Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/109b690b-db66-3f32-ac71-f6c0964e91ae.roa
File:                     109b690b-db66-3f32-ac71-f6c0964e91ae.roa (raw, json)
Hash identifier:          0MeB+Q1BTTA0KkLWHffMr0JtZXdcsFdmap4fLQWy2Ek=
Subject key identifier:   93:6B:6E:8B:ED:4C:38:E3:DE:7E:B5:26:16:68:BF:27:FA:45:4C:6D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5FDB48B349E7A62EF211F80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/109b690b-db66-3f32-ac71-f6c0964e91ae.roa
Signing time:             Thu 01 May 2025 17:26:19 +0000
ROA not before:           Thu 01 May 2025 17:26:19 +0000
ROA not after:            Wed 30 Jul 2025 17:26:19 +0000
asID:                     22773
IP address blocks:        72.221.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:fd:b4:8b:34:9e:7a:62:ef:21:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:26:19 2025 GMT
            Not After : Jul 30 17:26:19 2025 GMT
        Subject: CN=62d43941-86f6-424e-afff-277de6951ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a7:b5:4a:2e:54:1f:41:6e:c0:8d:34:b5:f0:
                    bf:a2:c1:14:18:36:14:a1:94:44:d7:ee:e6:5c:80:
                    ea:c9:65:01:66:d3:af:95:ed:cb:1b:02:44:29:70:
                    78:e1:18:a0:96:7d:e6:1b:e1:8f:96:34:a8:45:60:
                    c7:a9:a0:88:f0:cd:67:20:29:8b:f6:85:8f:c6:4b:
                    87:59:20:8b:17:83:4e:81:3d:c4:9d:02:1c:7a:96:
                    81:4d:b9:fc:c2:b2:78:78:fd:8c:79:e9:51:f9:78:
                    db:54:2e:ad:36:dc:9b:4c:77:3b:12:95:6a:07:ba:
                    1d:4d:7d:35:b9:e3:29:8c:f1:e4:76:f3:ac:d2:b7:
                    a6:c1:49:7f:9d:4a:25:e1:8c:32:fe:25:bb:86:55:
                    b2:9c:f4:8e:c4:92:72:44:52:17:a1:42:9c:5e:11:
                    ed:b0:b7:e6:27:b2:0e:31:c6:ee:7e:e6:be:1a:7a:
                    be:8e:99:f2:68:32:23:db:0a:ea:9a:8d:15:37:c5:
                    17:d3:9a:09:9d:ae:aa:4c:fa:f0:92:5d:95:05:5c:
                    ec:b8:67:9d:ee:5e:04:83:78:ae:0c:6a:30:5f:b8:
                    5c:90:17:69:dd:f0:4e:17:a9:16:0d:18:6e:54:07:
                    2d:84:de:4b:dd:a1:87:77:8e:ff:a1:e6:33:6a:fc:
                    06:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6B:6E:8B:ED:4C:38:E3:DE:7E:B5:26:16:68:BF:27:FA:45:4C:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/109b690b-db66-3f32-ac71-f6c0964e91ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.221.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:cb:08:12:d7:c4:fd:6c:8b:64:bd:00:71:4a:b4:52:d9:c5:
         e4:29:32:8a:ea:8a:fd:c9:3f:f1:ac:ab:06:44:6a:e7:79:58:
         4d:25:1b:d3:43:89:ff:da:50:30:1c:42:a8:8d:eb:21:11:75:
         75:e9:57:4e:05:44:64:92:93:49:c7:71:91:50:af:04:09:51:
         76:51:db:a3:2e:95:97:b7:7a:63:3d:bf:98:3c:38:ae:9b:0e:
         e2:75:74:be:3b:47:9d:1a:2f:12:7b:7a:3a:31:77:02:42:07:
         14:36:7d:65:80:0a:69:42:d5:59:ad:1f:c9:9f:c4:2b:ee:21:
         d9:4a:f4:82:b6:3c:30:d4:95:0c:68:6d:ce:17:a1:93:b2:d1:
         61:44:b6:e4:f9:9f:7e:44:aa:f5:20:80:59:55:b3:5b:97:35:
         a4:91:b9:18:cd:ba:5a:3e:0a:bb:6e:37:01:37:fb:ce:b9:ac:
         6e:11:9d:fb:a6:ee:4f:3d:44:7e:0a:4c:20:7b:b1:ad:de:3b:
         8a:f3:cc:99:91:8a:89:c7:e0:e3:0e:0a:b4:da:b9:b6:d7:df:
         18:2f:2e:2e:c4:e3:6e:1d:43:56:68:a6:7e:32:94:b4:33:22:
         63:22:b0:97:f6:be:c4:0e:24:4a:c0:84:3a:b0:f0:f7:d9:1e:
         6d:2b:8d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:28:20 2025 by rpki-client