Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4653a3fe-c18a-33fb-aada-edb291bc3304.roa
File:                     4653a3fe-c18a-33fb-aada-edb291bc3304.roa (raw, json)
Hash identifier:          6E97KN5UlCddambc+Eqp6fZt0CSeE22/6QfWLeh8mfI=
Subject key identifier:   74:A0:96:60:37:CC:6E:39:33:7C:EE:14:CB:4A:88:A9:CF:E7:35:04
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E77C96B74E2D07CD44CD880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4653a3fe-c18a-33fb-aada-edb291bc3304.roa
Signing time:             Thu 19 Jun 2025 14:42:14 +0000
ROA not before:           Thu 19 Jun 2025 14:42:14 +0000
ROA not after:            Wed 17 Sep 2025 14:42:14 +0000
asID:                     22773
IP address blocks:        72.222.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:77:c9:6b:74:e2:d0:7c:d4:4c:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:42:14 2025 GMT
            Not After : Sep 17 14:42:14 2025 GMT
        Subject: CN=20641ffb-9986-488a-8b17-c578968fe13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:69:9e:4f:b8:f1:83:50:05:7e:b7:95:1a:7e:
                    e9:64:2d:53:04:c9:ac:f7:bf:52:77:f0:6f:e7:d0:
                    f2:b9:dc:d6:c3:06:9f:a8:1b:38:e7:4a:06:b6:e5:
                    a1:10:df:7c:c8:b6:2d:1e:0d:5f:ec:d0:23:c2:61:
                    96:e3:7b:88:c8:98:f8:7a:cd:4e:f5:d7:bb:b5:cd:
                    81:b5:1f:f1:12:15:39:2a:88:60:11:54:5a:4e:3a:
                    ee:ae:6d:77:8f:6c:4b:37:af:de:c3:69:11:c7:de:
                    1e:22:74:e9:bc:5a:a0:a8:76:15:4f:ed:66:0f:d9:
                    7d:9d:21:f5:5b:57:84:4b:b9:d0:7c:86:bc:9e:42:
                    a6:e9:f7:28:fe:35:fd:0a:a0:e0:1b:57:b8:8c:12:
                    2f:f1:82:67:be:49:43:bc:79:e2:2a:e8:52:b2:7c:
                    d7:85:c0:09:cf:68:3c:28:f6:04:c2:5d:3c:31:32:
                    3a:11:37:95:06:f4:15:27:bb:31:4d:44:8e:bb:ee:
                    d0:40:32:03:a8:ef:9a:49:92:94:c5:5c:cd:ec:57:
                    29:0d:c0:30:b9:87:34:f0:9e:e8:04:ae:60:ed:5e:
                    96:6a:39:db:7c:aa:a6:3b:f9:99:4a:3f:09:84:32:
                    55:58:96:fc:10:c6:3f:27:59:a5:98:f7:40:a7:29:
                    ff:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A0:96:60:37:CC:6E:39:33:7C:EE:14:CB:4A:88:A9:CF:E7:35:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4653a3fe-c18a-33fb-aada-edb291bc3304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.222.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c9:56:a3:89:d4:55:db:09:31:b4:7c:7b:a9:2a:15:08:0a:
         05:20:89:f5:f8:0d:2a:c3:a0:ae:dd:a5:58:73:b9:93:69:3f:
         5f:d8:37:e4:08:2c:d7:c0:c3:a6:ae:bb:ba:95:55:b3:c8:49:
         ea:46:37:e3:42:4d:99:bf:a4:3b:89:67:fd:7c:43:b1:90:0e:
         ad:4c:9a:4f:8a:8e:b1:f8:10:54:24:da:92:ef:93:f5:49:19:
         50:8b:5a:14:86:22:bc:17:4f:67:1e:ff:08:e7:dd:12:ab:2d:
         68:6a:39:3c:00:2f:d7:d7:5c:4f:dd:cb:0e:24:0a:de:d6:b3:
         f9:43:81:89:57:ad:ec:27:b3:45:19:22:75:2f:8b:a8:17:dc:
         ad:69:ce:66:cd:3d:c9:d2:a4:37:89:bd:ba:26:ad:03:7b:07:
         da:9b:80:9d:f6:dd:fe:e9:bc:80:f4:2c:27:3e:d7:74:d4:73:
         33:f4:4a:dc:c9:7e:70:c6:cc:9a:fc:63:26:d5:56:ad:cc:6d:
         1a:dc:dd:76:ab:32:27:55:88:24:70:09:62:35:ed:6d:8e:cc:
         22:15:f4:53:41:a9:d9:a8:31:76:7a:16:85:b7:42:c8:83:0c:
         67:bb:a8:11:87:79:78:5a:9f:cd:92:49:75:30:51:e6:55:99:
         43:ca:f0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:34:38 2025 by rpki-client