Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/15414f60-f281-339f-a7a8-cfb6e225293f.roa
File:                     15414f60-f281-339f-a7a8-cfb6e225293f.roa (raw, json)
Hash identifier:          RjhX9zmap8r+6FY8wfuu8ZjSA5j/BAuTtjq5g+PDOFY=
Subject key identifier:   D1:7E:AD:54:F0:42:2D:A8:97:B2:4A:55:2A:B6:AB:BA:B1:3A:AB:84
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5FD833FA41B533C9ACCCC80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/15414f60-f281-339f-a7a8-cfb6e225293f.roa
Signing time:             Thu 01 May 2025 17:25:56 +0000
ROA not before:           Thu 01 May 2025 17:25:56 +0000
ROA not after:            Wed 30 Jul 2025 17:25:56 +0000
asID:                     22773
IP address blocks:        72.199.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:fd:83:3f:a4:1b:53:3c:9a:cc:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:25:56 2025 GMT
            Not After : Jul 30 17:25:56 2025 GMT
        Subject: CN=4c289dbe-2a9a-4194-9869-b8d62d3f57a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:43:5a:ef:83:78:b6:de:d3:dc:a1:26:ee:4d:
                    da:45:36:fb:ca:9d:45:c4:07:f8:d5:c1:ec:81:f7:
                    8d:fc:29:b8:5a:6a:e1:fe:4e:a3:da:07:6e:01:6c:
                    42:94:49:5f:80:c7:96:4a:f1:06:d8:cb:8a:9c:61:
                    01:20:88:2a:ca:93:d8:28:e1:dc:26:33:7e:84:9e:
                    a2:f6:90:82:5a:72:ab:e4:27:d6:63:74:1f:eb:4c:
                    8f:ff:e8:5d:76:b7:4c:30:d6:3a:2f:09:cc:87:34:
                    42:de:ef:17:db:e9:c8:a7:3a:5f:ea:dd:a5:20:37:
                    e6:59:62:55:db:28:bd:83:d2:13:4c:15:9e:ce:81:
                    55:2b:ca:a1:38:50:d9:d2:0f:28:67:50:c5:73:bb:
                    20:09:8a:ed:87:52:54:86:bf:bc:d6:2e:b8:10:42:
                    9f:29:64:63:3f:98:8c:f9:09:b9:87:7a:8d:b9:4b:
                    9a:40:8e:6e:9f:21:62:40:13:93:3f:ab:68:02:d3:
                    3f:b1:b3:d5:6d:4a:ae:84:34:3c:43:fd:e2:66:b4:
                    0b:36:c8:b9:fc:f9:00:cd:e6:5c:4b:40:e9:6c:c4:
                    e7:60:d9:d2:e1:cf:94:70:48:79:2b:5d:53:e8:a9:
                    1d:3f:a3:73:14:7e:91:eb:65:86:84:db:42:a5:49:
                    f7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7E:AD:54:F0:42:2D:A8:97:B2:4A:55:2A:B6:AB:BA:B1:3A:AB:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/15414f60-f281-339f-a7a8-cfb6e225293f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.199.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d2:41:89:e4:be:ab:d7:3c:2c:40:8c:8a:a1:05:05:78:8b:
         3a:86:52:e5:42:16:1f:dc:8b:43:ae:31:06:60:dc:9a:c6:72:
         7a:39:79:bc:57:fd:84:fe:6f:a2:12:78:91:cd:78:56:f3:76:
         c6:82:01:89:10:1d:64:7d:6e:78:bb:a5:bb:1d:5c:a5:7a:60:
         7a:58:62:32:84:a7:61:f3:9c:97:87:93:d0:0b:a1:21:53:ae:
         7c:63:76:b2:9d:8f:73:97:e9:52:74:68:85:0d:12:0e:6e:b1:
         35:f0:9e:df:96:76:52:a9:9c:c8:e3:45:e8:93:0a:60:e5:04:
         86:a4:e1:a3:eb:bf:c2:ee:94:34:43:34:65:d9:b9:2a:6a:b8:
         58:58:bd:d6:21:d7:d7:9b:0f:fb:36:23:dc:3a:0c:ef:14:ef:
         a2:99:63:c7:82:53:95:c0:54:69:d3:ca:d9:41:ff:2f:bb:54:
         a4:47:52:df:5e:76:33:8b:cc:05:2e:79:0d:84:b9:94:01:0a:
         32:34:6e:3e:24:a2:c3:35:f0:87:59:73:0e:ca:c4:fc:c8:bc:
         56:6d:e3:cd:8e:81:b6:2a:14:b4:f3:ed:d7:96:72:5d:98:9b:
         0e:32:23:91:42:93:65:6a:d8:92:dc:5c:ea:3f:3a:80:e5:10:
         4f:3a:fc:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/YM/pBtTPJrMzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE3MjU1NloXDTI1MDczMDE3MjU1NlowLzEtMCsGA1UEAxMk
NGMyODlkYmUtMmE5YS00MTk0LTk4NjktYjhkNjJkM2Y1N2E1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ENa74N4tt7T3KEm7k3aRTb7yp1FxAf41cHs
gfeN/Cm4Wmrh/k6j2gduAWxClElfgMeWSvEG2MuKnGEBIIgqypPYKOHcJjN+hJ6i
9pCCWnKr5CfWY3Qf60yP/+hddrdMMNY6LwnMhzRC3u8X2+nIpzpf6t2lIDfmWWJV
2yi9g9ITTBWezoFVK8qhOFDZ0g8oZ1DFc7sgCYrth1JUhr+81i64EEKfKWRjP5iM
+Qm5h3qNuUuaQI5unyFiQBOTP6toAtM/sbPVbUquhDQ8Q/3iZrQLNsi5/PkAzeZc
S0DpbMTnYNnS4c+UcEh5K11T6KkdP6NzFH6R62WGhNtCpUn3vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNF+rVTwQi2ol7JKVSq2q7qxOquEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTU0MTRmNjAtZjI4MS0z
MzlmLWE3YTgtY2ZiNmUyMjUyOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMeMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvSQYnkvqvXPCxAjIqhBQV4izqGUuVCFh/ci0OuMQZg3JrGcno5ebxX
/YT+b6ISeJHNeFbzdsaCAYkQHWR9bni7pbsdXKV6YHpYYjKEp2HznJeHk9ALoSFT
rnxjdrKdj3OX6VJ0aIUNEg5usTXwnt+WdlKpnMjjReiTCmDlBIak4aPrv8LulDRD
NGXZuSpquFhYvdYh19ebD/s2I9w6DO8U76KZY8eCU5XAVGnTytlB/y+7VKRHUt9e
djOLzAUueQ2EuZQBCjI0bj4kosM18IdZcw7KxPzIvFZt482OgbYqFLTz7deWcl2Y
mw4yI5FCk2Vq2JLcXOo/OoDlEE86/Pc=
-----END CERTIFICATE-----
Generated at Sun May 11 22:48:00 2025 by rpki-client