Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/abb7c0d6-c7ba-33a5-9b8f-2c25757ca09e.roa
File:                     abb7c0d6-c7ba-33a5-9b8f-2c25757ca09e.roa (raw, json)
Hash identifier:          mbN6DrV0IJUZzgwt8+x7mPEDXbQPS3+GAqrWU06kMrE=
Subject key identifier:   0B:6B:D3:3A:AF:6F:1F:AF:92:01:0D:FA:81:71:04:3C:F0:51:CF:BB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F264DE5A70BF7F250C9A80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/abb7c0d6-c7ba-33a5-9b8f-2c25757ca09e.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        98.176.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:64:de:5a:70:bf:7f:25:0c:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=58b96cc8-1a6a-4823-9831-f5ac5858d95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:3d:85:83:cb:e3:a9:f2:34:9d:7c:f6:de:
                    7f:07:3e:5a:61:0e:4e:38:02:75:48:b7:51:1d:0e:
                    74:ed:5e:06:ee:a2:5a:08:e0:0d:69:1d:e7:85:52:
                    4c:66:d8:5d:ff:4b:3c:40:e9:d2:8d:51:11:e1:2b:
                    0e:21:e6:59:60:57:3a:f9:48:89:33:4c:fe:82:a2:
                    85:69:43:2a:46:3b:8c:a0:43:41:45:8a:46:7e:e4:
                    11:07:d8:e2:04:61:2d:c1:4c:ad:a8:7c:27:35:4e:
                    34:e5:69:97:23:37:3f:24:5d:c9:ea:86:b9:16:5d:
                    4f:32:1a:e4:10:44:0d:a5:71:40:49:fd:6a:5a:aa:
                    fc:a0:0e:ef:13:7d:7c:2b:47:90:a6:3d:ca:cf:99:
                    fc:0f:25:d9:e5:1f:24:8c:a6:cf:aa:32:c6:81:f3:
                    77:da:a7:a0:c7:7f:3a:43:03:ee:0d:b4:de:87:9d:
                    5f:1d:14:8b:71:0c:97:e1:88:c3:47:a9:db:da:6a:
                    21:68:65:e0:f6:b7:9b:1a:5a:2a:29:1a:e6:bd:cc:
                    19:d3:64:20:f1:94:59:c1:7d:09:a3:0c:50:d7:9f:
                    26:44:67:b6:1f:4f:93:94:6f:02:47:53:f2:9c:60:
                    a2:c2:b0:b0:5b:f0:70:31:6d:1b:73:54:9e:b3:ca:
                    72:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6B:D3:3A:AF:6F:1F:AF:92:01:0D:FA:81:71:04:3C:F0:51:CF:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/abb7c0d6-c7ba-33a5-9b8f-2c25757ca09e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.176.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:5b:d1:9a:fa:d0:1b:d9:92:93:a7:fd:7c:b9:a8:d8:01:f6:
         c8:ca:53:2d:69:79:14:86:de:74:ac:81:6b:15:d6:9d:4e:7d:
         a6:52:3e:9a:16:84:0c:35:3d:85:6c:5a:71:e2:fe:3b:88:9f:
         e5:1f:89:e2:6a:79:eb:31:86:5e:b6:e8:1e:31:32:e5:f9:29:
         4a:db:43:57:8b:5b:6f:55:66:ec:c1:da:19:79:41:2c:63:87:
         0e:5a:0c:37:74:5b:70:f1:dc:ad:b2:d8:14:b8:14:d5:2f:1e:
         ed:78:0b:8a:c9:b5:4b:8f:75:ef:b2:42:3a:5e:15:13:b0:52:
         88:b7:ec:df:31:94:03:39:c8:11:29:b3:a3:c2:25:6d:f9:f1:
         af:a7:96:5c:79:17:26:15:e4:ea:60:57:c2:86:e6:6b:21:56:
         57:43:39:fc:69:c7:92:0a:46:8a:55:61:fe:04:af:1f:5a:05:
         25:42:04:c0:82:ef:fe:f2:69:c1:60:75:15:7a:86:44:db:38:
         27:16:fe:c5:18:59:05:69:fa:27:e2:27:5b:d8:ae:43:05:ca:
         f2:f4:5e:db:70:8e:a4:a8:7d:b6:4e:05:d7:1a:91:4e:0b:e6:
         6f:9f:af:5b:8b:0c:ea:c2:e1:fc:2c:74:62:4f:02:51:d8:f9:
         af:24:c0:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28mTeWnC/fyUMmoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk
NThiOTZjYzgtMWE2YS00ODIzLTk4MzEtZjVhYzU4NThkOTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6I9hYPL46nyNJ189t5/Bz5aYQ5OOAJ1SLdR
HQ507V4G7qJaCOANaR3nhVJMZthd/0s8QOnSjVER4SsOIeZZYFc6+UiJM0z+gqKF
aUMqRjuMoENBRYpGfuQRB9jiBGEtwUytqHwnNU405WmXIzc/JF3J6oa5Fl1PMhrk
EEQNpXFASf1qWqr8oA7vE318K0eQpj3Kz5n8DyXZ5R8kjKbPqjLGgfN32qegx386
QwPuDbTeh51fHRSLcQyX4YjDR6nb2mohaGXg9rebGloqKRrmvcwZ02Qg8ZRZwX0J
owxQ158mRGe2H0+TlG8CR1PynGCiwrCwW/BwMW0bc1Ses8pyZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtr0zqvbx+vkgEN+oFxBDzwUc+7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWJiN2MwZDYtYzdiYS0z
M2E1LTliOGYtMmMyNTc1N2NhMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrAIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVb0Zr60BvZkpOn/Xy5qNgB9sjKUy1peRSG3nSsgWsV1p1OfaZSPpoW
hAw1PYVsWnHi/juIn+UfieJqeesxhl626B4xMuX5KUrbQ1eLW29VZuzB2hl5QSxj
hw5aDDd0W3Dx3K2y2BS4FNUvHu14C4rJtUuPde+yQjpeFROwUoi37N8xlAM5yBEp
s6PCJW358a+nllx5FyYV5OpgV8KG5mshVldDOfxpx5IKRopVYf4Erx9aBSVCBMCC
7/7yacFgdRV6hkTbOCcW/sUYWQVp+ifiJ1vYrkMFyvL0XttwjqSofbZOBdcakU4L
5m+fr1uLDOrC4fwsdGJPAlHY+a8kwPw=
-----END CERTIFICATE-----
Generated at Wed Oct 15 21:26:46 2025 by rpki-client