Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fe8a22bc-66fc-3ae1-bb7d-04e3bff75e94.roa
File:                     fe8a22bc-66fc-3ae1-bb7d-04e3bff75e94.roa (raw, json)
Hash identifier:          PyRH1vlwbyeUvhjW8BQ2ZkHSa23LX0d8kxJbSxVVVZk=
Subject key identifier:   6B:FE:5A:7F:AB:FD:9A:EA:E2:BD:2E:87:4D:FE:91:9C:F7:73:39:DE
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DFD8EABF211460079F47BC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fe8a22bc-66fc-3ae1-bb7d-04e3bff75e94.roa
Signing time:             Thu 19 Jun 2025 10:35:57 +0000
ROA not before:           Thu 19 Jun 2025 10:35:57 +0000
ROA not after:            Wed 17 Sep 2025 10:35:57 +0000
asID:                     22773
IP address blocks:        98.171.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:fd:8e:ab:f2:11:46:00:79:f4:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 10:35:57 2025 GMT
            Not After : Sep 17 10:35:57 2025 GMT
        Subject: CN=5dfa2a8b-a4a9-4f9d-a05e-b0b0f2d5d491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5f:d2:8f:65:21:e8:40:5a:61:a6:88:eb:44:
                    b8:01:1d:15:1b:ad:f8:ce:14:1b:d2:a7:67:2c:c8:
                    cc:92:e3:d1:63:d3:4d:04:af:b8:9d:97:92:a4:d7:
                    f3:81:27:31:1c:5a:84:17:5b:c5:f6:bd:ca:b3:f7:
                    32:a4:86:1a:50:14:b8:88:71:42:e1:2c:fd:47:6c:
                    cd:dc:ec:32:51:54:e1:04:0b:f9:7b:c2:88:35:46:
                    8a:73:19:c1:48:f4:e2:c4:e6:07:f8:8e:8a:84:4c:
                    82:6b:f3:9c:a2:d4:7a:0b:b6:23:ac:e3:ea:a4:3e:
                    b7:e8:be:75:56:ff:bc:18:27:59:44:60:01:d2:5a:
                    12:a3:55:33:0c:f2:37:dc:c4:76:0e:b1:28:d0:3a:
                    95:92:b7:d3:7d:86:10:5b:62:a0:87:c4:e5:36:b9:
                    79:0c:80:4b:47:93:e9:f9:03:06:76:aa:06:92:35:
                    6e:97:02:e7:d0:61:50:87:71:9d:26:83:0b:83:d6:
                    76:f0:44:39:10:7d:d0:ac:bc:75:80:b1:c0:75:5d:
                    16:38:8a:4f:aa:bb:e4:45:0e:ac:7b:8d:c4:2e:a1:
                    62:35:25:ce:1f:fb:ea:9a:28:42:db:6c:bc:f3:6c:
                    5d:ee:3e:0f:bc:12:6e:8c:15:f4:91:28:a7:22:f4:
                    38:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FE:5A:7F:AB:FD:9A:EA:E2:BD:2E:87:4D:FE:91:9C:F7:73:39:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fe8a22bc-66fc-3ae1-bb7d-04e3bff75e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.171.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a8:28:b3:10:f1:f5:bb:58:4b:d0:34:cc:e3:4f:d7:07:6b:
         ea:bd:b7:2e:2c:21:fd:e4:95:8c:d6:33:3a:2d:fe:c4:92:a3:
         11:cb:a4:8c:fd:a6:45:8f:1e:1e:f4:2d:d8:8b:77:74:c5:5a:
         44:ef:e5:d2:c6:57:62:d9:b7:0f:1d:25:8b:81:c0:7c:87:38:
         6b:c0:30:20:9f:8f:77:f9:72:ac:3a:5f:3c:2b:8f:2a:b9:a9:
         55:d1:60:3e:c0:74:ae:85:ec:99:13:4d:0f:b9:94:f4:85:3a:
         73:2d:43:3d:31:34:01:70:99:cb:59:a6:22:48:d0:a7:90:57:
         92:3a:7a:1f:1a:99:87:d7:ef:a1:1f:e0:26:51:54:fc:af:6d:
         1d:91:64:73:a3:a5:2e:5c:24:5f:31:8a:46:a0:0f:32:ff:f5:
         85:29:1f:81:d4:ec:d2:5e:77:bb:e6:db:a4:03:c3:87:71:66:
         72:dc:8c:25:49:73:9e:ae:ce:a4:3d:d9:6a:0d:17:de:db:08:
         b7:d5:54:4c:d6:29:ba:29:4c:da:b7:c3:f7:0c:ef:94:d7:8a:
         6e:08:f1:5a:ef:77:8b:76:cb:74:ff:25:b2:58:f2:67:29:01:
         0c:b4:28:58:5b:7d:0c:b8:a7:00:17:ea:c1:2d:03:51:94:fd:
         f7:e2:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:11:55 2025 by rpki-client