Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a17e5602-9964-3581-b9db-70611d77b27b.roa
File:                     a17e5602-9964-3581-b9db-70611d77b27b.roa (raw, json)
Hash identifier:          LCx9nPT5YIWcxpeOTKqzLg9q+oisGxSMvf22yRU6pWk=
Subject key identifier:   8B:F5:48:21:A6:58:72:65:D4:FC:96:D8:4B:D6:C0:C9:E7:74:CB:59
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A40AA0030DF13F81EBE527B80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a17e5602-9964-3581-b9db-70611d77b27b.roa
Signing time:             Fri 20 Jun 2025 09:35:02 +0000
ROA not before:           Fri 20 Jun 2025 09:35:02 +0000
ROA not after:            Thu 18 Sep 2025 09:35:02 +0000
asID:                     22773
IP address blocks:        98.167.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:40:aa:00:30:df:13:f8:1e:be:52:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 20 09:35:02 2025 GMT
            Not After : Sep 18 09:35:02 2025 GMT
        Subject: CN=d995481c-4482-4c57-bc09-82afd6461db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2b:50:fe:0d:6d:1f:fd:5e:ae:24:c5:a9:63:
                    c5:18:f6:16:f4:a6:91:e2:f6:2c:d9:7f:58:79:f6:
                    d4:45:cb:7a:54:b0:40:48:a4:5a:6f:12:e5:ef:3e:
                    71:48:63:78:87:13:bc:39:4a:55:c3:a4:af:9a:6d:
                    76:b2:49:d1:ae:4f:e7:fd:2d:37:2b:19:5c:8d:7f:
                    ba:88:6a:1d:b9:d9:14:c9:dd:81:03:eb:a1:56:59:
                    2c:06:15:7c:fe:f6:52:fe:a0:ae:3d:53:39:52:9b:
                    3c:57:77:99:68:84:ea:02:6a:a2:25:5f:e1:e8:16:
                    a1:39:ec:07:3d:76:e6:a2:20:b6:1d:b6:6d:32:b6:
                    eb:3e:7b:ac:cf:26:c2:51:8b:8a:6b:36:31:ff:7f:
                    1a:f2:82:2f:6f:3c:c3:f6:a9:75:6a:d8:17:f6:a6:
                    cb:aa:b6:34:df:3a:12:7b:5a:4f:89:30:11:34:1d:
                    ef:1b:7b:13:0e:30:1b:3b:65:36:aa:dc:08:e9:2e:
                    54:7a:2a:18:50:87:6a:d9:1d:34:07:d2:9e:45:3c:
                    63:d9:df:83:f3:76:46:d7:14:a0:d3:81:4e:e0:7c:
                    e5:8d:91:a8:6c:9c:7e:19:77:ba:d9:21:dc:c8:99:
                    91:28:f1:28:71:8b:df:5a:30:a5:94:5c:cc:d1:bc:
                    9c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F5:48:21:A6:58:72:65:D4:FC:96:D8:4B:D6:C0:C9:E7:74:CB:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a17e5602-9964-3581-b9db-70611d77b27b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.167.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:74:ed:72:a1:a5:00:49:62:ae:41:0e:35:e8:bd:19:2c:1c:
         27:a9:b2:ae:3f:39:dc:e1:ff:3b:5e:8f:d1:de:de:e7:b4:83:
         be:7b:e0:3f:fe:ec:46:55:da:62:d2:9c:2c:0e:6e:ee:91:64:
         f8:e5:f8:88:5e:12:45:9a:45:25:28:ec:fd:6c:9f:d3:80:18:
         d6:13:6c:0b:fc:ba:40:ef:84:7f:e3:86:34:29:d7:58:2e:8b:
         c2:6f:1f:4a:1b:f5:e7:67:86:cb:67:17:24:f8:70:26:e7:83:
         83:ee:54:93:dd:dd:31:e2:f1:89:26:78:89:d2:99:f5:8c:c2:
         eb:36:5b:44:4f:01:7a:d7:ab:d9:d4:25:d7:94:27:d5:07:1c:
         b7:a1:4d:0a:5f:84:ad:41:e5:da:c1:01:9d:41:9e:36:0f:b9:
         0c:a2:7e:cf:3c:0d:b0:d5:92:5e:36:11:d5:cf:26:8f:73:08:
         5a:03:ba:db:7e:b1:61:0b:fc:58:86:97:aa:03:a5:1f:e9:89:
         84:fc:37:2c:67:55:4f:f0:ed:dc:42:5f:b1:84:53:2e:96:18:
         ba:20:6e:16:24:b8:62:f0:f3:f6:05:27:9e:a7:75:70:b8:e1:
         d4:f8:0a:a2:3e:8f:26:8d:e9:db:39:3a:34:01:14:2a:07:cf:
         6a:ec:36:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:07:46 2025 by rpki-client