Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/853bf76f-36de-33f4-af3d-24f94614e557.roa
File:                     853bf76f-36de-33f4-af3d-24f94614e557.roa (raw, json)
Hash identifier:          QI4mZcgZXPNSiC9dDkmbt3e3CIBc55F/t1tU/uj+SIE=
Subject key identifier:   22:7F:D5:C9:FA:B5:73:6E:FE:78:30:63:C9:48:18:F1:CF:37:D5:D9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A963626E5FD5398FDE8293400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/853bf76f-36de-33f4-af3d-24f94614e557.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        72.192.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:26:e5:fd:53:98:fd:e8:29:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=b6310869-3445-4b17-8eb6-e199ba437e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:63:74:46:bf:d3:b0:b0:61:38:35:79:d9:79:
                    b7:a3:41:1d:a9:6d:24:fb:19:94:a6:5c:5f:54:0b:
                    9a:c9:c3:9a:88:fb:1e:a9:35:ff:33:b9:3a:77:7f:
                    95:44:ae:d0:7f:3a:ec:61:9d:11:12:9b:99:f5:14:
                    29:bb:81:f3:69:90:aa:c7:5f:55:be:97:9a:47:c6:
                    02:1f:d4:fd:85:87:dc:b6:a3:f7:71:1b:96:d8:a7:
                    57:78:11:35:6e:cc:2b:2e:e9:1d:22:79:ca:a6:f4:
                    e1:d4:dc:0a:c6:fc:5f:b6:b8:41:10:22:ee:6a:41:
                    a5:77:a2:9f:e1:4d:f6:b2:99:33:26:f1:19:09:e2:
                    ac:9d:8b:a4:d7:35:82:46:33:a2:9b:f0:4c:8c:d1:
                    c5:ae:4a:e1:64:0c:87:69:fe:26:6c:3a:5c:fd:b5:
                    a4:a0:2a:df:8e:27:fa:f9:7c:cd:b4:ef:ee:0d:f6:
                    ab:07:6c:e6:58:f1:6b:a2:b2:e5:2f:63:42:c7:e2:
                    5b:a5:ae:fe:70:18:e2:bd:2b:25:c3:e9:e2:ee:f0:
                    e9:65:cd:1d:22:a7:30:1f:90:45:ad:8c:0b:37:5f:
                    52:a4:df:bd:8b:8c:48:88:28:d7:fa:46:01:7c:76:
                    6b:e4:33:f6:df:85:4c:e4:06:4f:fb:f3:32:e2:8a:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7F:D5:C9:FA:B5:73:6E:FE:78:30:63:C9:48:18:F1:CF:37:D5:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/853bf76f-36de-33f4-af3d-24f94614e557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.192.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:15:cf:6f:1d:69:31:cf:55:41:84:9b:2d:f3:f7:e9:21:97:
         f6:1e:3d:44:f6:b7:fe:12:60:fc:6c:0c:d2:37:0c:c4:9d:6a:
         a2:d6:f6:72:3b:0d:b8:7c:7b:be:d0:e3:20:02:c0:b9:d9:b4:
         aa:01:d3:2b:18:d3:af:24:0b:6a:1e:a4:9e:01:a1:02:8e:8e:
         88:45:65:aa:e0:0f:56:46:c5:52:a6:41:22:79:b4:ef:39:a0:
         34:6c:d8:ab:36:23:6f:c7:67:5c:52:25:ce:d5:47:7d:d9:9a:
         e7:8f:36:59:d5:8d:d8:ec:a8:92:29:cb:26:53:7e:1e:ae:0c:
         4f:54:fe:65:83:a7:39:3d:66:07:62:5f:b1:24:83:34:95:47:
         db:a3:d9:e5:ff:62:4d:2e:9a:46:32:22:d4:ac:05:4f:01:33:
         77:8b:a4:1c:55:c3:35:7c:35:db:91:46:1d:52:cd:7a:fb:53:
         bb:6f:ac:50:3d:27:8c:54:2b:b8:de:0e:7a:a7:87:ad:95:9d:
         23:84:b8:f5:11:84:ab:ef:13:55:3d:62:32:db:2b:37:96:6c:
         a8:65:5f:2b:95:16:89:cc:ca:25:2a:d3:4c:e0:79:1a:b9:40:
         9e:1c:69:41:69:4b:49:ba:1b:c8:cd:11:06:95:ad:c1:ab:d7:
         3c:af:af:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNibl/VOY/egpNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk
YjYzMTA4NjktMzQ0NS00YjE3LThlYjYtZTE5OWJhNDM3ZTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWN0Rr/TsLBhODV52Xm3o0EdqW0k+xmUplxf
VAuaycOaiPseqTX/M7k6d3+VRK7QfzrsYZ0REpuZ9RQpu4HzaZCqx19VvpeaR8YC
H9T9hYfctqP3cRuW2KdXeBE1bswrLukdInnKpvTh1NwKxvxftrhBECLuakGld6Kf
4U32spkzJvEZCeKsnYuk1zWCRjOim/BMjNHFrkrhZAyHaf4mbDpc/bWkoCrfjif6
+XzNtO/uDfarB2zmWPFrorLlL2NCx+Jbpa7+cBjivSslw+ni7vDpZc0dIqcwH5BF
rYwLN19SpN+9i4xIiCjX+kYBfHZr5DP234VM5AZP+/My4oqXkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCJ/1cn6tXNu/ngwY8lIGPHPN9XZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODUzYmY3NmYtMzZkZS0z
M2Y0LWFmM2QtMjRmOTQ2MTRlNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMAMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACIVz28daTHPVUGEmy3z9+khl/YePUT2t/4SYPxsDNI3DMSdaqLW9nI7
Dbh8e77Q4yACwLnZtKoB0ysY068kC2oepJ4BoQKOjohFZargD1ZGxVKmQSJ5tO85
oDRs2Ks2I2/HZ1xSJc7VR33ZmuePNlnVjdjsqJIpyyZTfh6uDE9U/mWDpzk9Zgdi
X7EkgzSVR9uj2eX/Yk0umkYyItSsBU8BM3eLpBxVwzV8NduRRh1SzXr7U7tvrFA9
J4xUK7jeDnqnh62VnSOEuPURhKvvE1U9YjLbKzeWbKhlXyuVFonMyiUq00zgeRq5
QJ4caUFpS0m6G8jNEQaVrcGr1zyvr3k=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:16:00 2025 by rpki-client