Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c55fac7f-4ef6-37f4-a636-9ded5c9949ef.roa
File:                     c55fac7f-4ef6-37f4-a636-9ded5c9949ef.roa (raw, json)
Hash identifier:          edqRQaeaZdFLxipGgkSeB9N8PDID1cHkXg/u19KwPmo=
Subject key identifier:   8B:13:5D:AC:19:56:F2:BB:B8:A8:4D:83:5B:BB:02:67:01:7E:6B:03
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E75D727A23AF6906C62AC00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c55fac7f-4ef6-37f4-a636-9ded5c9949ef.roa
Signing time:             Thu 19 Jun 2025 14:38:19 +0000
ROA not before:           Thu 19 Jun 2025 14:38:19 +0000
ROA not after:            Wed 17 Sep 2025 14:38:19 +0000
asID:                     22773
IP address blocks:        72.201.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:75:d7:27:a2:3a:f6:90:6c:62:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:38:19 2025 GMT
            Not After : Sep 17 14:38:19 2025 GMT
        Subject: CN=b34bfa60-0649-4d25-b4fb-435d5573a1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:0f:65:7d:59:3a:a9:da:d4:4f:4a:00:32:
                    74:66:9a:5b:be:3d:6e:6c:81:54:93:f0:7b:d7:8a:
                    a7:5e:84:ce:37:a1:71:2a:95:a0:ad:06:f6:8e:2f:
                    a9:dc:0e:a9:27:82:2c:5f:84:cd:93:37:07:ff:e8:
                    5b:1a:52:5f:7d:94:bc:3b:16:ce:0a:ae:30:06:8b:
                    60:d8:ee:27:d1:1c:17:ba:b1:ee:4e:5b:11:5e:b7:
                    e7:69:2a:31:69:0f:21:39:6a:ee:df:04:e7:dd:ad:
                    fd:4f:63:05:e6:9d:32:ba:59:48:33:cd:7c:09:eb:
                    cf:17:33:90:4e:2d:62:bb:38:7e:39:c0:88:98:1f:
                    29:e7:1b:6f:8a:f2:90:4e:3a:ee:44:88:74:70:60:
                    2f:92:51:05:ce:40:33:95:cf:49:b5:7a:32:01:27:
                    a8:45:ec:46:83:6f:7e:8b:b3:cd:88:14:1c:92:56:
                    29:a6:35:2d:d9:1f:9d:f1:32:62:27:94:d7:b8:18:
                    99:96:cc:0b:0a:b1:90:a7:fa:b2:79:73:78:26:9d:
                    ab:de:94:7b:5a:82:06:e5:0e:84:f8:5e:20:8e:83:
                    fa:d3:b1:41:96:da:3c:35:01:0f:f8:9a:fd:3c:1d:
                    ec:6e:16:88:66:5c:fa:06:16:d9:a8:80:a7:c5:a5:
                    29:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:13:5D:AC:19:56:F2:BB:B8:A8:4D:83:5B:BB:02:67:01:7E:6B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c55fac7f-4ef6-37f4-a636-9ded5c9949ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.201.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:bc:8c:bd:dc:87:d6:c4:59:21:99:33:62:21:0c:5b:8d:e2:
         8c:fa:94:aa:e7:46:f8:bd:ec:94:8f:74:45:5d:fe:63:fd:d9:
         cd:ce:c1:bb:11:9a:f9:68:4c:32:c0:b6:78:5c:0a:74:e6:48:
         3f:aa:06:52:3e:a7:08:18:82:c5:aa:7c:97:5e:09:45:41:9f:
         12:b7:8e:2c:d6:00:3c:b1:13:e3:94:dc:12:a1:e9:dc:3a:cb:
         df:f5:60:10:d6:fe:f8:3c:26:ff:8a:c1:f7:ec:37:dd:4a:0a:
         1b:6b:d5:ef:ef:e8:42:00:43:2e:d3:a0:1a:3e:85:1f:c1:fa:
         f2:6e:d8:4a:91:f9:85:34:0a:56:8c:cd:f2:ca:49:1a:33:84:
         4d:b1:97:98:3f:19:1f:77:c6:04:64:5f:b2:73:23:0e:66:39:
         ef:8a:78:f7:eb:d2:33:22:d5:8f:ec:ee:ca:c4:42:d6:a0:d9:
         3d:5a:5c:53:95:b1:3a:e3:03:eb:d4:93:32:d3:91:43:75:17:
         f1:e6:73:63:3e:c7:7c:c2:01:5b:c5:82:20:aa:b1:c1:72:d0:
         d8:a6:5d:42:08:7d:92:71:6f:58:9a:8d:b5:5d:0e:88:74:64:
         98:78:ae:5c:7c:10:a9:22:72:91:db:aa:f5:05:40:b6:7f:0b:
         3f:2e:6a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:13:22 2025 by rpki-client