Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7dd54090-470b-36c2-9e34-dc4a05bb0527.roa
File:                     7dd54090-470b-36c2-9e34-dc4a05bb0527.roa (raw, json)
Hash identifier:          B/DX4Bur/GTZ7UgR6F9n5/isHGiVItqzSiCGD7KWSiw=
Subject key identifier:   22:5F:3A:47:1A:D1:80:ED:82:E1:28:7E:98:BC:73:28:A1:89:95:3A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C8D196888CC2DC575DB60
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7dd54090-470b-36c2-9e34-dc4a05bb0527.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        98.167.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:8d:19:68:88:cc:2d:c5:75:db:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=cfc39b41-fa9c-4631-8fab-549e2439f45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d3:89:8a:eb:dd:ec:0d:9b:b0:76:ca:5b:66:
                    ac:ce:0e:20:bc:80:5a:1f:78:19:cf:dd:3e:9e:75:
                    d7:4e:36:e2:6f:26:27:46:0e:da:6f:95:53:02:71:
                    9e:13:a2:2e:27:d4:4a:e9:a2:3d:37:20:72:e8:a5:
                    8c:44:d4:cb:ad:0b:af:fa:12:e8:ab:e1:d4:19:ec:
                    23:97:5d:96:58:f5:73:ed:a5:5a:10:78:04:4a:27:
                    f4:65:9a:b9:05:27:95:9c:ad:fb:e7:5a:df:f2:d8:
                    c7:eb:15:1a:18:22:80:5e:af:e8:89:f4:95:2d:37:
                    d9:38:2a:42:9c:7d:75:2e:84:1d:11:1b:3c:6d:86:
                    81:bf:f8:6e:5d:6d:45:cd:0f:54:d1:32:28:67:7c:
                    2d:74:ad:ab:dd:50:de:aa:34:ee:d9:41:e7:be:57:
                    4c:83:e8:27:31:e2:55:78:eb:c0:68:38:8c:4f:ab:
                    f6:8f:33:fe:da:5a:69:64:24:8b:1c:6e:ed:dc:b6:
                    92:ba:fa:33:40:ab:14:e5:e2:18:83:92:9a:6b:be:
                    b1:46:8b:7d:1c:d1:74:2d:fa:a2:51:af:e4:dc:bf:
                    70:a8:04:6b:6e:a6:5f:78:57:8f:02:e2:65:99:91:
                    96:9d:9e:aa:48:66:13:51:66:ff:9d:69:4b:52:06:
                    b6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5F:3A:47:1A:D1:80:ED:82:E1:28:7E:98:BC:73:28:A1:89:95:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7dd54090-470b-36c2-9e34-dc4a05bb0527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.167.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:d5:78:b5:be:da:6c:cf:c9:02:5d:c0:94:0d:4b:26:da:55:
         22:e6:fb:dd:6b:33:cd:4a:ef:54:00:0a:bc:58:10:9f:d3:c0:
         d5:7e:22:31:7b:c6:85:15:19:56:56:6f:f5:57:38:50:1f:eb:
         a7:4f:a0:03:e4:51:79:34:ac:77:ed:65:4f:ec:1a:f4:b2:7b:
         a1:95:09:f2:9e:97:f7:b2:55:3b:38:1a:af:c3:0e:71:30:70:
         4a:d0:c6:db:40:39:80:c5:08:4c:4f:c5:54:f9:0c:6a:13:29:
         f8:ca:99:74:df:93:cb:9a:75:1f:c9:8b:2a:5a:bc:d4:fd:c3:
         0e:66:2e:fb:83:f3:6e:0c:8f:68:e3:19:ae:2c:35:2e:fe:08:
         88:c8:01:e6:84:ac:2c:40:75:74:4f:96:84:88:2c:7d:79:b8:
         43:0d:c9:1b:c3:c4:ae:6b:4c:eb:1f:ca:73:09:7f:fd:a3:20:
         a1:f6:96:3e:26:46:43:2e:6f:e8:d6:92:a0:0e:af:5d:f8:85:
         95:66:08:b5:15:9a:53:3e:9d:f5:7d:e9:b2:41:cd:f0:db:4d:
         77:d7:42:ae:bc:53:5f:3d:47:c6:96:4a:9b:b8:2b:41:84:fc:
         6a:5c:26:1d:23:de:ec:b4:38:55:4b:59:e9:16:06:1b:0f:f8:
         fc:d6:b8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:38:47 2025 by rpki-client