifier:   AC:E8:19:99:8F:22:B2:54:F7:AD:FA:AB:49:9D:37:99:18:95:A7:1C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DFCC308D377AA7AE31D9480
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6417566c-cfb1-33dd-833f-646846f906ec.roa
Signing time:             Thu 19 Jun 2025 10:34:21 +0000
ROA not before:           Thu 19 Jun 2025 10:34:21 +0000
ROA not after:            Wed 17 Sep 2025 10:34:21 +0000
asID:                     22773
IP address blocks:        98.165.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:fc:c3:08:d3:77:aa:7a:e3:1d:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 10:34:21 2025 GMT
            Not After : Sep 17 10:34:21 2025 GMT
        Subject: CN=1b081b75-14c0-4935-9a4f-1f447934f2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:17:d5:c4:1f:ac:b0:99:e6:c8:eb:88:0a:91:
                    f6:99:46:86:b3:df:26:d5:bf:4b:95:88:a5:a8:18:
                    70:5d:a2:a6:63:e3:f2:8a:76:95:fe:aa:75:46:24:
                    2a:bb:02:bd:a1:ec:c9:70:35:8d:4a:53:6a:03:20:
                    19:ed:4e:34:fd:4b:89:a5:4a:80:02:bd:13:6c:73:
                    6d:a7:4b:c1:f1:f3:6c:26:48:3b:91:2d:60:31:00:
                    70:2d:b8:39:4d:9c:6d:1d:b2:2f:45:12:35:cc:ba:
                    dd:55:ad:69:51:79:99:d8:a5:3d:3a:0e:83:16:9d:
                    27:bd:66:5e:5d:f2:78:a5:92:2f:7d:a1:e1:88:be:
                    16:2c:a0:e5:b3:44:72:e2:47:45:a6:de:90:03:04:
                    40:84:b9:13:06:26:5c:dd:4c:8d:4f:37:bc:6b:6a:
                    11:8a:61:db:6c:01:af:74:a9:ba:0d:cd:57:1c:0c:
                    e7:3d:f5:0e:53:71:1e:0f:17:92:28:bc:21:27:e2:
                    c1:10:0c:79:5b:a5:7f:29:4f:77:d3:88:7b:01:77:
                    53:59:c7:22:04:12:60:51:11:b1:a7:30:27:b5:62:
                    bf:70:1c:d5:ad:61:a3:58:58:40:fc:92:fd:6f:cc:
                    de:e2:52:25:ba:57:cc:5a:cb:73:ca:78:f9:db:ba:
                    f4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E8:19:99:8F:22:B2:54:F7:AD:FA:AB:49:9D:37:99:18:95:A7:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6417566c-cfb1-33dd-833f-646846f906ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.165.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:8e:97:8b:eb:25:ea:78:67:89:d1:a4:7d:0c:ab:0a:f0:68:
         89:7b:85:9a:67:45:08:17:a5:09:ad:7d:7b:95:e7:c2:9c:8c:
         3a:03:a9:30:53:dd:93:50:4a:c3:2a:da:b7:88:9c:2e:91:b9:
         6e:d7:ae:ac:87:14:3d:1a:73:56:a4:d0:e5:23:40:8a:80:4b:
         42:d8:ac:27:f8:8b:64:e9:4b:07:17:6f:eb:30:4a:76:48:b6:
         28:c2:42:b0:64:7f:51:ab:3d:b6:a6:61:8f:11:5e:de:c8:fc:
         e3:ba:57:a8:e1:e3:6a:8c:01:09:34:10:64:ae:77:4f:89:cd:
         0a:9d:cf:a7:e1:8c:81:16:fd:c5:9a:31:d1:5f:34:e1:e7:2d:
         04:1a:77:89:4e:e3:9e:58:0f:f2:93:f4:47:3a:a3:37:2f:0c:
         df:54:7d:2e:b1:7b:1d:64:bc:ae:66:b5:a6:98:27:d7:3b:66:
         10:c1:56:08:5e:2e:d9:fa:56:04:36:21:57:43:9e:2e:be:b9:
         75:b8:2e:e4:1c:8c:2d:38:aa:b9:7d:91:94:93:81:f4:29:c3:
         d1:30:e0:26:8b:be:65:03:06:3a:c8:91:ac:56:c2:34:ca:c6:
         00:4c:e4:a7:c3:3c:36:38:76:fc:5b:5d:9e:55:c0:23:a6:c5:
         bc:0b:fa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:33:32 2025 by rpki-client