Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51a252e6-61c8-355e-a87b-9ef0b30e4295.roa
File:                     51a252e6-61c8-355e-a87b-9ef0b30e4295.roa (raw, json)
Hash identifier:          c2WqKg1pH33NVkr4P6oyX3xHA/6uNOJPMaMzhqSLnHk=
Subject key identifier:   27:61:9F:CF:8D:AB:20:8F:58:46:5F:50:A5:D6:B8:CF:6F:D4:FD:F1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A96367DC6BB47BDBEF16B4500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51a252e6-61c8-355e-a87b-9ef0b30e4295.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        174.65.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:7d:c6:bb:47:bd:be:f1:6b:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=584dab3c-10a1-4b2e-a561-f4634c433b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:79:49:26:d4:78:41:7b:80:5b:bb:ab:8e:bd:
                    f8:66:a5:7c:39:19:67:8d:cb:8a:12:9b:bc:15:52:
                    88:98:38:f9:76:44:62:70:46:bd:39:0d:3a:3c:3c:
                    ee:a4:79:85:94:33:3e:18:c4:bb:22:b9:4c:d5:3a:
                    3b:ed:9c:96:6d:f0:b0:b7:c9:12:cc:f6:6a:a4:66:
                    34:51:c3:8d:e3:1d:34:ee:68:72:83:8e:3d:78:ab:
                    a5:ce:54:ba:16:ed:e0:7a:82:ca:12:94:3d:c1:61:
                    d2:0d:70:90:15:3e:bf:2f:37:e8:d6:8b:09:db:25:
                    ca:13:5f:8c:81:79:52:03:9d:84:2b:ae:88:2a:12:
                    da:fb:3a:f3:94:2b:4a:44:66:98:02:44:7b:43:dc:
                    b0:9f:d9:c9:1a:c4:31:f6:df:56:85:a5:11:79:6a:
                    b1:0e:77:1a:6e:70:7b:70:79:5f:1a:92:11:80:c9:
                    32:13:53:75:58:21:c1:70:c3:5e:11:cb:10:e1:1d:
                    5e:92:42:dc:2b:cd:b4:d1:f0:04:65:dc:2b:75:02:
                    45:bc:05:7e:87:91:46:4c:50:24:ac:cc:02:05:eb:
                    03:43:49:f0:13:11:0d:5c:c0:cf:44:d9:6b:68:aa:
                    3a:f5:02:94:fa:01:27:55:21:aa:4f:e4:67:2c:e4:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:61:9F:CF:8D:AB:20:8F:58:46:5F:50:A5:D6:B8:CF:6F:D4:FD:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51a252e6-61c8-355e-a87b-9ef0b30e4295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.65.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5d:b0:c0:95:34:9d:6f:84:33:f3:30:0a:92:c8:75:67:71:
         58:a0:e0:8a:bd:44:55:d0:b9:47:1e:d2:9b:d4:7f:fd:94:cd:
         60:5c:e1:aa:1e:82:94:8e:0f:00:b4:86:55:e9:da:68:29:0b:
         d7:53:9b:61:de:7d:aa:4e:56:bb:d4:59:5a:ec:94:6f:96:55:
         d1:41:19:36:b6:db:69:23:2a:56:e5:fc:58:6d:ec:e1:28:0a:
         86:3c:3b:bd:90:58:1d:2c:c8:d1:db:42:78:47:3a:28:a5:7b:
         19:fc:4e:59:48:f8:45:37:6a:45:a9:fc:b8:43:ca:f8:bf:e0:
         69:6d:9e:78:89:68:d7:4b:b2:d6:6b:4d:26:29:43:93:a5:34:
         e6:99:66:cc:94:44:5e:27:71:27:a7:a8:06:41:6d:b2:6e:9b:
         95:dd:57:cc:e9:31:69:d2:eb:bc:ea:83:0f:ce:95:7d:4c:43:
         db:5b:3e:43:a0:cd:06:76:b1:3a:af:6d:a2:ba:ad:ef:27:fa:
         2d:50:b4:88:8b:95:5a:ac:0c:0d:2f:14:96:d6:ec:0f:36:4b:
         5a:f2:55:be:04:2d:05:28:67:30:ae:dd:49:ca:07:83:be:4d:
         8a:d6:23:f1:cd:6c:ae:f7:f9:7f:25:b6:b3:cf:a6:02:a8:33:
         c9:35:16:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNn3Gu0e9vvFrRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk
NTg0ZGFiM2MtMTBhMS00YjJlLWE1NjEtZjQ2MzRjNDMzYjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3lJJtR4QXuAW7urjr34ZqV8ORlnjcuKEpu8
FVKImDj5dkRicEa9OQ06PDzupHmFlDM+GMS7IrlM1To77ZyWbfCwt8kSzPZqpGY0
UcON4x007mhyg449eKulzlS6Fu3geoLKEpQ9wWHSDXCQFT6/Lzfo1osJ2yXKE1+M
gXlSA52EK66IKhLa+zrzlCtKRGaYAkR7Q9ywn9nJGsQx9t9WhaUReWqxDncabnB7
cHlfGpIRgMkyE1N1WCHBcMNeEcsQ4R1ekkLcK8200fAEZdwrdQJFvAV+h5FGTFAk
rMwCBesDQ0nwExENXMDPRNlraKo69QKU+gEnVSGqT+RnLORcnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCdhn8+NqyCPWEZfUKXWuM9v1P3xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTFhMjUyZTYtNjFjOC0z
NTVlLWE4N2ItOWVmMGIzMGU0Mjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkFiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFxdsMCVNJ1vhDPzMAqSyHVncVig4Iq9RFXQuUce0pvUf/2UzWBc4aoe
gpSODwC0hlXp2mgpC9dTm2HefapOVrvUWVrslG+WVdFBGTa222kjKlbl/Fht7OEo
CoY8O72QWB0syNHbQnhHOiilexn8TllI+EU3akWp/LhDyvi/4GltnniJaNdLstZr
TSYpQ5OlNOaZZsyURF4ncSenqAZBbbJum5XdV8zpMWnS67zqgw/OlX1MQ9tbPkOg
zQZ2sTqvbaK6re8n+i1QtIiLlVqsDA0vFJbW7A82S1ryVb4ELQUoZzCu3UnKB4O+
TYrWI/HNbK73+X8ltrPPpgKoM8k1Fpk=
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:07:18 2025 by rpki-client