Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fa56006-a71e-3f5c-b60f-d5ef37ee2a06.roa
File:                     0fa56006-a71e-3f5c-b60f-d5ef37ee2a06.roa (raw, json)
Hash identifier:          fZU09hYnj/p2VShj9X1PnuikLVMCJzw/I8hgFTKxzWw=
Subject key identifier:   DE:0E:77:B8:A8:74:AA:34:76:D8:45:DB:7C:12:30:82:85:EC:50:D1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B206737E2A8906E8666306720
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fa56006-a71e-3f5c-b60f-d5ef37ee2a06.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        174.72.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:37:e2:a8:90:6e:86:66:30:67:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=b8ecb5cd-3706-4d94-8034-be574df83fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:62:d3:73:d2:7e:75:cd:92:6d:cb:3d:5f:
                    1f:9a:ee:d9:6c:3a:2f:77:4c:2d:fa:5f:50:3e:57:
                    7d:30:6f:fa:93:cc:8d:da:a8:c7:cc:3c:77:68:72:
                    16:b1:fc:d8:04:b8:31:d1:f7:00:ea:e4:0d:85:31:
                    14:ee:68:af:75:59:c5:f6:ac:31:8a:14:81:30:d3:
                    8c:fa:54:b7:f6:7c:43:37:be:19:62:53:98:60:4e:
                    ac:5f:a1:a3:47:91:bd:d7:2e:85:cf:e5:1a:70:7b:
                    37:0b:70:17:bb:6c:f2:a6:e0:5d:0b:bd:3c:7f:57:
                    62:95:0e:7a:ce:d0:61:3f:7b:16:c0:85:71:75:8f:
                    bf:29:84:99:9f:48:b8:9c:eb:a8:e2:31:9c:f3:f4:
                    94:9d:1d:ae:29:ca:b3:cb:ff:16:e5:34:1d:f5:91:
                    65:32:dc:03:08:4a:7a:8c:1e:91:8a:78:22:fd:1b:
                    76:7c:be:1c:6d:c4:07:e5:60:95:8c:02:c0:21:0f:
                    f7:cc:50:c1:e4:a7:7e:72:1e:11:3b:c4:45:93:75:
                    51:f7:57:0a:e8:59:59:d8:00:fd:a2:df:dc:c4:b6:
                    44:b4:3b:53:38:37:fe:e4:14:31:be:c4:f5:29:d9:
                    42:a4:f8:bc:39:97:b3:03:2e:34:74:01:19:d5:b1:
                    fd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0E:77:B8:A8:74:AA:34:76:D8:45:DB:7C:12:30:82:85:EC:50:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fa56006-a71e-3f5c-b60f-d5ef37ee2a06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.72.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:b6:b2:6a:72:0c:83:11:d7:20:1c:71:80:1b:27:89:e3:4f:
         d4:38:91:12:b4:81:33:54:c5:f8:9b:ec:6c:5c:d4:0a:0c:3b:
         e7:b5:c9:3f:64:fd:8c:c7:10:90:98:ea:ae:56:28:3d:6c:89:
         7b:c6:7d:86:8a:6d:33:56:7d:dd:ed:39:8c:5a:b1:d1:c4:fe:
         cd:9c:dc:87:da:5a:a9:14:5e:49:84:22:5d:87:b0:0b:ca:cc:
         07:f6:eb:4d:2d:75:f4:34:87:e3:f1:1c:4a:8f:0c:9c:70:b5:
         73:7b:41:e9:85:4f:c3:6f:a6:f2:10:5c:fa:f3:80:13:cb:1b:
         3b:60:05:3b:b0:34:d3:08:bd:2f:90:47:77:c7:e2:52:85:99:
         0a:d3:ea:13:a6:cb:a9:57:1f:bf:54:a5:bc:f4:25:29:e0:ce:
         c6:c0:c9:24:51:a5:19:54:76:95:fd:23:0b:40:ea:a1:9c:78:
         2a:66:0d:50:04:43:66:93:eb:e1:2d:11:5f:ff:9c:5c:f9:6e:
         2a:ae:12:41:5b:9d:f4:53:b9:1a:50:c5:fc:21:ff:cb:bf:d6:
         88:d3:db:97:cf:cb:e9:81:c8:d9:96:85:6f:33:4d:1a:a8:94:
         8f:7f:81:9b:ea:25:49:a6:e7:ae:88:1a:cc:26:e5:9e:4b:6b:
         3f:e6:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:19:48 2025 by rpki-client