Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbc239d7-963b-3b76-a14b-6558fe8f828b.roa
File:                     cbc239d7-963b-3b76-a14b-6558fe8f828b.roa (raw, json)
Hash identifier:          0uEtSKI9M13/2OE7Rj0TNS1FgUgtJAFdeHsj4hdjzSs=
Subject key identifier:   0E:42:45:57:66:BC:69:AA:62:FB:D3:B5:CD:BD:5D:A7:71:E4:DB:4D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A40AA072E5E43DB5B41E2F980
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbc239d7-963b-3b76-a14b-6558fe8f828b.roa
Signing time:             Fri 20 Jun 2025 09:35:05 +0000
ROA not before:           Fri 20 Jun 2025 09:35:05 +0000
ROA not after:            Thu 18 Sep 2025 09:35:05 +0000
asID:                     22773
IP address blocks:        98.167.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:40:aa:07:2e:5e:43:db:5b:41:e2:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 20 09:35:05 2025 GMT
            Not After : Sep 18 09:35:05 2025 GMT
        Subject: CN=1326d2fc-339e-480e-9bb3-a06ee6d9c618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:98:bc:dd:2e:3d:9b:72:61:76:3b:c3:05:57:
                    ad:ab:99:c6:89:58:e0:db:99:9f:1f:6f:ec:a3:15:
                    a9:77:4c:fa:5a:41:17:d6:57:99:09:1f:a7:d8:f3:
                    03:a3:f6:d4:f4:84:2b:62:ec:86:33:f9:4d:7c:ab:
                    f7:a1:50:61:37:0e:ae:79:6e:e7:35:c0:a8:14:ab:
                    29:03:bf:c7:1c:57:9b:44:4a:59:0d:74:0f:44:da:
                    c4:c4:14:6f:da:be:48:1d:1a:ce:92:06:7e:4f:65:
                    73:b3:3a:02:40:6a:38:90:80:16:78:d9:3a:20:3f:
                    0e:60:bd:54:e3:b7:cd:f2:49:12:ee:4f:e4:50:b4:
                    60:7b:7f:43:95:b3:13:98:9b:bb:fd:30:81:5e:4f:
                    a5:f1:9e:f1:c7:f7:b8:2f:aa:9d:e3:0b:57:c1:6d:
                    04:60:5e:85:ba:5b:28:e7:76:12:be:57:84:35:e9:
                    f3:fe:18:05:d1:8d:e7:56:5a:96:97:e4:60:c6:8b:
                    98:72:4e:f3:3c:66:47:dc:d5:57:fe:29:3f:25:a0:
                    c9:0a:b2:7d:fd:52:03:0a:99:dd:a7:52:39:c9:36:
                    ef:19:f5:f3:cd:18:d0:04:f3:51:41:da:13:8b:0e:
                    4c:e8:39:d8:e9:e8:0c:23:8b:4e:10:9d:99:19:04:
                    e4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:42:45:57:66:BC:69:AA:62:FB:D3:B5:CD:BD:5D:A7:71:E4:DB:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbc239d7-963b-3b76-a14b-6558fe8f828b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.167.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:2a:5e:ee:93:14:c9:78:6b:c9:f4:1e:77:2d:ab:a2:bf:76:
         d1:2e:73:63:03:79:45:ce:f0:2f:e2:5a:6a:5f:68:9d:e4:59:
         01:aa:57:5e:3b:e1:06:8e:02:1d:51:6f:cc:0c:63:77:0e:49:
         fb:03:4d:50:8b:1e:53:ea:ea:d6:bc:d0:e7:28:7f:96:20:8d:
         ec:45:f2:0e:db:a3:4c:ac:9f:f8:2d:7a:d3:fc:a2:18:2e:f7:
         c4:d4:5d:ed:80:29:62:c9:21:7d:d3:a8:c0:a7:de:27:f5:dd:
         4f:ba:d1:72:f4:08:51:9b:1f:1c:e0:33:0f:8c:ed:df:5d:b3:
         b0:32:ba:fd:e1:47:7c:49:28:61:89:36:9a:ea:dd:12:22:a2:
         cc:c8:09:ba:2a:e4:37:97:b3:9d:4c:de:6f:08:4d:12:71:83:
         2e:7c:d4:b0:ac:ce:44:ef:07:8a:66:69:9b:fd:90:f0:42:c2:
         df:a4:20:28:b8:3d:fc:28:16:af:96:12:b7:bc:de:5f:ab:98:
         aa:a4:6f:51:c3:18:ed:55:0f:f9:98:ae:5c:12:87:c9:2d:d4:
         61:92:aa:c0:50:fa:d7:56:a8:6a:54:83:17:fa:f9:0f:a4:e4:
         7a:00:87:ef:a0:ed:54:ca:bb:ac:ab:d2:bf:d2:8a:cc:92:fc:
         1e:7b:8e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:55:36 2025 by rpki-client