Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c5d1d317-13a8-33fd-8ee6-3002f61635c0.roa
File:                     c5d1d317-13a8-33fd-8ee6-3002f61635c0.roa (raw, json)
Hash identifier:          CejsTCrm7Iu8BKMyS3XLnd8EOG01zp41tIfdQPfY8mM=
Subject key identifier:   78:97:3D:0A:A5:AB:69:BC:08:76:6D:4C:15:EF:C0:95:99:BA:13:41
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F5ABE403D1D923AD111700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c5d1d317-13a8-33fd-8ee6-3002f61635c0.roa
Signing time:             Thu 01 May 2025 17:10:08 +0000
ROA not before:           Thu 01 May 2025 17:10:08 +0000
ROA not after:            Wed 30 Jul 2025 17:10:08 +0000
asID:                     22773
IP address blocks:        72.213.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f5:ab:e4:03:d1:d9:23:ad:11:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:10:08 2025 GMT
            Not After : Jul 30 17:10:08 2025 GMT
        Subject: CN=aa59a9ad-4a9b-40d9-9804-48c5b22249f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:93:57:d2:51:13:79:e9:d6:7b:2c:4b:13:da:
                    a7:66:8b:fb:76:c3:dc:9f:c0:05:a4:8e:e0:b8:be:
                    9c:74:13:0b:ce:b9:86:af:73:e2:81:19:04:92:fb:
                    a1:df:64:de:d6:fe:31:48:65:93:74:94:df:28:a3:
                    96:60:52:bc:cd:95:40:9c:23:fc:28:57:da:e2:71:
                    8e:0d:9a:66:79:d8:84:13:e0:0e:5e:5f:61:b6:32:
                    12:06:0c:08:98:8f:f9:0e:84:47:37:dc:62:91:e4:
                    19:76:8e:21:96:06:2d:76:1c:ce:4e:9a:83:71:4f:
                    2c:ce:e8:3a:22:1f:83:04:40:74:12:49:4e:63:69:
                    15:93:29:30:09:13:31:ed:e0:39:9a:2f:89:b5:6c:
                    5b:ee:e0:de:cc:98:cf:63:bf:97:06:fa:6a:b8:c9:
                    42:8f:c8:a1:39:ba:b4:41:c9:bc:8a:de:97:f2:ff:
                    87:31:81:ac:7c:34:ea:a4:d9:ea:20:fa:24:f3:f9:
                    07:53:80:8c:f0:c7:fe:e1:d2:d3:12:94:c6:ba:ff:
                    b1:48:7f:78:e4:8f:6a:af:e1:e0:79:99:56:0b:09:
                    6d:d9:bb:a0:0a:95:85:a0:e8:6f:45:20:b6:6d:fc:
                    7c:fa:20:56:04:05:1e:c9:be:f7:6d:f8:00:3e:f3:
                    be:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:97:3D:0A:A5:AB:69:BC:08:76:6D:4C:15:EF:C0:95:99:BA:13:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c5d1d317-13a8-33fd-8ee6-3002f61635c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.213.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:2d:36:3c:61:a7:6c:f9:b0:2d:2c:4c:00:46:f5:f2:76:d7:
         13:0c:e0:9d:f1:04:b6:dc:00:7a:f2:15:f5:91:9e:79:45:1f:
         19:d2:02:ca:cb:2e:cf:6f:d5:e3:de:45:2e:38:92:4d:53:33:
         46:b9:c3:1b:5e:0d:33:b1:b9:23:10:df:9b:05:c4:0a:34:fa:
         77:bc:c8:1e:ad:7f:de:f0:27:88:de:16:8e:4c:d0:87:ce:fe:
         08:9e:40:38:40:f8:be:80:38:02:be:66:0c:0f:b3:bf:32:2f:
         9b:de:b5:14:91:ea:1e:b0:bd:f0:60:25:08:5b:73:44:30:c9:
         99:f5:2c:c5:38:95:41:6d:03:3b:34:85:b1:8d:79:33:49:6c:
         28:41:38:30:32:07:09:3e:2e:62:5b:62:92:58:c4:cc:72:38:
         78:45:25:7a:99:16:62:f7:d3:bc:fe:c6:78:3b:18:62:44:f1:
         f2:04:7e:b4:5d:06:dc:0f:65:9b:e4:dc:53:d3:05:13:e9:2a:
         93:a8:ab:a0:c8:2f:65:e6:27:7b:16:4c:e4:d3:bb:1b:de:98:
         75:ef:d6:a2:15:27:58:6d:9f:e9:77:33:3a:f0:24:b4:b6:4d:
         8d:a6:3b:6a:64:e7:6d:fb:7f:11:fc:f5:9b:bb:e5:d4:b6:8e:
         7e:ac:54:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:58:59 2025 by rpki-client