Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aef76999-5189-32d9-a7b7-a428824678fa.roa
File:                     aef76999-5189-32d9-a7b7-a428824678fa.roa (raw, json)
Hash identifier:          SabI1O0sETLr+0sYQeM0gJDRFInAG0RSxdE1Cb9YTgI=
Subject key identifier:   17:B3:60:78:10:B9:01:C4:D2:B0:21:48:37:78:7C:BF:95:C9:35:03
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C7E13C1472BCE84BFABC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aef76999-5189-32d9-a7b7-a428824678fa.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        98.161.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:7e:13:c1:47:2b:ce:84:bf:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=56e47ac1-78be-47b5-8ab4-a3a96a33018d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:31:ba:66:70:49:46:d2:ac:e8:05:1d:9e:b5:
                    4b:4c:97:61:dd:8e:33:5e:4e:56:63:25:a7:bc:46:
                    24:63:73:08:10:d3:16:71:e7:a2:fa:fa:e8:c1:41:
                    1f:88:9f:69:2c:b4:66:b5:e4:8b:1d:1c:47:9b:ba:
                    5d:17:2e:be:76:30:4d:3f:12:d5:3d:88:98:49:94:
                    5b:49:97:36:d7:f1:04:3f:46:46:e4:f1:49:72:51:
                    74:36:aa:43:37:47:9f:d6:5d:ff:93:c9:b5:0b:d7:
                    f9:a9:69:97:fa:a5:54:ee:e8:69:17:e0:79:e2:35:
                    20:23:e9:8f:97:bd:6d:a7:cb:c9:89:e1:75:8d:a3:
                    45:09:1b:5c:c9:85:9f:11:3c:00:18:ba:3f:bd:dd:
                    04:25:2b:5c:d9:bb:95:0b:09:ee:5e:80:12:37:26:
                    53:04:ca:42:53:0b:69:ed:cd:eb:a7:af:0f:75:bf:
                    91:aa:11:d9:14:71:7e:00:21:55:3b:c0:ed:c3:1e:
                    6c:e0:c2:45:cd:f5:0c:9b:ae:76:1b:1b:20:a5:e8:
                    bf:53:c3:0c:e7:ab:70:66:9d:09:92:5c:ad:52:e2:
                    bf:c6:fb:9c:08:06:a5:46:16:64:50:8a:ab:4a:5d:
                    35:0f:55:f7:ec:51:f2:c7:22:ad:4c:20:73:f0:2e:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B3:60:78:10:B9:01:C4:D2:B0:21:48:37:78:7C:BF:95:C9:35:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aef76999-5189-32d9-a7b7-a428824678fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.161.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:cc:d9:ff:58:69:14:bd:3f:75:f3:57:92:7f:6e:21:df:2b:
         a1:d9:5b:ad:f9:c2:23:b3:2d:34:b0:96:b6:c9:85:94:36:32:
         db:af:36:89:48:3a:c6:a7:88:7b:ce:c5:4b:be:3f:23:de:4c:
         e8:d9:a5:73:0f:0f:14:19:bb:9e:47:35:9d:3f:52:50:72:36:
         08:cd:7e:cf:b3:d7:53:87:10:01:84:34:cd:d2:81:49:83:49:
         c4:65:c8:78:9c:29:5e:57:0a:77:2b:a5:69:dc:69:4f:16:2d:
         eb:5a:7f:f1:3e:85:5e:9e:11:93:2a:cc:30:fc:2a:5b:97:4d:
         e8:64:05:01:18:2d:2f:33:fc:cd:e5:ef:f7:1e:10:49:01:82:
         46:27:90:a0:b8:dc:eb:2d:eb:3d:e0:f1:3c:6a:48:7f:d9:3f:
         ba:99:fa:c0:c0:ad:e5:9c:e9:dd:b5:3c:8c:85:11:19:bd:ed:
         8c:2e:d7:40:2a:84:b2:17:ad:79:42:0d:64:1b:21:4d:8d:55:
         c0:27:4d:0f:c3:ee:d2:74:d3:3f:c5:87:43:62:9e:19:a5:e9:
         43:d9:4e:24:66:95:a5:fe:f1:20:4b:0a:30:7d:22:99:0a:bd:
         50:07:7a:fa:b1:d5:de:ba:39:34:e2:ed:b6:91:ff:be:ea:87:
         a0:e5:85:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:26:16 2025 by rpki-client