Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5a50750-c891-3f8d-9187-2a8a5da37583.roa
File:                     b5a50750-c891-3f8d-9187-2a8a5da37583.roa (raw, json)
Hash identifier:          /hBsUxpAzGxR1SKHp53hHl0aR52WCgzFHrAleC/hI+I=
Subject key identifier:   47:E1:75:28:35:E9:FA:22:84:C0:85:FD:1A:F5:D2:61:F4:E2:47:D8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F22ED3ECA28BEBF043B300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5a50750-c891-3f8d-9187-2a8a5da37583.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        98.183.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:2e:d3:ec:a2:8b:eb:f0:43:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=655e87dc-566e-4eda-9fdc-e54aa88862bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:12:4d:5f:ac:47:7c:04:38:ea:ee:80:26:
                    54:3d:3b:b6:4f:b6:61:3a:8b:e2:8d:85:4c:f0:55:
                    36:f6:97:f8:e4:92:59:4c:7a:5b:4f:ac:33:2b:ab:
                    2e:20:43:99:ea:4a:9e:cb:64:ed:20:cd:28:0b:0c:
                    83:35:8c:a3:80:44:30:0e:7e:7e:1f:16:ca:e5:79:
                    a8:ad:ac:9c:e3:b2:d9:73:fc:eb:cd:ef:05:91:84:
                    98:09:d3:c3:71:34:39:a1:6c:28:17:35:77:02:0d:
                    b8:6d:44:a4:32:21:59:45:cd:08:9c:b7:54:a1:b3:
                    4b:6d:6e:37:84:f6:ec:a2:47:cc:24:63:f7:1d:1f:
                    36:75:57:36:ee:07:b7:c7:7d:68:d2:b1:5e:bb:ff:
                    98:fd:fe:27:58:83:f5:36:4d:0d:8e:47:34:d7:0f:
                    cc:09:26:ce:26:af:0d:12:17:20:a3:73:bf:c4:09:
                    32:07:c9:8a:50:f7:c4:f3:00:41:6f:44:70:be:2e:
                    71:7f:f6:b0:20:e4:16:62:82:f1:1c:b4:d4:7f:aa:
                    fe:18:07:78:90:03:56:b6:db:a5:14:cd:f8:7f:cb:
                    67:44:b2:cf:42:b8:08:78:ba:cb:f7:95:cf:b5:aa:
                    e1:15:e6:83:b9:8d:8f:87:a3:16:ef:0d:f6:c9:e0:
                    62:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E1:75:28:35:E9:FA:22:84:C0:85:FD:1A:F5:D2:61:F4:E2:47:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5a50750-c891-3f8d-9187-2a8a5da37583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.183.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:93:ab:ce:80:bb:33:8d:8b:b7:c5:f6:e5:3f:d9:58:a5:f1:
         1a:b1:73:3f:5b:a5:4b:e4:6f:be:fd:02:c8:e7:2f:06:06:05:
         41:56:6d:6e:b4:87:35:fd:8c:0d:c2:6b:bb:1f:83:13:03:59:
         f3:8c:37:1a:64:81:aa:ce:45:55:be:5a:c0:fe:93:5c:95:d0:
         b5:2d:7b:4b:cd:b3:8a:82:9f:36:ca:ed:bb:3a:aa:1e:13:6c:
         53:1a:f4:6f:03:1c:78:e2:33:61:f7:1f:ad:a5:82:09:42:84:
         05:4d:9b:5e:0c:34:75:f1:75:11:1b:9f:62:bb:28:1a:8a:ad:
         d3:63:74:ea:0e:09:b7:02:5b:e4:63:4e:02:71:0a:49:bf:2b:
         42:dc:5d:fc:eb:32:eb:b9:82:eb:02:f9:6f:e0:9a:76:65:60:
         b8:c8:ae:7a:ec:47:65:22:5c:0f:8a:ba:37:bd:c3:55:91:85:
         0b:a6:73:71:1d:33:68:20:53:f8:a6:4a:19:89:7b:5c:48:e0:
         dc:ac:ce:ed:8d:11:dd:af:bf:90:d7:bb:db:84:1e:86:98:cf:
         75:89:0d:a7:df:5a:ab:2b:81:82:8c:21:05:77:0b:d2:de:8a:
         22:fc:f7:07:9c:29:0c:8f:2e:fe:cd:d9:dc:31:c2:2a:89:ad:
         6d:54:a8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 02:03:52 2025 by rpki-client