Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f71a5c10-18ff-3b8c-be7f-c3f62e51b88f.roa
File:                     f71a5c10-18ff-3b8c-be7f-c3f62e51b88f.roa (raw, json)
Hash identifier:          iK3k7ABtVvYg9oi1gVPyrAAajU/nQdD/8ZUIN067i1I=
Subject key identifier:   4B:DB:55:69:65:CC:8E:B7:70:3B:F0:52:57:1A:26:59:0C:24:3C:90
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C9BD4418C127C05C93270
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f71a5c10-18ff-3b8c-be7f-c3f62e51b88f.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        98.177.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:9b:d4:41:8c:12:7c:05:c9:32:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=02d0008c-e138-428b-a34c-ff0ad0273922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:78:11:62:82:a8:89:11:7e:7a:4c:e9:0c:df:
                    4a:cb:25:f1:b7:09:49:d6:38:6a:3e:2d:c8:ca:4a:
                    a3:00:98:26:f0:5b:4f:b2:a3:69:f1:d2:3a:1d:43:
                    23:ff:bd:1c:3f:fa:32:ce:ba:f1:21:72:f4:9a:87:
                    54:93:37:96:17:68:88:35:aa:c4:4f:22:3d:a7:72:
                    6e:f5:99:8f:81:a3:16:23:c3:4f:47:0a:4e:0d:f8:
                    45:7d:ce:96:64:43:eb:7c:fa:05:29:2f:d2:70:87:
                    96:65:16:e5:57:fe:0b:91:22:30:9a:db:fe:d5:f8:
                    cc:3d:60:5d:01:9d:6e:33:e9:70:cd:1f:de:a5:36:
                    5d:65:5f:bd:71:63:82:c0:c5:7b:16:74:32:3f:fa:
                    60:5a:de:aa:31:f6:46:47:3a:2c:f8:3a:2f:e6:85:
                    c9:bb:a0:8d:8f:a1:c1:0d:1e:95:13:2b:07:c3:14:
                    ab:bd:c7:77:b2:36:81:51:9b:96:3a:f6:41:43:67:
                    bc:5e:28:0f:3f:47:72:43:79:e4:4a:f4:6a:85:53:
                    da:50:c7:fa:34:72:90:e8:f9:f3:10:83:8b:bb:d1:
                    49:4c:16:24:6e:29:52:f7:a8:c5:0f:fe:e8:e6:ee:
                    b7:25:75:b0:80:cf:a6:62:01:48:e1:c0:a3:c4:78:
                    0d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DB:55:69:65:CC:8E:B7:70:3B:F0:52:57:1A:26:59:0C:24:3C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f71a5c10-18ff-3b8c-be7f-c3f62e51b88f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.177.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:12:69:bc:86:b1:e4:f3:a9:50:f2:d7:1e:6d:f7:20:38:89:
         32:e1:f0:be:ce:59:de:0d:59:d9:8c:dc:88:5e:3e:9f:5b:2f:
         fa:f6:c8:c6:7a:84:89:e3:b1:e4:89:72:4b:9e:73:a1:d9:e5:
         82:b3:1e:e7:ec:10:d1:c6:c5:6e:5b:92:64:02:60:2a:b9:ba:
         7b:e5:ef:18:3d:24:53:22:ff:0e:cd:4b:41:a7:38:43:1c:21:
         90:5c:59:b8:a4:77:01:c6:c0:4a:0a:4d:bc:9d:5f:54:97:77:
         fb:83:5e:9d:7f:2d:62:d2:7b:e1:c8:9d:ec:c6:f9:42:3f:94:
         24:dc:31:06:72:da:ff:7b:ad:dc:bb:3f:77:c8:ca:b0:f5:1c:
         a6:eb:fa:ac:50:0a:9b:bd:a3:d9:c7:61:35:02:84:25:1b:48:
         1c:89:26:21:0d:15:a7:be:bf:bc:f9:c6:95:85:3a:36:0b:4b:
         04:6f:90:ef:d1:60:5b:1b:75:ec:c8:58:ff:4f:f5:e5:70:6c:
         81:d6:34:bb:dc:d1:f8:79:5d:4b:fe:be:0a:66:0e:e2:89:94:
         e0:44:e1:8e:93:d2:fb:15:01:a6:a8:e9:e9:ea:e4:b8:88:d0:
         e9:72:5c:0d:de:c8:bc:0c:a1:da:12:a7:e0:cd:03:1a:39:a9:
         f6:68:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:33:13 2025 by rpki-client