Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78134a9f-482e-3722-b63b-fe53aaf49573.roa
File:                     78134a9f-482e-3722-b63b-fe53aaf49573.roa (raw, json)
Hash identifier:          u+3+LOJFVHRMIyNnZ7rypQsz99Ik3JYyliQb/51qsVc=
Subject key identifier:   7F:45:53:66:64:7D:23:9C:1B:2C:9D:67:29:D8:E6:FF:B7:5E:B4:79
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5FD8750FFE7851C3C4E6E00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78134a9f-482e-3722-b63b-fe53aaf49573.roa
Signing time:             Thu 01 May 2025 17:25:58 +0000
ROA not before:           Thu 01 May 2025 17:25:58 +0000
ROA not after:            Wed 30 Jul 2025 17:25:58 +0000
asID:                     22773
IP address blocks:        72.199.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:fd:87:50:ff:e7:85:1c:3c:4e:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:25:58 2025 GMT
            Not After : Jul 30 17:25:58 2025 GMT
        Subject: CN=b72985c2-f85a-4848-b61a-af1e31937f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ac:0b:87:36:53:7d:f4:fe:17:82:d4:2e:de:
                    ce:db:4c:9a:04:fe:d9:8f:57:cd:4a:9d:04:2b:55:
                    29:fe:03:f0:f9:d9:8c:bd:4d:c2:98:de:f7:0b:68:
                    ed:5b:97:a9:42:bd:bb:af:c2:79:96:6b:0a:a8:eb:
                    59:b3:76:45:6f:7b:fb:92:71:25:45:05:62:29:2b:
                    65:fe:0c:9e:3c:a8:ea:cd:07:2c:d8:65:95:17:11:
                    c4:b6:da:0b:ea:7f:81:d1:2d:21:2b:8f:12:09:84:
                    0b:30:3a:d2:b9:43:3a:da:27:f7:bf:95:8b:0a:ee:
                    50:03:da:d2:b1:ac:52:0c:c8:85:f0:2c:85:07:85:
                    ab:12:4c:1e:03:ef:32:46:68:6a:ea:48:b3:ed:27:
                    5e:f7:77:4a:b5:dd:64:40:4d:72:e1:3b:5e:3a:e6:
                    7a:fa:55:3d:ce:af:8d:a2:ac:8f:2f:ed:1f:90:95:
                    96:80:58:af:75:2e:67:c6:94:96:5a:ad:97:bf:b1:
                    ce:aa:8d:50:7a:07:7a:e3:64:b9:9d:85:69:a5:8a:
                    97:8e:53:eb:a1:d4:b2:21:10:b9:90:f6:b1:11:5d:
                    0e:f0:df:d3:d1:50:ef:cd:33:f2:20:2b:ac:85:83:
                    df:16:cb:0d:a4:99:32:e1:9b:fd:d3:84:ae:9f:d5:
                    aa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:45:53:66:64:7D:23:9C:1B:2C:9D:67:29:D8:E6:FF:B7:5E:B4:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78134a9f-482e-3722-b63b-fe53aaf49573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.199.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:d8:87:f5:1e:05:b4:dd:56:f6:fb:7f:eb:af:29:41:63:f6:
         2b:f4:7e:2a:d1:4a:17:2c:37:da:cf:6f:54:6e:05:94:1c:ea:
         e5:f9:9f:25:04:e2:ba:82:b1:5b:37:d5:8d:ae:85:2e:b4:5d:
         84:bf:b5:e7:5f:18:e0:02:02:a5:5f:19:7f:63:3c:a1:6e:39:
         4c:d4:77:0b:04:a2:fe:a7:ac:74:82:67:70:3c:56:cf:72:44:
         ab:52:73:75:17:30:2a:21:1e:d1:da:b7:82:ee:3d:94:06:04:
         df:a4:be:25:1a:06:67:16:36:37:6c:71:b5:8e:5f:5d:ac:78:
         5a:3b:1c:ee:97:90:2c:8d:81:c4:c7:8f:c4:85:f9:1e:ac:08:
         c4:0c:99:ab:06:09:b5:c2:cc:4e:0f:9a:fe:c7:b8:8d:c2:59:
         51:b8:3f:06:60:c0:81:81:f7:d8:cb:5b:82:f3:a7:03:31:26:
         d3:93:1e:8a:d3:e3:b3:9f:15:d4:bb:ac:f3:6e:5f:8c:6b:c8:
         ce:83:fb:e4:b4:32:50:1d:e6:13:cf:35:db:84:81:cc:c1:6f:
         1e:44:be:f0:27:df:72:83:1e:0e:76:5b:8e:c1:37:11:81:62:
         12:bd:78:89:a9:cb:d5:0b:99:8b:fb:6b:5d:c6:88:87:25:5f:
         c8:84:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:03:03 2025 by rpki-client