Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f198681e-4a79-3a50-aba8-0264bdcb872f.roa
File:                     f198681e-4a79-3a50-aba8-0264bdcb872f.roa (raw, json)
Hash identifier:          cWrvT9GLv/2Llq8dTeNzx/XpVh308WaI4lz3b47V99U=
Subject key identifier:   40:9E:72:B3:BA:77:EB:2D:56:F4:AC:E4:4D:8A:2E:C4:9F:0A:66:9F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C934373CFEF77ACED11D0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f198681e-4a79-3a50-aba8-0264bdcb872f.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        98.171.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:93:43:73:cf:ef:77:ac:ed:11:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=55c09577-1dd5-407e-9bea-32d7ed9c30fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:8b:37:c8:d5:6f:cf:33:ac:e2:89:62:13:
                    50:08:6b:d2:b1:94:4e:61:3b:82:54:ca:67:73:da:
                    9e:fd:ef:30:cc:7a:29:80:6b:4f:97:22:6a:99:8d:
                    87:fa:54:9d:55:9e:50:32:32:f8:89:e4:48:8a:67:
                    a5:54:d5:9b:70:a7:8f:45:71:77:93:2a:0b:ee:ee:
                    6e:e6:56:1f:76:f0:5e:0f:5b:4f:49:77:e3:a1:ef:
                    4d:1f:e5:09:30:7f:f3:0c:2c:43:9e:36:9a:90:ec:
                    09:33:9d:42:a8:88:56:6e:68:91:1b:26:ac:e4:f4:
                    2d:70:71:39:91:a4:14:82:d3:29:f5:aa:8d:7b:3a:
                    b3:22:40:57:0a:8d:75:13:fe:2e:90:b4:62:6b:9d:
                    24:44:e4:26:c6:4a:f0:67:a6:42:e0:c2:e6:af:d4:
                    81:74:33:35:58:9d:b0:34:8e:c7:98:e0:24:fd:a8:
                    33:9b:84:32:70:aa:17:fb:ce:75:06:c9:ec:b3:7d:
                    61:e3:0c:af:00:92:03:e5:00:e5:84:20:40:98:8b:
                    fb:90:b3:60:9b:52:94:2f:f4:ab:8a:8c:c1:be:e7:
                    ee:4c:21:b0:9b:86:2b:fd:64:c0:1d:55:b0:a7:83:
                    20:ee:ce:6f:fc:82:be:36:ad:ce:f7:ea:6a:99:40:
                    64:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9E:72:B3:BA:77:EB:2D:56:F4:AC:E4:4D:8A:2E:C4:9F:0A:66:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f198681e-4a79-3a50-aba8-0264bdcb872f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.171.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ce:6c:88:13:2b:7b:d7:44:9d:5f:c7:fd:32:1a:46:ca:c7:
         6c:9b:6d:bd:de:e9:d0:ec:32:62:c2:36:71:64:65:94:f8:0d:
         3e:3d:46:1a:a2:2b:dc:9f:04:c4:ff:d2:8c:60:33:2a:9d:eb:
         17:cd:7c:54:9e:a2:0c:b6:c1:4e:fb:62:92:a8:b3:1c:fb:b4:
         84:3b:bd:f2:34:04:ff:36:63:8e:90:f8:f4:46:b0:19:fd:94:
         90:85:1c:3e:9b:cf:43:6f:22:42:bb:04:c1:6d:5b:51:3b:68:
         b7:0d:07:fa:77:1d:ff:63:b7:17:f6:ad:56:58:aa:c6:d5:c7:
         7e:c4:11:9c:52:87:46:ef:52:73:6a:62:93:14:8f:8c:63:96:
         0d:bc:bc:fb:ef:78:cb:6b:2b:e3:57:93:41:cb:ae:3e:46:04:
         d4:35:ad:4a:9c:67:d5:87:7e:89:a0:16:a8:4b:14:ce:89:97:
         c7:64:d9:ed:b2:27:f6:3c:3e:a7:bf:e4:93:e1:0d:a7:ab:78:
         96:05:39:e2:7d:00:f4:4f:e3:e1:ae:4a:fa:49:19:8c:fe:90:
         23:0c:d8:8f:02:01:f5:48:02:6e:98:ca:a4:32:82:8a:77:bc:
         e8:c5:0b:be:c8:6e:db:e4:09:a1:e3:78:8a:e1:b8:e2:f7:4e:
         f7:35:99:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:21:47 2025 by rpki-client