Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da8ced2b-d625-3d78-9807-e80acb8b918f.roa
File:                     da8ced2b-d625-3d78-9807-e80acb8b918f.roa (raw, json)
Hash identifier:          NaG8Q3xjb1HWyfEHH0w1RK2l4UZbcD7FXPvVxh6QJ3Q=
Subject key identifier:   4F:AB:2A:16:74:67:4D:B5:FF:A2:F3:64:FD:E5:8D:54:B5:C1:4E:BF
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C92C5B97DDBAE4ACF1080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da8ced2b-d625-3d78-9807-e80acb8b918f.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        98.168.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:92:c5:b9:7d:db:ae:4a:cf:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=56eadc75-9f90-4271-b463-046475dd4d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:54:d2:1a:c5:1b:e9:3d:f7:b8:06:25:17:d8:
                    59:de:32:da:19:c4:ed:39:ad:53:f1:df:f3:8c:c8:
                    ea:b3:15:ff:f6:ed:ca:4a:7b:b2:5f:52:f9:17:2f:
                    fb:36:b9:e6:bc:8f:ce:9f:56:1e:44:77:0f:11:fa:
                    c8:05:d4:8c:a7:d0:92:5e:c4:ec:24:bd:86:07:3a:
                    2f:7e:99:23:3d:29:2b:b8:f1:67:5e:f5:80:43:c3:
                    f2:06:53:16:3b:f2:c8:b7:79:9f:96:5f:14:c3:40:
                    39:58:dc:7a:0e:73:1e:ed:2d:f5:f4:70:cd:89:36:
                    10:e7:04:a9:3e:53:d8:68:ca:71:76:f6:8b:e6:23:
                    af:d0:aa:de:45:26:90:98:91:9e:65:b3:e0:1b:39:
                    61:b3:f8:4a:b9:37:93:2f:fa:54:96:6b:cb:f4:91:
                    f1:c6:87:6a:92:b4:b0:12:34:b4:c3:49:60:60:fc:
                    11:f2:01:01:78:6f:06:7e:9a:05:e1:88:6b:07:0a:
                    38:fd:a1:a4:3f:62:5d:c1:47:48:40:5d:71:cb:69:
                    17:16:af:45:63:d3:bc:0c:81:6c:85:75:5e:0e:cd:
                    73:7c:40:3d:48:0c:22:66:ad:6c:50:07:55:6e:0f:
                    e9:13:0c:4c:7c:e7:ec:25:f9:97:a3:e6:ab:01:6c:
                    d3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AB:2A:16:74:67:4D:B5:FF:A2:F3:64:FD:E5:8D:54:B5:C1:4E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da8ced2b-d625-3d78-9807-e80acb8b918f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.168.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:a0:85:b3:d6:ed:59:f3:a7:41:12:91:3b:67:e4:07:45:96:
         33:e8:f4:c2:dc:e9:83:b2:04:0b:63:96:00:65:08:de:05:94:
         ff:72:95:23:21:1b:b9:98:85:96:b7:a4:01:30:06:0d:11:f4:
         a9:b9:77:4e:65:dc:27:36:34:a7:5c:e4:29:de:20:51:db:5f:
         20:d4:94:aa:10:96:bf:8b:7f:ce:ce:64:2f:3a:6d:b1:52:d1:
         9e:05:00:52:8d:97:8b:33:e5:6d:1a:66:03:2b:0a:66:34:8e:
         cd:e3:6d:a3:5a:2c:32:73:45:50:61:b6:53:0a:c1:25:48:4d:
         6f:05:da:9f:fa:9a:46:77:bf:98:15:4b:0d:30:3f:15:cf:36:
         94:7a:91:76:e4:ab:36:05:69:b1:f7:48:f3:be:bb:93:f3:66:
         cb:6a:5f:02:73:62:63:3c:15:87:47:a9:42:20:bd:36:d4:55:
         f1:27:4d:56:04:ba:1f:2c:2d:48:e8:0a:79:5f:d0:58:31:40:
         c4:0a:32:69:1c:a5:81:24:62:48:a7:55:04:b5:d5:9a:cf:7a:
         59:db:f1:3a:23:2e:48:9d:a3:f1:6e:d9:b4:e4:4e:90:77:0f:
         11:3c:6e:76:43:35:f2:92:e2:0b:78:07:0a:c9:55:c7:2b:23:
         26:05:dd:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnJLFuX3brkrPEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
NTZlYWRjNzUtOWY5MC00MjcxLWI0NjMtMDQ2NDc1ZGQ0ZDllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllTSGsUb6T33uAYlF9hZ3jLaGcTtOa1T8d/z
jMjqsxX/9u3KSnuyX1L5Fy/7NrnmvI/On1YeRHcPEfrIBdSMp9CSXsTsJL2GBzov
fpkjPSkruPFnXvWAQ8PyBlMWO/LIt3mfll8Uw0A5WNx6DnMe7S319HDNiTYQ5wSp
PlPYaMpxdvaL5iOv0KreRSaQmJGeZbPgGzlhs/hKuTeTL/pUlmvL9JHxxodqkrSw
EjS0w0lgYPwR8gEBeG8GfpoF4YhrBwo4/aGkP2JdwUdIQF1xy2kXFq9FY9O8DIFs
hXVeDs1zfEA9SAwiZq1sUAdVbg/pEwxMfOfsJfmXo+arAWzT5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE+rKhZ0Z021/6LzZP3ljVS1wU6/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGE4Y2VkMmItZDYyNS0z
ZDc4LTk4MDctZTgwYWNiOGI5MThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqg+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJGghbPW7Vnzp0ESkTtn5AdFljPo9MLc6YOyBAtjlgBlCN4FlP9ylSMh
G7mYhZa3pAEwBg0R9Km5d05l3Cc2NKdc5CneIFHbXyDUlKoQlr+Lf87OZC86bbFS
0Z4FAFKNl4sz5W0aZgMrCmY0js3jbaNaLDJzRVBhtlMKwSVITW8F2p/6mkZ3v5gV
Sw0wPxXPNpR6kXbkqzYFabH3SPO+u5PzZstqXwJzYmM8FYdHqUIgvTbUVfEnTVYE
uh8sLUjoCnlf0FgxQMQKMmkcpYEkYkinVQS11ZrPelnb8TojLkido/Fu2bTkTpB3
DxE8bnZDNfKS4gt4BwrJVccrIyYF3Q8=
-----END CERTIFICATE-----
Generated at Wed Oct 15 23:35:00 2025 by rpki-client