Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e9f4a9a-26d8-31e1-8986-ec5edae2712a.roa
File:                     0e9f4a9a-26d8-31e1-8986-ec5edae2712a.roa (raw, json)
Hash identifier:          kYJgrvIi/HSL2C2a0svdZ7MIVK9TYDZWT0Jxr5Fk1CE=
Subject key identifier:   2E:5B:86:83:8D:E6:72:E7:19:AC:DD:57:44:58:D0:7F:E1:BE:7D:31
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B2067382E0016DBDA17D827EC
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e9f4a9a-26d8-31e1-8986-ec5edae2712a.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        174.72.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:38:2e:00:16:db:da:17:d8:27:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=96fa5476-634a-4c6c-ba5b-d6fa401dc0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e6:9d:be:ef:ad:34:62:f1:a1:0f:a5:3e:68:
                    7b:e1:24:a5:72:b3:94:a3:c6:4b:37:c6:44:bd:d9:
                    ca:a8:3c:9d:90:07:92:bd:a9:b3:80:fa:23:e0:a6:
                    c4:59:71:91:bf:09:89:f0:2d:4d:65:90:7d:25:36:
                    ff:bc:7b:2c:93:93:a6:e6:00:c5:80:c8:49:00:e6:
                    ae:31:06:fd:e6:d5:c6:83:f0:16:ca:4c:61:29:36:
                    01:26:37:74:a5:f2:5c:80:14:9f:c0:1f:0d:c8:10:
                    8e:68:3d:c5:fb:31:2a:fa:a3:25:fa:75:28:05:1f:
                    e3:83:0a:a3:d3:b8:85:f2:1b:53:10:52:c5:95:06:
                    b7:4e:a4:98:4e:31:8f:1b:df:97:94:25:be:15:88:
                    f7:91:22:d1:ef:c0:0b:35:19:59:c8:d3:91:ec:dc:
                    8f:cf:70:b6:a8:3a:d6:a7:57:ee:91:8a:e1:af:e4:
                    1b:dc:ef:54:7d:f7:15:ce:c2:b7:6e:57:e6:d7:d8:
                    f2:cc:99:e2:55:51:62:34:48:76:96:49:62:2e:69:
                    42:30:10:91:b2:60:87:a6:1a:e3:07:c4:3d:b4:cb:
                    ed:94:e1:f8:bb:5f:76:a1:05:9a:c2:38:5c:26:34:
                    d8:d3:73:f4:d6:8b:b3:46:7d:c4:09:2e:23:85:c4:
                    75:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5B:86:83:8D:E6:72:E7:19:AC:DD:57:44:58:D0:7F:E1:BE:7D:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e9f4a9a-26d8-31e1-8986-ec5edae2712a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.72.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f2:11:a7:5d:28:88:d5:6e:d7:57:74:4a:ad:f8:6d:7a:ec:
         c2:61:26:32:18:25:5d:ce:bb:22:3c:b6:b5:96:8c:6c:7f:e1:
         ab:9e:2e:9b:11:96:a8:cb:86:b2:01:13:b6:d3:3f:2d:dd:c2:
         76:11:a9:8e:e0:c4:d6:c7:5b:98:66:a8:12:0a:28:15:48:fd:
         dd:9f:3d:ef:6f:b1:8f:56:d9:e3:10:4d:0a:a2:0e:e6:16:73:
         8d:3b:eb:1a:e2:9c:d1:4c:a4:66:37:af:c3:93:9e:e2:b6:b9:
         c9:77:67:0c:44:7b:40:3e:82:83:e8:03:b1:16:d1:19:a3:9f:
         87:34:45:07:47:29:4f:54:f7:55:77:7e:2a:d5:0b:92:d0:69:
         26:c1:73:ba:53:19:11:03:9d:76:dc:fd:84:0c:46:af:db:8f:
         6e:38:e3:34:a4:8a:78:2a:0f:b9:bb:87:0a:f3:50:24:c3:3d:
         27:b1:18:ee:f5:1d:1c:03:ad:dc:73:d4:a0:40:1f:51:91:a2:
         09:14:ed:87:cb:06:a2:80:43:e9:e7:3c:56:e1:a3:0c:23:80:
         54:3e:22:18:45:c1:30:7a:8e:51:d0:6a:3b:cc:a0:51:e8:2b:
         74:0c:6d:bd:b9:80:9c:cd:8d:8d:99:17:81:ba:dd:37:cc:58:
         04:29:9f:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZzguABbb2hfYJ+wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk
OTZmYTU0NzYtNjM0YS00YzZjLWJhNWItZDZmYTQwMWRjMGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOadvu+tNGLxoQ+lPmh74SSlcrOUo8ZLN8ZE
vdnKqDydkAeSvamzgPoj4KbEWXGRvwmJ8C1NZZB9JTb/vHssk5Om5gDFgMhJAOau
MQb95tXGg/AWykxhKTYBJjd0pfJcgBSfwB8NyBCOaD3F+zEq+qMl+nUoBR/jgwqj
07iF8htTEFLFlQa3TqSYTjGPG9+XlCW+FYj3kSLR78ALNRlZyNOR7NyPz3C2qDrW
p1fukYrhr+Qb3O9UffcVzsK3blfm19jyzJniVVFiNEh2lkliLmlCMBCRsmCHphrj
B8Q9tMvtlOH4u192oQWawjhcJjTY03P01ouzRn3ECS4jhcR1cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC5bhoON5nLnGazdV0RY0H/hvn0xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGU5ZjRhOWEtMjZkOC0z
MWUxLTg5ODYtZWM1ZWRhZTI3MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkjgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLyEaddKIjVbtdXdEqt+G167MJhJjIYJV3OuyI8trWWjGx/4aueLpsR
lqjLhrIBE7bTPy3dwnYRqY7gxNbHW5hmqBIKKBVI/d2fPe9vsY9W2eMQTQqiDuYW
c4076xrinNFMpGY3r8OTnuK2ucl3ZwxEe0A+goPoA7EW0Rmjn4c0RQdHKU9U91V3
firVC5LQaSbBc7pTGREDnXbc/YQMRq/bj2444zSkingqD7m7hwrzUCTDPSexGO71
HRwDrdxz1KBAH1GRogkU7YfLBqKAQ+nnPFbhowwjgFQ+IhhFwTB6jlHQajvMoFHo
K3QMbb25gJzNjY2ZF4G63TfMWAQpn0I=
-----END CERTIFICATE-----
Generated at Wed Oct 15 21:22:29 2025 by rpki-client