Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e2c6d887-f525-33e5-b334-b17263702d65.roa
File:                     e2c6d887-f525-33e5-b334-b17263702d65.roa (raw, json)
Hash identifier:          4Klq9hVqQEb3CN0zMaUbTGCZwbjPXK0xzWPhrAGhokA=
Subject key identifier:   C4:8E:CC:F8:6D:2E:FB:98:F3:20:53:86:02:ED:43:BA:47:AB:16:CE
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C97A85BB00AC016BA6A00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e2c6d887-f525-33e5-b334-b17263702d65.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        98.177.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:97:a8:5b:b0:0a:c0:16:ba:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=63129bfb-660b-4894-81ab-5e10fa85e53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:a8:82:ff:bf:d7:6a:33:dc:7e:79:72:7e:
                    63:05:53:6f:d7:a8:69:4f:21:98:a4:86:01:1a:3a:
                    aa:7d:1b:c0:c9:f5:0b:65:d9:fa:37:c9:7b:fc:a2:
                    e6:4d:67:cc:41:a5:03:47:24:a8:39:53:9b:5d:4c:
                    29:a0:df:a5:96:1c:df:83:ab:6a:77:c3:8f:f9:df:
                    0d:5f:d1:54:0e:a3:a9:4b:e9:4d:d8:24:6b:ab:ed:
                    49:76:a5:58:e6:86:b2:d9:85:67:12:dd:e2:a8:09:
                    d1:03:96:87:f7:9a:6b:22:8e:bc:fa:34:e8:40:66:
                    57:e2:13:01:3a:64:ae:f7:0c:47:74:66:e6:a8:c9:
                    bb:f5:86:4a:7a:1b:0f:b3:b6:43:45:5d:72:80:df:
                    01:21:08:cf:a8:5a:09:9a:97:0e:1e:a3:f3:e9:1f:
                    92:0f:25:c0:42:41:a8:0f:e5:f1:18:32:53:ab:2e:
                    4c:80:1e:b1:c1:27:ce:cf:b3:3a:39:61:fc:c2:f0:
                    1a:f6:bf:75:24:6d:4b:51:ca:93:a7:de:7f:47:57:
                    90:78:a1:fd:a9:7a:fe:71:76:32:22:bf:56:fd:f3:
                    eb:d4:ff:3a:0c:d0:79:db:0b:8d:28:21:d4:bc:ac:
                    b1:29:42:78:cb:41:ed:93:98:a1:27:44:57:c7:3b:
                    52:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8E:CC:F8:6D:2E:FB:98:F3:20:53:86:02:ED:43:BA:47:AB:16:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e2c6d887-f525-33e5-b334-b17263702d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.177.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:6c:f6:b0:25:7b:1b:7a:28:43:ce:f3:f1:6b:06:2f:ff:f4:
         52:5a:eb:45:b1:a3:b4:64:73:5e:51:00:37:95:62:f8:67:fd:
         50:ba:1f:ce:7b:d2:81:dd:a0:cd:c5:81:4b:93:66:c1:f2:46:
         34:de:d9:b1:d5:77:24:8a:e2:b1:ee:0e:a9:12:7a:df:02:c9:
         5b:b1:14:55:5c:1d:ba:c2:dc:e9:46:a2:a1:07:41:43:89:cf:
         71:09:64:90:70:28:be:c1:f1:06:c0:cd:62:98:79:1a:5b:0b:
         6b:2b:5c:cb:dc:86:2b:55:b8:46:fa:40:3b:06:bd:8a:6a:c3:
         94:ac:4c:c7:8b:16:47:89:c2:0d:4d:df:cf:3f:1f:ea:f7:62:
         0d:cf:8c:f3:00:2a:b5:4e:41:33:f7:b7:ab:dc:15:d2:c2:6d:
         bf:14:d2:1e:61:7f:23:2f:d0:16:d5:0a:58:95:1c:27:c1:ba:
         e1:54:bb:ba:76:ab:2c:be:6d:ca:bc:eb:48:3f:84:84:63:e2:
         3d:00:b7:e1:56:fd:6c:02:24:fc:dc:1b:61:e7:eb:e4:6a:86:
         9b:94:ac:e4:49:80:60:f9:7a:92:05:a9:76:a4:2a:9e:f6:2e:
         73:d0:25:2d:51:43:68:5a:f6:33:68:7d:14:df:9c:a7:65:1a:
         71:d7:52:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:52:45 2025 by rpki-client