Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1fcc14c-a201-3c8f-9f14-79b7b6340075.roa
File:                     e1fcc14c-a201-3c8f-9f14-79b7b6340075.roa (raw, json)
Hash identifier:          fia8VV1zCbVaLyLwiH/M4etb2aH0wS+xL6q6rsFxRtM=
Subject key identifier:   CE:3F:81:5D:81:55:A4:5C:BE:95:99:67:12:59:E0:66:E6:EB:8D:81
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E7745CD3007B697C71E1200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1fcc14c-a201-3c8f-9f14-79b7b6340075.roa
Signing time:             Thu 19 Jun 2025 14:41:12 +0000
ROA not before:           Thu 19 Jun 2025 14:41:12 +0000
ROA not after:            Wed 17 Sep 2025 14:41:12 +0000
asID:                     22773
IP address blocks:        72.217.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:77:45:cd:30:07:b6:97:c7:1e:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:41:12 2025 GMT
            Not After : Sep 17 14:41:12 2025 GMT
        Subject: CN=c5fb21fe-afef-4fc1-b5be-9e49966f8901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3d:96:5b:17:cf:ed:d2:ab:7c:e3:66:38:40:
                    10:11:14:19:4c:1f:39:4e:1c:bf:5a:f6:2d:37:05:
                    c8:ce:8d:25:ec:f2:de:4f:24:9d:18:f4:06:7f:84:
                    be:5e:87:2f:5b:4c:8d:7c:de:72:ba:40:2f:4b:f2:
                    c8:d4:f4:56:88:d1:18:a5:3d:73:4a:c8:7c:e9:25:
                    70:27:1a:66:2a:75:83:b6:01:ac:54:86:2e:21:7a:
                    89:84:b1:da:e9:da:34:c2:2a:a9:22:34:25:05:f3:
                    05:3d:93:66:76:02:98:a7:a4:75:7d:a7:dc:b8:be:
                    52:51:27:fa:ca:51:23:a4:3d:6c:bc:b9:b8:f5:29:
                    88:35:8c:c9:5c:6f:81:57:fd:c7:2c:ef:61:0d:f6:
                    cc:10:73:20:0d:98:c3:2a:79:62:15:14:d3:1e:35:
                    3f:b3:5a:e9:f1:e7:40:4e:4b:8a:ff:2a:cd:c8:f2:
                    e6:27:db:60:b3:4d:ef:c7:5b:f8:e7:76:0a:66:db:
                    75:d7:31:d7:cc:65:e9:3e:a7:24:9c:c7:75:b5:07:
                    e6:6e:ee:cd:e5:4d:0f:29:e1:c2:ee:1a:ed:52:cf:
                    ac:25:d0:6f:73:59:14:cd:97:93:b1:97:01:55:24:
                    45:a7:e9:fa:2e:95:ab:3a:c0:ea:f2:66:cf:71:71:
                    40:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3F:81:5D:81:55:A4:5C:BE:95:99:67:12:59:E0:66:E6:EB:8D:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1fcc14c-a201-3c8f-9f14-79b7b6340075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.217.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ea:71:f2:6b:28:3c:eb:2f:cc:19:39:92:9f:40:af:66:02:
         bd:95:a5:ac:16:03:9e:15:81:3a:69:23:dc:7d:d6:6c:b6:3d:
         b7:3d:1b:74:3a:04:11:6c:e9:a3:8b:2a:49:56:ab:27:c0:19:
         ff:30:fd:1c:5b:0a:9f:8a:c6:aa:ac:02:d2:81:ef:99:ea:22:
         59:4e:c7:3f:ac:74:1c:e0:b0:ec:e6:96:05:0f:91:86:9f:e7:
         2e:a9:ca:7b:63:f8:7d:00:49:d2:72:4f:4e:26:8e:73:45:17:
         4d:94:39:b5:f4:21:51:fd:bb:c2:1b:f2:a7:95:2c:81:4b:ff:
         dd:7c:ee:21:81:c3:6e:4b:f1:e8:53:c4:48:d5:28:74:12:5f:
         3d:2d:1a:86:9a:6f:fa:5f:30:34:cb:4e:22:fa:f2:c0:cb:ee:
         9c:77:9a:d8:08:76:da:97:39:f8:5b:a9:4f:5f:b5:3b:43:49:
         07:88:60:10:5e:3b:53:ad:5d:fa:61:03:c2:13:99:dc:42:14:
         12:f4:5c:92:33:a1:b5:dc:8a:b8:7c:cb:19:03:41:9c:6e:60:
         88:7b:59:25:63:2f:38:c8:12:25:30:ea:d3:0c:05:b3:b4:5b:
         d7:94:cb:29:2a:9b:99:3c:e0:3f:1b:14:92:86:f9:6c:1c:8b:
         2e:51:8e:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d0XNMAe2l8ceEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDYxOTE0NDExMloXDTI1MDkxNzE0NDExMlowLzEtMCsGA1UEAxMk
YzVmYjIxZmUtYWZlZi00ZmMxLWI1YmUtOWU0OTk2NmY4OTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj2WWxfP7dKrfONmOEAQERQZTB85Thy/WvYt
NwXIzo0l7PLeTySdGPQGf4S+XocvW0yNfN5yukAvS/LI1PRWiNEYpT1zSsh86SVw
JxpmKnWDtgGsVIYuIXqJhLHa6do0wiqpIjQlBfMFPZNmdgKYp6R1fafcuL5SUSf6
ylEjpD1svLm49SmINYzJXG+BV/3HLO9hDfbMEHMgDZjDKnliFRTTHjU/s1rp8edA
TkuK/yrNyPLmJ9tgs03vx1v453YKZtt11zHXzGXpPqcknMd1tQfmbu7N5U0PKeHC
7hrtUs+sJdBvc1kUzZeTsZcBVSRFp+n6LpWrOsDq8mbPcXFAfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM4/gV2BVaRcvpWZZxJZ4Gbm642BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTFmY2MxNGMtYTIwMS0z
YzhmLTlmMTQtNzliN2I2MzQwMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNkzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTqcfJrKDzrL8wZOZKfQK9mAr2VpawWA54VgTppI9x91my2Pbc9G3Q6
BBFs6aOLKklWqyfAGf8w/RxbCp+KxqqsAtKB75nqIllOxz+sdBzgsOzmlgUPkYaf
5y6pyntj+H0ASdJyT04mjnNFF02UObX0IVH9u8Ib8qeVLIFL/9187iGBw25L8ehT
xEjVKHQSXz0tGoaab/pfMDTLTiL68sDL7px3mtgIdtqXOfhbqU9ftTtDSQeIYBBe
O1OtXfphA8ITmdxCFBL0XJIzobXcirh8yxkDQZxuYIh7WSVjLzjIEiUw6tMMBbO0
W9eUyykqm5k84D8bFJKG+Wwciy5Rjo8=
-----END CERTIFICATE-----
Generated at Wed Jul 2 00:25:20 2025 by rpki-client