Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9bf8e1fd-7a1c-31a7-b1a9-ea5b10b92dc4.roa
File:                     9bf8e1fd-7a1c-31a7-b1a9-ea5b10b92dc4.roa (raw, json)
Hash identifier:          8Lxylqs68WRKRBEAwvx3YLzyUFGBOMwWKbKId4SwJds=
Subject key identifier:   65:7C:67:61:B0:6E:85:F2:EC:6B:8D:73:70:4E:89:69:A5:4B:18:A5
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C8A8F6D5637FE97EA11A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9bf8e1fd-7a1c-31a7-b1a9-ea5b10b92dc4.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        98.165.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:8a:8f:6d:56:37:fe:97:ea:11:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=a89ada00-7c08-43de-a1ae-3e3b4f0a6b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:1e:26:7c:e0:16:92:20:61:2e:af:23:1f:
                    5f:b6:b2:61:3d:95:fb:29:31:0d:83:8f:7d:31:1f:
                    ab:08:8f:47:04:8c:e8:24:cd:a3:05:a3:66:7c:09:
                    65:68:1d:34:e7:ef:ab:d6:d3:6d:57:5f:b6:24:c3:
                    6c:30:89:86:fc:69:2a:ef:55:28:87:66:27:89:41:
                    2e:76:96:75:39:11:6c:14:c0:2a:7c:2a:43:f2:a7:
                    d4:07:b1:d6:ad:61:7a:b0:df:5a:c7:05:b2:25:0e:
                    15:d6:b2:7e:3b:bc:89:a7:a8:78:3f:24:b3:45:3d:
                    40:f0:3b:be:bc:8f:49:c9:48:2c:e6:5b:5a:42:27:
                    95:d1:6a:f2:38:0d:f5:d1:1e:84:d1:50:7e:48:38:
                    e2:2b:d8:3b:34:4d:7f:27:2c:36:a2:f7:d9:9d:81:
                    7d:21:8b:a9:37:5f:cc:41:7b:4f:cc:dd:be:7d:69:
                    ba:30:aa:55:ca:3c:97:6f:36:6c:dd:c9:58:4b:fb:
                    89:65:9a:9c:b2:c1:90:61:be:2e:7d:5c:c2:ee:7f:
                    82:99:13:28:1d:a3:c2:21:ee:45:08:f4:ad:56:af:
                    b4:fb:8b:ba:e3:6c:73:c0:54:47:6e:11:e4:cb:2e:
                    8d:48:e9:bd:de:5a:0b:14:8e:b2:7d:23:c8:c9:6d:
                    f5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7C:67:61:B0:6E:85:F2:EC:6B:8D:73:70:4E:89:69:A5:4B:18:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9bf8e1fd-7a1c-31a7-b1a9-ea5b10b92dc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.165.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:dd:67:e2:2e:8e:87:12:d4:8d:e6:ba:7c:99:6d:3c:c4:3b:
         e3:d0:6b:11:17:3d:25:f7:54:21:41:1f:d6:ba:9b:41:af:9b:
         d6:91:71:4d:bd:22:b3:53:8e:c3:22:5b:08:49:f8:09:a1:5c:
         bd:cf:ec:0e:96:24:44:d7:59:ee:ad:8e:ca:13:6f:7c:90:aa:
         59:24:c4:22:3b:92:b4:e3:e9:6c:7f:7e:d8:6c:ae:63:a3:f4:
         0a:1d:1b:fa:26:75:42:17:bd:20:c4:48:49:d8:86:03:01:27:
         c4:db:18:31:88:46:34:53:e9:aa:22:21:3e:27:fe:a3:06:c5:
         c9:98:38:72:7d:83:b0:9a:70:73:c8:2e:01:6e:df:66:13:0d:
         5c:fe:3b:15:25:94:97:e2:72:4f:33:fa:11:5b:9d:27:9a:c3:
         75:4f:68:72:f6:8e:c1:91:71:15:a3:25:7e:d6:91:37:59:0c:
         2b:b1:b7:7e:59:89:ec:e5:2e:1a:ba:33:54:17:27:12:f7:55:
         51:1c:a6:19:2c:d6:c2:f1:63:ff:0f:ea:d0:72:81:4c:7a:7b:
         59:16:ed:9d:f5:56:81:a4:c7:06:2b:e5:70:67:c5:2d:3a:ba:
         69:2e:c8:df:35:65:55:b5:0e:1d:13:18:9b:bb:1a:5f:35:b0:
         c7:79:28:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:44:01 2025 by rpki-client