Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/270b2e5f-ed4b-3af4-b147-7422bedbe494.roa
File:                     270b2e5f-ed4b-3af4-b147-7422bedbe494.roa (raw, json)
Hash identifier:          MQljZU5v3frW/U6eiy+ST/ud/dYfSR2B4NPlMs6ZQeA=
Subject key identifier:   48:1A:10:2A:50:01:FD:D6:05:65:0E:0A:FF:55:AD:B5:54:F9:0B:04
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5FD78CDF67F2413AD23C0B8
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/270b2e5f-ed4b-3af4-b147-7422bedbe494.roa
Signing time:             Thu 01 May 2025 17:25:51 +0000
ROA not before:           Thu 01 May 2025 17:25:51 +0000
ROA not after:            Wed 30 Jul 2025 17:25:51 +0000
asID:                     22773
IP address blocks:        72.199.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:fd:78:cd:f6:7f:24:13:ad:23:c0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:25:51 2025 GMT
            Not After : Jul 30 17:25:51 2025 GMT
        Subject: CN=45ba2423-5f2a-4995-b0eb-05b64c6f8783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8c:98:b8:95:bd:a4:f0:90:ef:4d:bf:60:ba:
                    47:b7:ba:31:72:ea:bc:a4:f2:dd:19:84:40:a0:1b:
                    fc:3c:23:fc:ab:85:bb:52:01:54:2e:df:44:f5:fb:
                    e0:47:35:eb:0f:c8:bb:33:6e:7e:74:44:0b:da:47:
                    6f:06:e8:fb:01:ff:dc:87:40:99:fe:08:24:5c:5b:
                    96:d4:70:9c:7b:d4:0a:aa:fe:f9:b9:9c:cd:30:dc:
                    cb:a0:36:88:70:6b:71:a5:13:70:54:44:67:be:6b:
                    46:ee:c7:1c:c9:a5:ea:3d:6c:41:92:e4:8b:92:d7:
                    34:5d:42:fe:6a:e2:6f:57:6f:90:24:38:57:ae:98:
                    b4:9d:ff:d2:d3:84:a4:a1:5a:a4:76:7e:45:60:10:
                    34:04:30:88:63:e1:0a:81:b9:11:80:40:a3:21:84:
                    e3:2f:03:de:92:9a:83:75:70:4a:59:70:28:b8:95:
                    0f:10:e8:58:e8:43:ec:23:e7:6c:76:05:a3:d5:01:
                    80:cd:a2:7f:dc:0d:e9:5d:f4:d9:e8:fb:d5:24:ea:
                    05:b3:ca:2f:4f:89:5b:af:98:a3:bf:a2:4f:4a:e9:
                    f2:13:01:2c:8b:e7:fb:e4:cc:de:1e:a0:1b:0e:47:
                    59:b8:17:b1:10:81:3b:64:de:bb:48:06:03:0a:c8:
                    25:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1A:10:2A:50:01:FD:D6:05:65:0E:0A:FF:55:AD:B5:54:F9:0B:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/270b2e5f-ed4b-3af4-b147-7422bedbe494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.199.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:a7:1a:c7:bb:b6:e7:e6:5c:9f:d8:42:7f:3b:88:3f:b3:69:
         fd:6e:a1:96:a0:e3:e9:f1:ae:e9:c9:5e:f4:4d:8b:3b:52:99:
         4f:90:4b:e3:e6:ea:22:05:70:cf:6e:f5:7a:68:1d:17:d1:01:
         33:cf:c8:65:57:8e:8e:ff:f8:f5:52:ee:4a:0f:0f:81:1f:85:
         66:1a:f3:9a:00:c9:c5:49:4c:67:53:43:4a:b1:31:43:85:5d:
         e5:52:30:f9:35:db:d2:27:c4:f2:96:c8:0e:c1:8d:53:13:a7:
         6a:b5:e9:25:c1:89:70:59:f6:3e:21:fa:53:5f:90:d4:76:a9:
         5c:3c:d4:75:71:e8:07:0c:0f:ca:0d:89:3d:01:1a:c2:f1:4b:
         82:20:b3:ad:0d:77:02:62:c7:08:c3:1e:c6:90:02:bb:63:58:
         72:fa:0d:5f:9e:4a:d2:3e:da:d8:df:60:f8:41:b9:64:fb:ef:
         ac:b6:b4:f2:db:b8:f5:24:55:06:00:b2:fa:98:32:e0:b7:18:
         1f:c4:b5:83:a7:97:ae:8c:13:65:2f:94:59:61:e1:60:26:ad:
         93:d9:47:ba:7d:b4:3f:91:f6:1e:44:1b:0f:70:59:e8:d1:2f:
         00:d7:ac:9e:b7:ce:ae:49:76:29:7d:5b:36:1a:b2:ac:02:68:
         68:72:04:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/XjN9n8kE60jwLgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE3MjU1MVoXDTI1MDczMDE3MjU1MVowLzEtMCsGA1UEAxMk
NDViYTI0MjMtNWYyYS00OTk1LWIwZWItMDViNjRjNmY4NzgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYyYuJW9pPCQ702/YLpHt7oxcuq8pPLdGYRA
oBv8PCP8q4W7UgFULt9E9fvgRzXrD8i7M25+dEQL2kdvBuj7Af/ch0CZ/ggkXFuW
1HCce9QKqv75uZzNMNzLoDaIcGtxpRNwVERnvmtG7sccyaXqPWxBkuSLktc0XUL+
auJvV2+QJDhXrpi0nf/S04SkoVqkdn5FYBA0BDCIY+EKgbkRgECjIYTjLwPekpqD
dXBKWXAouJUPEOhY6EPsI+dsdgWj1QGAzaJ/3A3pXfTZ6PvVJOoFs8ovT4lbr5ij
v6JPSunyEwEsi+f75MzeHqAbDkdZuBexEIE7ZN67SAYDCsgl3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEgaECpQAf3WBWUOCv9VrbVU+QsEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjcwYjJlNWYtZWQ0Yi0z
YWY0LWIxNDctNzQyMmJlZGJlNDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMcEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKenGse7tufmXJ/YQn87iD+zaf1uoZag4+nxrunJXvRNiztSmU+QS+Pm
6iIFcM9u9XpoHRfRATPPyGVXjo7/+PVS7koPD4EfhWYa85oAycVJTGdTQ0qxMUOF
XeVSMPk129InxPKWyA7BjVMTp2q16SXBiXBZ9j4h+lNfkNR2qVw81HVx6AcMD8oN
iT0BGsLxS4Igs60NdwJixwjDHsaQArtjWHL6DV+eStI+2tjfYPhBuWT776y2tPLb
uPUkVQYAsvqYMuC3GB/EtYOnl66ME2UvlFlh4WAmrZPZR7p9tD+R9h5EGw9wWejR
LwDXrJ63zq5Jdil9WzYasqwCaGhyBKo=
-----END CERTIFICATE-----
Generated at Mon May 12 04:39:08 2025 by rpki-client