Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0709167e-a6cb-3d7c-a271-6ed1aabec89a.roa
File:                     0709167e-a6cb-3d7c-a271-6ed1aabec89a.roa (raw, json)
Hash identifier:          VLtd3kGJyb4JF/kYrfCxWQkjcKsXPtWrK3rw4JbbpxE=
Subject key identifier:   6E:44:2B:D5:0E:82:2B:EA:77:FB:57:2F:1F:53:61:62:2C:5C:91:6E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F2128CB341B59091803BC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0709167e-a6cb-3d7c-a271-6ed1aabec89a.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        72.221.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:12:8c:b3:41:b5:90:91:80:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=02d0920e-8888-4fcd-8ad1-296e286cd50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:33:eb:b0:02:0b:20:a9:81:ad:7d:73:06:5e:
                    4e:d8:e3:c0:a5:b1:09:b1:16:cf:32:96:7b:0b:4a:
                    b3:6b:bd:94:a6:24:02:c0:9e:5d:70:fe:d9:16:28:
                    16:13:54:5d:3a:75:87:d8:98:af:52:d7:69:79:6f:
                    d0:75:87:62:af:44:f3:57:a5:94:e2:56:42:64:86:
                    90:84:10:25:43:0b:9b:ff:c4:d4:77:cc:bc:f3:98:
                    e5:d0:4f:84:d2:e6:fd:b3:b2:b6:12:87:2a:45:cd:
                    90:2d:47:5d:fb:66:a4:8e:72:f6:87:32:03:dd:7f:
                    26:56:b0:7b:83:29:b9:64:90:89:57:88:03:a0:5f:
                    dd:3a:5a:4b:81:82:3c:4a:6b:ca:a8:8b:18:98:eb:
                    98:f4:5e:c3:2a:fc:c4:09:3d:63:99:15:aa:0b:e9:
                    10:65:e3:e9:73:a6:e4:c0:1f:3e:49:b9:f5:e5:cb:
                    d6:f2:47:b2:4f:7d:45:d5:c1:4c:03:a8:0b:a1:b1:
                    fb:83:09:04:af:c5:bf:ad:26:d9:97:17:bd:20:d1:
                    ac:45:bb:1f:2f:dd:3b:ff:83:0d:05:09:7f:6a:cd:
                    c8:c2:ec:95:66:9d:1f:53:97:7f:c8:4e:78:48:82:
                    7e:00:ee:bf:de:0c:99:c5:25:57:9b:7c:97:40:26:
                    d9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:44:2B:D5:0E:82:2B:EA:77:FB:57:2F:1F:53:61:62:2C:5C:91:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0709167e-a6cb-3d7c-a271-6ed1aabec89a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.221.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c2:c4:f2:26:0d:41:cc:81:03:8d:51:e8:ad:c6:b2:3f:4a:
         9d:2c:5f:ba:ce:f0:0b:f5:99:88:fe:bc:a0:ad:f2:eb:a6:d9:
         6f:cf:22:8f:3b:a3:4d:e5:39:18:96:99:e3:4e:11:39:7e:b8:
         0d:c5:c3:c4:45:22:e5:aa:eb:cc:19:2f:a8:5b:94:ab:c9:a5:
         77:3b:68:f5:98:d1:c1:4c:63:37:16:d0:f4:25:9f:c2:37:e5:
         f3:32:9c:b4:da:4f:93:8c:24:e5:31:ef:ea:de:2d:6d:2b:da:
         a4:4c:f0:cc:5d:c5:c8:e3:57:5a:6c:8d:2d:90:b1:0e:a5:0b:
         90:f3:ed:34:b5:47:e8:bd:4d:02:54:da:3f:d8:5a:fe:bf:5e:
         40:c1:1d:c4:b9:aa:ed:e0:7b:7d:e2:9b:37:79:d3:b2:72:28:
         e5:98:b8:a5:f0:65:d7:3b:16:b5:c6:fb:af:12:07:fe:e8:89:
         d4:ab:d2:e4:c7:cb:10:12:bf:61:e0:87:4a:91:6a:40:c3:db:
         18:30:a7:c0:2c:e0:f6:6d:69:c0:70:a5:e9:5a:2d:25:24:95:
         1c:9d:f9:d6:29:30:95:22:5a:dc:d2:76:4b:31:fe:eb:35:37:
         98:6e:d8:ca:96:f9:6e:0c:6d:38:7b:91:69:d2:d6:7e:93:a3:
         98:fa:4f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:25:54 2025 by rpki-client