Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a886c1e-bcd8-3cfd-ac03-2a208cfc14ef.roa
File:                     0a886c1e-bcd8-3cfd-ac03-2a208cfc14ef.roa (raw, json)
Hash identifier:          AqM1pzMxev1sWej3meAb2d77EAOyXuNVEBeZLra+w2U=
Subject key identifier:   08:70:BB:09:6D:19:5A:0A:D9:6C:A4:B9:7D:06:29:16:EE:C7:51:E9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584BAD62605A7C4B45E67714D000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a886c1e-bcd8-3cfd-ac03-2a208cfc14ef.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     22773
IP address blocks:        98.175.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:60:5a:7c:4b:45:e6:77:14:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=53fc78f2-5768-410c-83b0-616d5375f573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ea:a1:e6:ca:0f:0b:15:50:0f:71:23:e8:7f:
                    f6:f4:96:67:d6:c4:fb:bb:e8:81:9f:7c:09:71:01:
                    96:09:3f:25:00:29:7b:b2:94:18:12:6d:a8:88:75:
                    65:47:3f:11:1f:3f:cd:5e:43:15:87:4b:c1:b4:9d:
                    33:ca:40:08:42:78:95:53:a5:45:9a:2b:3a:bb:4f:
                    3e:de:37:b7:80:f6:14:16:66:9e:b8:4d:67:6d:86:
                    31:c3:12:67:cb:88:00:94:b1:9d:f5:fa:e7:88:68:
                    06:e8:f7:e4:1f:41:17:47:10:1c:41:ed:3c:c7:92:
                    63:75:66:63:e4:b7:52:0d:68:41:cd:07:9e:73:58:
                    c7:19:3c:03:0c:55:62:af:c4:89:22:aa:c5:10:b6:
                    4e:2d:7f:c7:9f:f2:f3:7a:91:bf:91:54:ae:0d:69:
                    b1:1a:03:8d:48:8c:a2:c7:db:0c:bd:7d:93:65:25:
                    e1:4e:45:69:78:d9:43:58:4b:78:7d:7c:33:f0:99:
                    ea:fb:43:d8:aa:ba:36:0b:a7:6b:f5:45:5f:38:75:
                    c4:85:f5:3d:15:22:e4:7c:3f:4a:c2:e4:72:df:39:
                    e0:2f:61:4b:26:6c:64:98:c8:e7:ab:d7:b9:7c:da:
                    86:ef:0a:7d:7d:5a:de:f5:b3:9f:3c:08:8a:2a:5b:
                    ce:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:70:BB:09:6D:19:5A:0A:D9:6C:A4:B9:7D:06:29:16:EE:C7:51:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a886c1e-bcd8-3cfd-ac03-2a208cfc14ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.175.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:17:36:e0:04:19:8c:05:4b:6b:b9:17:af:96:a7:9c:8e:27:
         f4:8b:a1:9e:5d:6c:1f:51:3f:4d:d8:d1:80:3f:9a:6a:76:2f:
         d4:0e:64:a1:1d:b7:b3:6e:57:ab:78:76:2b:cf:62:9f:ad:56:
         14:cb:17:c3:0a:ce:b6:2c:3e:54:f1:d3:6c:ec:7b:b9:47:25:
         b5:cd:28:32:b8:77:d1:a2:38:6c:1f:e9:3b:dc:a9:6b:60:e9:
         98:1e:39:58:99:fb:e9:3e:56:ba:58:05:7b:a2:ee:f5:28:71:
         2e:f1:57:5d:e9:38:b8:47:56:30:c6:21:4b:b9:f6:65:9f:a6:
         e2:26:e0:05:ce:a7:ef:40:14:aa:80:df:b2:a4:e1:54:9e:f9:
         3e:9f:08:45:55:4b:91:2a:b7:12:f3:e0:45:f0:96:00:eb:db:
         0a:d3:2a:cd:76:75:08:5f:2a:4c:71:a3:5f:78:ac:dd:64:a3:
         a0:93:c3:02:c8:16:81:b2:18:26:46:29:84:18:03:ec:37:c4:
         ea:8a:8d:7b:60:06:6b:9c:8c:68:04:d4:e2:4a:65:62:3d:41:
         67:d4:e6:63:2f:9c:59:b8:09:19:d3:03:50:8a:4b:b7:b6:bd:
         e4:d2:2a:65:ff:20:e5:3c:e8:ac:8e:34:53:06:37:b8:3e:eb:
         f4:37:69:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYmBafEtF5ncU0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
NTNmYzc4ZjItNTc2OC00MTBjLTgzYjAtNjE2ZDUzNzVmNTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Oqh5soPCxVQD3Ej6H/29JZn1sT7u+iBn3wJ
cQGWCT8lACl7spQYEm2oiHVlRz8RHz/NXkMVh0vBtJ0zykAIQniVU6VFmis6u08+
3je3gPYUFmaeuE1nbYYxwxJny4gAlLGd9frniGgG6PfkH0EXRxAcQe08x5JjdWZj
5LdSDWhBzQeec1jHGTwDDFVir8SJIqrFELZOLX/Hn/LzepG/kVSuDWmxGgONSIyi
x9sMvX2TZSXhTkVpeNlDWEt4fXwz8Jnq+0PYqro2C6dr9UVfOHXEhfU9FSLkfD9K
wuRy3zngL2FLJmxkmMjnq9e5fNqG7wp9fVre9bOfPAiKKlvOnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAhwuwltGVoK2WykuX0GKRbux1HpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGE4ODZjMWUtYmNkOC0z
Y2ZkLWFjMDMtMmEyMDhjZmMxNGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYq+XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgXNuAEGYwFS2u5F6+Wp5yOJ/SLoZ5dbB9RP03Y0YA/mmp2L9QOZKEd
t7NuV6t4divPYp+tVhTLF8MKzrYsPlTx02zse7lHJbXNKDK4d9GiOGwf6TvcqWtg
6ZgeOViZ++k+VrpYBXui7vUocS7xV13pOLhHVjDGIUu59mWfpuIm4AXOp+9AFKqA
37Kk4VSe+T6fCEVVS5EqtxLz4EXwlgDr2wrTKs12dQhfKkxxo194rN1ko6CTwwLI
FoGyGCZGKYQYA+w3xOqKjXtgBmucjGgE1OJKZWI9QWfU5mMvnFm4CRnTA1CKS7e2
veTSKmX/IOU86KyONFMGN7g+6/Q3aSU=
-----END CERTIFICATE-----
Generated at Tue Nov 4 16:30:12 2025 by rpki-client