Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec503d6b-e76a-31ac-a736-1c7df11fa884.roa
File:                     ec503d6b-e76a-31ac-a736-1c7df11fa884.roa (raw, json)
Hash identifier:          +lt8dEneINvEbGMA2jDPCkrzwr9+q8BDVIkfGm4KcFg=
Subject key identifier:   26:13:5F:23:32:80:79:E7:82:63:FD:29:A4:41:DB:F5:2D:82:54:61
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C9369F712534F5BA0BDC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec503d6b-e76a-31ac-a736-1c7df11fa884.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        98.171.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:93:69:f7:12:53:4f:5b:a0:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=f02ade32-40e0-4189-b3ca-be3bd2ee8c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:fc:22:46:76:99:99:b8:6e:54:6d:1c:57:
                    81:eb:9d:71:2e:fc:3e:01:e0:a4:15:dd:8d:7f:41:
                    f4:4f:24:78:d9:b8:8e:d8:aa:d9:00:84:a7:44:c3:
                    63:75:5c:35:49:5c:f4:0e:fb:44:e7:df:3d:71:97:
                    95:98:4b:70:68:3f:79:ab:61:3c:c4:8b:29:00:34:
                    df:e0:42:4c:94:bc:54:fc:22:7f:13:8a:31:56:8b:
                    50:48:13:0a:c4:dc:a6:01:84:94:1c:07:11:50:03:
                    a9:cd:59:5f:38:90:9e:0c:8c:02:aa:37:18:ab:4b:
                    a6:ab:09:86:6c:50:83:86:1e:d3:76:30:aa:bf:ae:
                    4e:98:72:2a:13:59:b9:7c:30:10:8e:a2:a1:23:40:
                    db:35:9a:65:8c:d9:6f:5f:6d:4f:30:cf:64:aa:28:
                    7d:fe:ee:13:b9:61:90:f5:1d:e6:48:71:f4:0e:94:
                    c4:3f:0d:3b:25:04:aa:23:d8:a4:a6:19:c8:bf:ed:
                    86:b4:a2:fd:31:d1:1f:39:e0:5a:bb:49:21:03:b9:
                    c4:09:54:da:a5:a0:78:f2:cc:ea:72:74:a5:ae:6f:
                    b1:63:51:b9:fe:0e:95:47:b3:1f:1f:4d:fa:50:0e:
                    38:3f:a2:e6:ed:4d:59:16:c1:29:9c:6f:3d:d8:e5:
                    e8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:13:5F:23:32:80:79:E7:82:63:FD:29:A4:41:DB:F5:2D:82:54:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec503d6b-e76a-31ac-a736-1c7df11fa884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.171.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:cd:98:f0:3d:d2:eb:80:ec:ef:fc:87:f5:c8:5d:1e:9e:b9:
         91:54:55:e8:f6:3e:ca:15:e1:cc:24:83:dc:47:6d:e9:c0:44:
         6e:7e:6a:3d:b5:15:38:f3:5a:57:34:a5:ac:50:63:9d:fc:b1:
         fd:d8:08:71:0b:50:57:d9:1b:8e:08:fd:2c:13:9f:c0:61:1c:
         2d:a3:d9:c1:02:15:0d:3a:2c:f6:5a:57:3a:fb:71:84:c3:e1:
         13:46:4a:cf:d8:5a:4a:e1:0b:55:64:a5:fc:1d:74:61:16:77:
         89:39:c7:e0:77:7d:b4:64:cc:17:ad:90:b1:5d:5b:d3:53:d3:
         e5:55:fc:40:03:39:50:5a:40:f1:fb:7d:21:47:82:55:b3:4a:
         f8:9c:a0:2e:e7:ab:79:69:56:7e:b0:0a:a2:e2:a4:72:3d:46:
         97:43:37:13:85:7c:9e:b6:0b:66:ea:46:b4:90:83:2e:08:ee:
         74:d5:4c:96:bf:80:45:22:4b:67:65:62:d5:89:f4:6c:d4:2f:
         8b:86:37:15:ba:36:18:3b:d1:0c:b9:4d:7d:35:a4:52:eb:73:
         67:5d:61:5d:22:ce:93:dc:73:f3:ea:e5:c5:a9:61:6f:ea:51:
         a1:f0:ca:ca:fd:94:64:57:4b:8f:3f:51:79:93:6f:d6:41:e7:
         0d:dc:59:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:30:08 2025 by rpki-client