Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b00f59eb-f213-3dbc-97c2-51839aa80109.roa
File:                     b00f59eb-f213-3dbc-97c2-51839aa80109.roa (raw, json)
Hash identifier:          ENPh/5dkjp7ZJdBmDGl2svv1S86at1ocQVkqGq27vpg=
Subject key identifier:   B9:27:61:0D:95:EF:29:DF:12:2F:0C:1E:17:59:15:D4:1C:AC:85:FA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5FD84001185378597D5F080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b00f59eb-f213-3dbc-97c2-51839aa80109.roa
Signing time:             Thu 01 May 2025 17:25:56 +0000
ROA not before:           Thu 01 May 2025 17:25:56 +0000
ROA not after:            Wed 30 Jul 2025 17:25:56 +0000
asID:                     22773
IP address blocks:        72.199.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:fd:84:00:11:85:37:85:97:d5:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:25:56 2025 GMT
            Not After : Jul 30 17:25:56 2025 GMT
        Subject: CN=3b8366d4-351e-4d22-8834-ef441e08dde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5e:b7:61:aa:ba:cf:d4:1c:50:94:1f:f0:52:
                    22:00:ff:07:b2:7c:3f:b8:54:8d:ef:cd:b1:b8:98:
                    f6:83:0d:5c:7c:59:73:51:bf:3a:ca:3a:d2:37:90:
                    77:4a:e2:43:26:ca:21:e9:11:17:5e:8f:85:e2:a2:
                    b5:e5:b9:ab:82:81:2d:60:34:97:a3:a0:e8:13:2c:
                    c8:ff:74:5d:5e:5d:d5:36:f0:86:c7:f5:59:28:fa:
                    1c:e4:de:6a:57:7f:a1:e9:a8:c3:aa:9c:89:b2:f0:
                    45:31:fa:bc:12:b4:81:32:e1:0c:3e:7a:b4:de:cf:
                    d5:cb:2f:fb:b7:2b:7b:f2:80:fe:6e:8f:38:23:24:
                    55:98:f5:77:fc:eb:3f:64:da:6b:a0:7c:2f:7b:e7:
                    e7:96:6d:b3:05:15:8b:86:1a:68:f6:a9:a6:7a:1c:
                    84:1f:5f:d7:d0:9d:54:59:4f:36:bb:3d:c3:a1:c8:
                    6a:c7:cb:71:c7:31:d0:75:2e:2d:09:48:dc:5c:c4:
                    a2:40:f9:ca:23:5f:95:ac:0f:35:5c:fc:b9:7b:8f:
                    f7:da:1c:d1:56:de:2f:ce:3f:ba:d1:74:56:53:83:
                    d5:d3:1a:79:97:c0:91:20:9d:90:d0:9c:d1:66:22:
                    6a:0f:4a:47:2a:35:13:bd:7f:b4:13:07:ce:a6:b0:
                    16:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:27:61:0D:95:EF:29:DF:12:2F:0C:1E:17:59:15:D4:1C:AC:85:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b00f59eb-f213-3dbc-97c2-51839aa80109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.199.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:77:c3:76:6c:da:43:ef:c6:d7:de:a3:8c:8b:61:dc:90:9a:
         da:6f:2a:ed:15:7b:c9:52:db:e7:b3:81:d3:b4:07:49:36:7c:
         3a:4b:1e:8f:4c:67:ae:4c:75:c8:83:c6:89:c8:00:b5:c2:13:
         ae:a2:be:36:95:96:29:63:fd:d8:44:b4:18:1f:d3:b7:77:7b:
         f3:05:16:c1:3b:56:ea:2b:bf:1d:6d:54:e7:45:f8:0b:d6:65:
         c9:0f:17:be:c5:b0:4e:fc:13:71:2b:ec:23:97:c9:49:a5:11:
         71:fd:5b:77:39:2b:3e:20:73:98:46:a0:41:ff:29:e4:3a:00:
         1a:19:39:37:96:89:5c:73:d6:96:b0:ab:a0:bb:43:63:ca:ff:
         9f:85:11:e6:0c:8e:c8:c1:d9:d3:d0:df:71:28:21:ac:b6:e8:
         39:e1:0c:9f:b5:fa:c6:8b:ef:e3:45:98:69:07:5c:a3:69:20:
         ae:38:46:88:5b:ca:fd:ad:d7:2a:24:bf:07:54:ae:62:8b:8e:
         60:6a:c6:51:e6:6d:09:ab:d5:1a:65:c3:1a:e5:cd:ce:e9:d1:
         c8:fb:3a:80:d6:f4:e7:46:de:12:5a:8d:4d:f5:45:58:bb:b2:
         5f:c4:09:4b:50:38:e0:2c:2c:a7:e1:89:d6:bb:2f:87:e3:f5:
         c8:82:e0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:43:46 2025 by rpki-client