Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99583659-786e-3895-bf0c-0578e0cb6bdd.roa
File:                     99583659-786e-3895-bf0c-0578e0cb6bdd.roa (raw, json)
Hash identifier:          DXM3V0vgCdm/RMLvspTv/1uqhANFXSMaEqH4xr/FNr4=
Subject key identifier:   57:5A:92:CF:17:E4:73:2D:15:33:2B:81:DE:9A:CC:A6:87:4D:85:38
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DFE36237D62463D4F62A500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99583659-786e-3895-bf0c-0578e0cb6bdd.roa
Signing time:             Thu 19 Jun 2025 10:37:17 +0000
ROA not before:           Thu 19 Jun 2025 10:37:17 +0000
ROA not after:            Wed 17 Sep 2025 10:37:17 +0000
asID:                     22773
IP address blocks:        174.73.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:fe:36:23:7d:62:46:3d:4f:62:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 10:37:17 2025 GMT
            Not After : Sep 17 10:37:17 2025 GMT
        Subject: CN=fab6a8db-b043-405e-904a-ff2764d5ad51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e9:78:fb:ad:49:1c:7f:7f:63:99:c9:82:ff:
                    59:be:fc:6b:2b:0c:58:35:88:c6:d4:e8:18:5b:f1:
                    48:fd:a2:9f:3d:36:a7:7a:c2:b7:69:12:c0:00:14:
                    5f:f3:4a:2e:b4:04:2b:1f:ce:62:f8:bb:a8:a1:b3:
                    ce:72:22:07:6b:0f:ab:90:ba:cd:d7:f5:7c:50:e1:
                    28:d5:88:22:5b:99:d7:6d:1d:39:3c:e8:7e:f9:7d:
                    00:db:25:5c:06:75:a8:94:08:be:d7:9d:ac:44:41:
                    3e:b9:5b:45:e3:83:18:0b:ff:1a:ce:d1:ee:c8:d3:
                    d5:a3:69:5c:bf:ce:34:0e:97:2b:99:e5:ab:33:af:
                    e5:cc:fd:6c:06:48:e5:df:52:b1:bd:a7:6f:e2:dc:
                    38:0c:ae:22:17:c0:51:8f:df:03:58:9e:cf:ad:a3:
                    40:62:f5:0a:42:ad:4e:b0:d8:7c:17:86:15:fa:75:
                    68:8a:0f:a8:a0:1e:e8:b7:fa:a5:0b:25:f6:f2:a3:
                    33:7e:31:6c:93:32:80:93:fe:83:db:6a:dd:60:87:
                    92:9e:13:6f:f3:ec:49:f6:54:55:cc:39:03:5c:d2:
                    da:97:29:65:00:12:9b:38:e5:a5:2d:ac:e6:a7:ef:
                    84:a3:d4:a2:2f:a1:91:b4:c8:cf:4f:b5:dc:ac:5e:
                    cb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5A:92:CF:17:E4:73:2D:15:33:2B:81:DE:9A:CC:A6:87:4D:85:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/99583659-786e-3895-bf0c-0578e0cb6bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.73.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:72:c6:33:7a:c6:02:f7:dc:e7:fc:47:f0:84:f9:a0:0b:3f:
         24:51:ef:cf:7d:6c:97:af:2d:96:22:49:f6:2b:2d:f5:02:60:
         91:34:0c:7a:14:6e:1c:da:b3:24:32:37:e4:3c:c7:80:f6:04:
         18:40:2c:f6:90:26:c7:25:f5:02:25:3d:40:db:97:d8:c7:15:
         93:f2:d7:c7:9d:4a:fb:e0:76:d4:c3:bf:c1:5d:4f:a5:53:5f:
         64:0a:00:3e:8f:8d:c7:76:4b:cf:65:85:74:07:4e:d7:63:86:
         aa:d9:9f:26:aa:9c:d3:e3:d8:c3:b7:a7:fc:b2:cf:38:de:f5:
         b7:2c:d7:fe:96:05:43:a5:e6:65:a7:8d:99:fc:3e:93:88:13:
         73:92:88:38:46:d2:5b:8d:07:4e:c3:37:00:f1:ef:01:3c:ce:
         1f:f5:52:e8:d6:53:79:76:3f:89:47:0e:66:02:b5:4c:7f:c6:
         5d:20:4c:05:d7:87:f6:a5:63:1f:ba:34:82:10:6b:47:ae:b9:
         71:b8:44:2c:92:ac:2e:81:d6:c0:83:78:43:37:04:06:ad:ed:
         8b:7c:68:17:cf:f1:8e:c4:ee:a5:65:82:23:1b:fb:1a:96:a8:
         7f:7e:27:1d:96:e1:c5:a3:24:91:99:4f:9a:d2:23:59:80:64:
         52:21:04:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:46:42 2025 by rpki-client