Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d87c838f-3f1d-385a-a4aa-4fa809d44e7e.roa
File:                     d87c838f-3f1d-385a-a4aa-4fa809d44e7e.roa (raw, json)
Hash identifier:          uoMTcubUQyMcz2Y31Ou430NCLs+RVfEpDDT2vnZINE4=
Subject key identifier:   D2:57:2D:8D:D0:FB:5B:F5:8C:C7:9D:B2:69:AF:11:A1:02:3F:05:59
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F5B1E07F236357F14734A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d87c838f-3f1d-385a-a4aa-4fa809d44e7e.roa
Signing time:             Thu 01 May 2025 17:10:11 +0000
ROA not before:           Thu 01 May 2025 17:10:11 +0000
ROA not after:            Wed 30 Jul 2025 17:10:11 +0000
asID:                     22773
IP address blocks:        72.221.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f5:b1:e0:7f:23:63:57:f1:47:34:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:10:11 2025 GMT
            Not After : Jul 30 17:10:11 2025 GMT
        Subject: CN=6ab268e5-3352-4762-b765-af6af72de44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f7:e1:49:bf:a8:88:3a:4b:bc:16:6b:3a:ec:
                    03:61:08:a4:dd:4e:1c:9b:0f:31:f6:a8:33:8c:af:
                    46:a3:c9:0c:96:5c:22:2e:01:23:e7:ec:12:b1:b4:
                    42:2f:e5:ad:7c:33:4f:9a:9a:00:6f:52:b8:22:23:
                    f1:a8:4b:db:01:9f:3e:95:b3:4b:67:a1:d4:9c:4c:
                    14:22:fb:c2:14:16:c0:37:b5:41:ef:d2:37:3e:de:
                    ec:54:97:6e:0d:b6:58:4d:79:db:09:c2:0c:1b:81:
                    1f:1f:63:b2:77:09:1b:64:71:9e:c3:08:19:32:f1:
                    54:30:f4:70:62:5e:4e:b8:5d:ef:9b:ba:e7:51:9d:
                    9b:94:ae:01:ee:87:cc:09:d5:b1:7e:f9:b1:d7:06:
                    e3:7c:34:77:fc:58:61:e7:39:60:ec:3c:48:25:5b:
                    f6:82:fa:44:98:7f:c8:16:ee:de:77:c9:ab:39:76:
                    12:cd:e1:aa:b2:7e:da:49:6f:82:2c:e1:d6:04:7d:
                    41:44:96:75:e6:d4:c6:ac:14:8c:ff:8d:cd:1f:fc:
                    62:a9:81:da:13:74:a4:66:0d:85:84:fd:66:1b:bc:
                    22:74:38:a6:05:02:ff:04:a5:65:60:5f:9f:ba:06:
                    98:db:c8:ec:b1:ea:98:e2:17:e1:f7:22:17:c9:a4:
                    38:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:57:2D:8D:D0:FB:5B:F5:8C:C7:9D:B2:69:AF:11:A1:02:3F:05:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d87c838f-3f1d-385a-a4aa-4fa809d44e7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.221.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:47:b9:53:aa:57:9c:63:fc:53:23:33:a7:ec:28:26:89:0a:
         c3:50:09:b0:a8:af:c8:57:d4:e3:bd:c2:8e:d6:4b:ad:d9:c7:
         90:01:52:a0:56:da:ae:e5:ac:4e:c4:0c:e4:7e:55:1a:d4:71:
         de:e3:dd:d7:4b:90:bf:ac:e8:81:08:ca:19:c1:7a:43:23:22:
         c8:81:c0:a7:73:c7:c2:4b:c1:a4:26:36:5d:10:80:12:3e:13:
         0f:21:e0:26:07:b2:04:3c:6f:64:6d:57:6b:62:49:41:f7:3d:
         e1:59:0f:33:6a:4c:36:4b:97:1f:0f:97:ce:b2:ff:44:20:c9:
         a6:52:e3:e8:ca:de:12:75:f9:37:69:4d:66:be:48:5f:62:59:
         31:b3:57:ba:78:94:2e:52:d3:8e:06:0f:0a:f9:40:74:f9:91:
         fd:b2:b7:a2:76:f8:37:49:68:a2:84:f9:bf:0a:8b:18:31:0d:
         27:ac:df:9f:14:44:17:f2:99:2c:98:4d:98:87:4a:4e:9f:36:
         33:cf:22:91:c9:54:c1:a9:31:a3:ba:a4:80:c3:d2:64:a5:b7:
         8e:03:e3:c7:a5:21:cb:d6:c5:86:9a:e3:f3:93:68:d5:3f:67:
         91:a2:b2:97:26:ea:ec:08:09:5b:70:2b:ac:b1:f7:62:bf:b0:
         9e:14:22:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:00:05 2025 by rpki-client