Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c18daeb-a825-35fc-b37b-af63d9964c95.roa
File:                     0c18daeb-a825-35fc-b37b-af63d9964c95.roa (raw, json)
Hash identifier:          fWkX3uZfQ+RDAg0cMGbADttbz2NnsVHPGzYJNBnE2/A=
Subject key identifier:   A7:8D:15:BC:BC:F2:28:33:53:C8:00:31:1C:7C:A5:0F:06:52:E4:53
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DFC8A6655FBD8FFC83EA500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c18daeb-a825-35fc-b37b-af63d9964c95.roa
Signing time:             Thu 19 Jun 2025 10:33:55 +0000
ROA not before:           Thu 19 Jun 2025 10:33:55 +0000
ROA not after:            Wed 17 Sep 2025 10:33:55 +0000
asID:                     22773
IP address blocks:        98.161.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:fc:8a:66:55:fb:d8:ff:c8:3e:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 10:33:55 2025 GMT
            Not After : Sep 17 10:33:55 2025 GMT
        Subject: CN=d09bbbc8-f65e-4b21-919d-0ad434f5af4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9d:51:00:78:9e:a6:e0:dd:fd:09:ff:02:06:
                    66:fe:fd:5a:d4:fd:c9:94:38:a4:de:ef:b2:46:88:
                    38:81:4a:62:ac:ba:0a:77:fc:ab:c1:53:f0:b2:d2:
                    e1:0d:31:d2:7f:49:fe:8a:f3:e0:49:9d:7d:95:fd:
                    ce:06:fc:56:ea:d9:47:28:bd:1b:3e:45:9d:15:82:
                    50:e3:4d:18:d2:d3:68:b0:74:67:8d:15:2c:a3:94:
                    1b:d0:65:68:7e:9c:15:b0:fc:ec:b2:8d:7b:c7:d6:
                    6f:b5:99:62:eb:a1:ae:94:39:68:e7:15:82:6d:da:
                    18:87:88:ad:b7:50:cb:6c:dc:28:6c:58:54:c6:49:
                    14:40:ee:eb:91:1c:8b:2a:bc:40:8f:d5:00:43:ce:
                    d0:84:be:d1:a2:57:55:ab:c8:19:09:05:f3:4f:f3:
                    9f:2a:5d:e2:24:de:a5:09:1a:e3:00:c4:d6:15:ab:
                    8b:1e:b1:fa:7d:88:8c:00:50:e0:07:52:8e:89:74:
                    3f:ab:94:3d:36:dd:83:87:28:03:a2:91:a1:45:7d:
                    99:c7:18:cb:36:8d:9e:f8:0a:0e:5f:1f:8e:c7:60:
                    a1:8c:fd:ee:5a:18:d1:e4:94:2e:8e:e1:12:9c:a7:
                    39:a1:22:b9:5c:8a:9f:6f:bb:df:20:cc:1c:c8:66:
                    80:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8D:15:BC:BC:F2:28:33:53:C8:00:31:1C:7C:A5:0F:06:52:E4:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c18daeb-a825-35fc-b37b-af63d9964c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.161.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:fe:77:04:7c:20:28:64:b5:f3:ae:04:b7:a1:fc:6a:e3:b9:
         c6:45:c8:ea:6d:fc:8a:93:1f:61:34:00:41:19:10:82:cc:d7:
         6d:45:2e:9c:93:59:f9:07:f6:c3:52:88:61:59:34:46:1f:bf:
         8a:ac:7c:e5:4c:cd:01:fc:cd:fb:1a:4a:c1:ce:df:df:80:b6:
         ee:4e:79:83:63:77:2f:b2:c9:1f:6e:25:1f:f3:3e:a2:e0:bb:
         36:04:d9:cf:e5:0d:2a:cc:86:19:05:c3:53:a0:de:c4:2d:b1:
         be:af:b1:fa:d3:4f:9e:cf:1a:56:04:f8:00:c1:df:3c:2e:be:
         b0:50:ff:f9:83:32:d9:05:b6:61:71:19:14:a6:4f:3f:7c:f2:
         63:62:31:ec:bc:38:cf:8a:75:22:bb:80:3e:11:db:63:9e:4a:
         86:63:36:94:a8:0f:19:ea:7b:38:2e:b5:b7:5d:35:dd:e6:3d:
         6e:e3:7d:ac:a3:55:b5:6e:e3:c5:ad:de:a9:42:9f:87:73:13:
         14:ae:b1:28:f1:9b:a8:b1:6e:1a:92:55:12:82:75:d1:15:8d:
         10:61:05:ff:74:4c:76:42:bb:b1:b8:b3:c2:52:c3:25:04:9e:
         2b:8d:7d:fc:2d:67:ee:1d:99:a4:9f:35:e0:3a:4d:f2:a8:65:
         a1:d0:e0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:10:15 2025 by rpki-client