Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02eac7a3-3d0c-35b2-8657-cb71d26ac1f2.roa
File:                     02eac7a3-3d0c-35b2-8657-cb71d26ac1f2.roa (raw, json)
Hash identifier:          kbDBhJ1YedzSDxVKkd7HHmvGPwIIorjBsSrInG93H4A=
Subject key identifier:   B2:2A:E3:A7:65:A3:59:32:25:02:55:92:24:41:85:4D:8E:BC:6E:6D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F019F6B42B6896C00C828C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02eac7a3-3d0c-35b2-8657-cb71d26ac1f2.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        72.201.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:9f:6b:42:b6:89:6c:00:c8:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=df78b2cc-b118-45df-ad30-717fcff79d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6e:d8:9b:2b:78:56:df:f3:b4:fd:38:83:04:
                    b8:da:6d:0a:b5:4f:e4:d5:9f:6a:01:2c:3f:85:e8:
                    54:ba:2b:46:a2:ce:a3:7a:7d:29:7f:a5:95:0e:5b:
                    af:b9:c0:24:58:17:29:d4:d6:30:5b:15:6f:e0:a1:
                    5e:be:ee:99:53:06:f9:c3:99:11:65:3f:df:42:e7:
                    23:2e:9e:56:47:34:50:84:3c:d7:4e:fa:41:1e:12:
                    2a:c7:c0:bc:e4:10:b4:c5:d4:1e:54:cc:d9:08:f6:
                    4a:ca:79:da:0f:fd:eb:04:4a:93:eb:2c:19:b7:f1:
                    5e:ec:e2:02:42:59:09:be:df:e6:01:6e:a9:16:3b:
                    91:97:29:fc:3e:11:9a:c4:df:b3:40:94:ca:4d:61:
                    63:dd:8e:b3:67:3e:e8:1b:3d:3d:62:ec:f4:4a:48:
                    cf:24:01:88:4d:67:79:f7:ac:81:12:b2:6e:0b:38:
                    72:50:26:04:7b:74:4b:49:07:57:ee:57:f8:e0:27:
                    20:61:58:5a:46:d3:9c:20:e6:57:9b:a4:2f:3b:ea:
                    5a:aa:a9:0a:18:28:6b:96:8e:30:84:97:e6:df:cb:
                    ac:19:98:23:ae:4b:f6:68:ec:5d:1f:ad:26:dd:05:
                    3e:ba:84:b7:b8:d0:5a:78:89:51:ff:72:81:95:a1:
                    70:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2A:E3:A7:65:A3:59:32:25:02:55:92:24:41:85:4D:8E:BC:6E:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02eac7a3-3d0c-35b2-8657-cb71d26ac1f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.201.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:df:11:5c:df:bc:f0:93:e0:d6:8c:76:d6:4e:63:d2:5e:3d:
         61:d1:50:d5:04:33:7f:67:d8:19:94:a6:cd:a0:13:f6:06:25:
         2c:9b:ec:ca:43:6a:e3:fe:c6:31:31:48:b8:34:c3:97:d8:3c:
         9b:d3:d8:74:01:7a:11:81:4e:d5:aa:f4:96:7c:aa:da:97:20:
         26:7b:cd:95:ce:79:d5:26:c8:7b:b4:98:b7:60:2c:87:aa:78:
         fe:63:16:29:59:5e:97:24:d9:08:e3:62:e4:08:1f:bd:77:62:
         ac:7b:c2:31:0e:53:8d:93:01:3f:64:78:0d:bd:78:44:ff:4b:
         60:a5:63:14:5e:c2:19:32:fc:e2:cb:c8:d8:85:df:f6:5c:b8:
         8a:a2:5a:35:fe:1c:6f:4a:21:71:d5:c9:37:5b:cd:0e:d5:a4:
         90:fd:8d:3d:50:a4:bb:3b:56:f8:ba:98:9f:ee:e7:4f:3a:8b:
         96:e4:df:7a:34:b2:f0:94:8f:66:65:bc:96:27:aa:38:95:c2:
         b5:c4:b5:45:57:93:c5:54:68:c7:0d:a2:d0:5d:4f:6d:2c:f1:
         1b:cd:93:2c:ae:1f:23:e1:fb:cc:de:49:d8:5c:03:8d:fd:99:
         b1:17:e1:51:eb:00:0a:70:e1:ed:24:f3:75:4e:6a:62:51:c0:
         8d:5a:c1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:27:18 2025 by rpki-client