Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a35d00e1-3b0e-34e7-9c19-1f58ebb92ab3.roa
File:                     a35d00e1-3b0e-34e7-9c19-1f58ebb92ab3.roa (raw, json)
Hash identifier:          xtbVNMgplmHrmMG9WnSq+hD7WPyTaM7L4AS9Tg1J1Hk=
Subject key identifier:   AA:6E:AE:D4:63:5C:27:AB:F4:D6:99:03:89:32:08:5A:F8:C8:3C:47
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E77B3FCD75BDC3CE8B45B80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a35d00e1-3b0e-34e7-9c19-1f58ebb92ab3.roa
Signing time:             Thu 19 Jun 2025 14:42:04 +0000
ROA not before:           Thu 19 Jun 2025 14:42:04 +0000
ROA not after:            Wed 17 Sep 2025 14:42:04 +0000
asID:                     22773
IP address blocks:        72.222.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:77:b3:fc:d7:5b:dc:3c:e8:b4:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:42:04 2025 GMT
            Not After : Sep 17 14:42:04 2025 GMT
        Subject: CN=f9c9f561-ea95-4006-b06e-ea35e634125b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:63:ee:35:e0:5c:46:49:51:c4:4a:f7:ae:f7:
                    94:6b:25:77:bf:ac:96:b7:1a:55:fc:db:3d:f5:e1:
                    f2:4e:1a:df:f2:82:e7:ee:e1:eb:b6:05:32:aa:f4:
                    4a:31:d8:ef:39:2d:19:bc:17:ae:1a:ff:3f:b5:82:
                    a8:57:71:da:b1:38:93:8e:fd:95:80:4b:c8:3c:14:
                    c5:11:9b:de:0e:a2:60:8d:74:11:cb:cb:f4:31:da:
                    b6:95:50:4e:a1:5a:d7:04:c5:df:73:7f:08:4b:09:
                    7a:c3:56:f2:89:11:df:46:3e:be:8c:be:57:68:84:
                    f5:77:32:81:01:86:11:b5:7a:17:73:db:f9:ba:dd:
                    38:09:00:74:4d:fc:ef:de:3b:5b:8f:25:df:d8:27:
                    f2:57:1b:8c:19:6f:7a:44:cb:3c:86:3d:b3:ca:78:
                    ea:57:9e:55:71:15:56:c9:05:35:59:4f:90:7b:cc:
                    7c:bc:10:45:9e:e9:67:f2:75:8a:c1:6f:1f:17:ef:
                    bc:75:74:1a:4e:d0:e6:f2:b9:ea:bf:da:05:8f:d5:
                    a4:f1:79:c4:bc:8b:16:5a:f0:ad:c6:65:e4:60:da:
                    7a:e5:bc:94:f8:e9:d0:94:bc:f5:69:81:26:eb:25:
                    73:22:44:94:54:76:c6:2a:65:0c:29:92:88:b3:df:
                    ed:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6E:AE:D4:63:5C:27:AB:F4:D6:99:03:89:32:08:5A:F8:C8:3C:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a35d00e1-3b0e-34e7-9c19-1f58ebb92ab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.222.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:9a:dd:e9:c5:f6:93:de:2d:81:bf:5d:63:a2:c3:33:d6:d0:
         98:11:b0:4f:4a:b0:46:0f:a2:41:ce:6a:9c:85:ac:e3:84:a6:
         2c:56:7f:7e:c8:e2:c0:fb:bd:8d:83:ff:e1:b8:2c:a3:9d:e8:
         11:e3:c5:6d:59:d3:5f:0e:c2:e6:95:56:ad:bb:bd:d4:e0:b2:
         9e:dd:5a:2f:8f:71:ed:b1:5a:44:eb:c3:5b:04:30:95:b5:da:
         4f:0e:ae:ee:10:8d:e0:fb:35:8f:c1:c7:0b:e9:6d:f5:ee:b5:
         c3:d1:71:3f:01:c3:8c:03:77:00:de:8a:00:d0:c4:1a:54:28:
         7f:a6:27:ee:83:15:f8:55:e0:5b:82:a1:93:3d:c4:00:ff:65:
         97:b7:3f:28:29:d6:80:8c:84:30:ec:35:6f:aa:cb:1e:57:45:
         be:67:92:02:b8:22:d8:66:40:98:60:2b:56:75:f4:46:a6:13:
         af:0d:d2:fb:81:68:08:02:14:9a:86:df:5d:14:aa:c9:fa:06:
         03:0b:7c:b1:87:4b:4f:f9:bd:0c:54:1e:60:33:53:b4:a8:53:
         8d:e1:03:fd:b2:74:75:e8:78:26:e1:ff:2d:5b:21:70:43:d9:
         19:65:1e:e5:77:3c:c0:71:89:1c:0d:cc:3d:1e:e6:b1:e1:7c:
         02:8f:83:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:26:59 2025 by rpki-client