Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d504314-8040-3fa3-9d05-89e1f1590ace.roa
File:                     6d504314-8040-3fa3-9d05-89e1f1590ace.roa (raw, json)
Hash identifier:          clAdFFu03bziNVKunOTIWaPZPQS+L038O9hKhu+JEB0=
Subject key identifier:   9B:94:F9:4D:83:B3:CE:7C:F6:0F:E3:E1:DF:F2:84:9C:64:65:B2:85
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E75857446201803F8755FC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d504314-8040-3fa3-9d05-89e1f1590ace.roa
Signing time:             Thu 19 Jun 2025 14:37:40 +0000
ROA not before:           Thu 19 Jun 2025 14:37:40 +0000
ROA not after:            Wed 17 Sep 2025 14:37:40 +0000
asID:                     22773
IP address blocks:        72.201.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:75:85:74:46:20:18:03:f8:75:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:37:40 2025 GMT
            Not After : Sep 17 14:37:40 2025 GMT
        Subject: CN=6f03f6f4-520c-4724-9b9e-f89e890bfb1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:87:63:9b:8b:c0:06:74:e6:b5:35:f5:50:b8:
                    8f:d9:5d:a4:d6:c0:4f:3f:f7:32:7f:6f:95:13:b5:
                    6c:c8:36:99:30:bc:a5:4e:15:f9:bf:a0:f4:4a:e2:
                    6f:35:ae:57:51:b8:ac:51:5b:97:ab:47:e2:ed:c5:
                    ff:92:3e:4d:8a:1e:f0:9f:35:36:21:6b:c5:bb:95:
                    29:8d:4c:c2:33:4a:7e:44:47:dd:e1:73:a8:fe:85:
                    03:19:9b:76:a1:df:6a:f9:d1:c5:8c:23:86:d4:e3:
                    41:83:b0:78:b0:99:9a:ef:10:fa:1a:e1:54:f8:18:
                    1b:e9:a8:95:c0:aa:82:66:89:1f:1c:0c:c4:50:02:
                    de:6b:47:f9:6e:c9:d9:77:b5:3a:e1:92:fb:83:29:
                    9b:03:c6:51:b8:54:d1:a4:0a:77:e9:02:5e:33:70:
                    98:d6:cd:36:9d:48:d1:cc:0f:89:9d:26:87:1b:c6:
                    71:45:37:b7:67:c4:59:42:1c:ca:1b:c9:15:03:f4:
                    ec:69:f0:09:ea:18:6e:4d:f6:e5:29:92:cf:17:f3:
                    32:f7:8a:1a:d0:48:8d:e3:c1:dc:d2:4a:89:3b:5c:
                    74:05:77:fd:c9:70:31:c4:1b:83:25:7e:08:e3:6a:
                    e4:65:ea:63:3b:26:e6:f2:cf:d3:8d:df:b1:52:69:
                    ae:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:94:F9:4D:83:B3:CE:7C:F6:0F:E3:E1:DF:F2:84:9C:64:65:B2:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d504314-8040-3fa3-9d05-89e1f1590ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.201.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2c:52:7c:53:da:cf:d8:c0:3e:46:68:e4:f2:c3:ca:19:17:
         69:e7:c9:13:4f:88:b1:02:fa:6c:04:1e:09:7d:3f:ca:3f:57:
         bd:76:1e:87:17:83:c3:bc:6e:3b:e4:67:fe:84:bf:e2:5f:bc:
         bb:0f:bd:03:a8:be:6d:8b:9b:82:05:a8:1c:38:02:c5:03:cf:
         e8:c1:02:2d:a4:04:2e:00:c1:a7:2c:ff:98:f9:27:75:9a:4e:
         05:0b:17:ef:55:38:a1:dd:e2:94:ea:b5:13:ef:28:b7:d1:d1:
         20:4d:0b:aa:d2:29:7c:93:ca:bf:74:55:bb:35:f0:70:95:ab:
         2f:19:37:de:48:71:1c:a9:e0:3e:5c:df:c1:f6:3d:6d:d9:63:
         70:81:5c:de:9c:56:32:7c:18:bb:82:1e:dd:64:34:12:35:25:
         2a:05:67:2f:90:e5:79:38:a8:dc:11:d7:30:87:30:0a:8f:0a:
         9e:b5:d4:27:cb:06:98:14:dc:4a:e3:a5:a3:77:fe:5d:ad:b2:
         38:88:7a:7f:ae:59:b4:5f:4a:23:83:18:cd:5c:fc:45:d3:e5:
         07:10:1a:3f:e1:58:69:94:6f:52:94:2f:c4:db:a5:53:b7:2e:
         a3:0e:db:92:0e:30:47:b8:e4:e5:55:20:90:4f:f6:e7:8f:f5:
         3d:66:ae:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:23:54 2025 by rpki-client