Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e0b54b7-4951-3457-a5f5-76b34116850d.roa
File:                     1e0b54b7-4951-3457-a5f5-76b34116850d.roa (raw, json)
Hash identifier:          7F4y3esBwT/jRKQ5BJj6AlI18QITbKw3ISqmYTNcYdE=
Subject key identifier:   E9:85:9E:16:E2:BD:19:6F:5C:4E:C3:5A:34:A5:1D:59:34:C1:EE:85
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E77FE630DE145E7474ADB80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e0b54b7-4951-3457-a5f5-76b34116850d.roa
Signing time:             Thu 19 Jun 2025 14:42:39 +0000
ROA not before:           Thu 19 Jun 2025 14:42:39 +0000
ROA not after:            Wed 17 Sep 2025 14:42:39 +0000
asID:                     22773
IP address blocks:        72.223.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:77:fe:63:0d:e1:45:e7:47:4a:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:42:39 2025 GMT
            Not After : Sep 17 14:42:39 2025 GMT
        Subject: CN=0467cfe3-ed09-46fe-8317-eb1c39b4ef26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:ab:35:65:f1:6e:07:4f:37:4a:49:9a:0b:
                    d4:c0:ea:34:d7:46:7c:1d:95:7a:ad:74:0a:50:0f:
                    00:4c:45:43:5d:2c:01:fe:e0:37:fc:8f:00:48:10:
                    74:bd:1c:ee:b5:ac:96:9a:dc:5f:86:b0:17:74:ec:
                    01:cd:26:fb:62:d3:61:48:7f:52:ec:93:d1:64:ec:
                    ab:fb:cf:85:f5:30:fb:33:c8:a5:0a:94:ed:e1:a1:
                    74:d4:82:74:d6:41:76:fc:75:fa:26:56:fd:21:be:
                    3a:76:d1:25:49:98:10:34:b6:18:63:ed:14:0c:f5:
                    59:56:bc:8e:31:99:62:58:ca:72:64:ce:e7:c1:1d:
                    b6:e2:42:b6:ef:0a:dc:5b:b2:92:0c:08:95:2b:45:
                    56:32:2a:02:c4:40:19:8f:6c:8f:57:6f:49:7a:16:
                    d5:49:f9:f9:43:a7:09:ee:2a:86:14:f1:02:cf:56:
                    ed:4d:ad:6e:43:bd:f6:b2:19:f4:c2:c6:8e:83:0b:
                    76:7e:e1:e5:88:6f:5d:cb:44:eb:53:7a:68:98:9d:
                    42:9d:9d:62:72:aa:a1:b8:6d:65:96:a6:e1:88:13:
                    b3:bd:4d:3c:92:fa:84:d8:b8:90:ca:1b:16:c0:bb:
                    7a:cd:00:b8:92:ee:1f:3c:0b:2f:8b:08:25:d1:c3:
                    00:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:85:9E:16:E2:BD:19:6F:5C:4E:C3:5A:34:A5:1D:59:34:C1:EE:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e0b54b7-4951-3457-a5f5-76b34116850d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.223.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c8:23:37:ac:b1:4b:ba:fb:4d:97:09:05:50:01:d1:69:0f:
         54:f3:0f:5d:fa:cc:47:54:e8:fe:0a:cd:28:aa:87:bc:9e:ee:
         61:8c:cf:f8:23:4e:66:85:28:83:c3:a7:53:59:00:7c:44:32:
         83:52:08:6b:df:87:57:ef:c7:76:0c:4b:a0:8d:fa:1a:28:a1:
         27:5a:81:b2:d2:0d:51:88:fc:18:20:fc:35:70:a3:32:b5:80:
         b1:ba:aa:2f:dc:fd:c6:ba:7b:bf:e1:7f:46:83:50:ac:f3:56:
         6b:48:f7:e7:69:75:f5:57:38:a7:7c:e0:c7:3e:b5:63:18:82:
         37:c0:5a:ae:13:3d:ba:31:47:e2:d4:60:e2:04:ea:33:89:0c:
         d3:f9:40:8c:ae:c2:d1:23:cd:54:e0:70:f4:71:3b:86:90:12:
         c6:af:6f:a7:0e:71:47:a7:25:2d:f3:d7:6c:4e:27:db:09:68:
         49:ba:83:cb:12:7d:b7:fc:18:74:92:57:9e:b9:39:a0:3a:ff:
         37:53:a4:33:cf:f1:13:9b:2f:d5:8b:9c:5f:13:ee:1b:da:8d:
         17:25:53:a5:d3:96:29:fe:1c:c2:f3:54:e5:2e:d4:5a:ce:c5:
         f4:63:ae:c2:dd:51:4b:ec:5b:7a:d8:6c:a5:6a:12:a4:62:fe:
         c0:ea:92:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:31:01 2025 by rpki-client