Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d12e3ed1-05db-3688-b6c8-06246b9caf36.roa
File:                     d12e3ed1-05db-3688-b6c8-06246b9caf36.roa (raw, json)
Hash identifier:          hL3or6cryp8iG+dHIX+1kH9B2cQd3gmp9bDOlbEjAIA=
Subject key identifier:   FF:92:A1:06:E0:78:C3:CC:EE:00:82:3F:E6:28:DA:89:55:C1:3D:00
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849EBEA606053550CE8DD336C80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d12e3ed1-05db-3688-b6c8-06246b9caf36.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     22773
IP address blocks:        72.205.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:60:60:53:55:0c:e8:dd:33:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=35868221-56c9-4772-ab5f-41cdca7ff256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:31:c1:89:d4:8b:1f:d1:82:95:ab:a3:b4:62:
                    71:3c:52:40:85:46:cc:3e:48:38:b5:41:6d:2b:36:
                    46:c7:c2:33:0c:ec:d5:a1:cb:85:35:ac:fb:69:58:
                    b7:07:39:20:bb:17:4c:29:75:f8:75:08:5d:bf:a0:
                    90:46:45:ec:2a:7b:a6:64:52:f2:42:89:55:87:8c:
                    81:fb:30:2e:9a:d0:44:7a:77:d7:f3:de:2f:de:48:
                    2f:97:a6:ca:f5:35:1e:25:fc:1d:16:69:4c:fd:05:
                    95:65:56:c7:ba:a2:0a:a5:8b:19:04:4d:0b:16:39:
                    aa:16:63:da:59:c8:32:b4:c6:28:6d:03:36:c0:63:
                    9a:94:6c:6b:f9:2d:31:a0:a0:7a:f1:86:0e:da:da:
                    fd:e9:89:79:04:67:79:0c:b2:33:25:7a:39:42:8e:
                    86:e4:af:74:d0:aa:5a:24:49:16:8c:fc:98:bd:45:
                    c5:51:e2:c5:82:99:cc:4e:37:1d:a8:f5:ef:10:01:
                    74:be:10:8a:fc:bb:f5:04:6a:0a:c0:e9:5f:1f:49:
                    ba:42:a6:e3:24:18:b1:39:73:44:8d:2f:e3:95:fb:
                    17:83:bb:26:3f:8a:49:ce:27:31:5d:ca:15:6d:28:
                    98:f7:7a:d7:44:e8:b3:27:13:0f:48:22:07:5b:f6:
                    81:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:92:A1:06:E0:78:C3:CC:EE:00:82:3F:E6:28:DA:89:55:C1:3D:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d12e3ed1-05db-3688-b6c8-06246b9caf36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.205.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:f4:0e:7f:92:c2:c0:fd:07:f9:5b:62:6f:74:89:1f:d7:77:
         28:42:f1:52:9b:9c:00:e7:a2:d2:aa:16:95:14:b4:14:17:f8:
         a6:c7:e6:0b:41:3c:38:8d:4f:0b:51:4f:86:df:a5:66:ea:2b:
         14:0a:29:86:ad:8d:d1:5a:ce:c2:7c:55:89:55:9e:4f:39:4f:
         d2:8c:ee:c8:e9:9c:95:55:89:36:f0:fb:35:1a:ab:3e:1a:05:
         4f:e5:96:fb:f3:27:38:5b:bc:ee:dc:f9:c1:f4:68:d8:8c:97:
         ab:80:d4:cb:99:d0:16:f0:6d:e6:f1:ff:01:7f:af:0a:f9:50:
         c2:cc:9f:42:3a:f6:e0:1e:29:3f:8b:de:81:18:8f:e7:3a:52:
         b0:97:17:bc:20:78:d8:63:97:ce:3b:ac:3e:56:4c:d9:56:ec:
         37:07:71:b6:c1:23:c1:ff:1d:e9:c5:f8:ee:cf:cc:e8:5a:65:
         17:c2:58:22:49:8d:bc:41:bd:af:34:7e:09:4a:bd:47:3a:d2:
         16:3f:86:28:30:6a:68:06:c2:10:c2:af:1b:a6:ee:13:9a:af:
         59:34:75:dd:3e:e5:22:60:d2:a4:23:f6:07:2e:1d:d9:09:58:
         5d:56:84:45:10:fc:49:70:29:5d:37:fa:fa:3d:a3:28:66:4a:
         22:1c:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:16:44 2025 by rpki-client