Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/19844c1d-d249-3245-9802-7a623538bd0f.roa
File:                     19844c1d-d249-3245-9802-7a623538bd0f.roa (raw, json)
Hash identifier:          clKjEPmkVzVku+FXOLMw2Xq76OoMXHLXt1EmvGH2CP0=
Subject key identifier:   8D:49:5A:F0:10:CA:06:7A:31:67:1B:BB:77:2B:59:79:5F:86:41:6A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584AFC1C1D76E50B0B65ED6CDE80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/19844c1d-d249-3245-9802-7a623538bd0f.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        72.192.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:1d:76:e5:0b:0b:65:ed:6c:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=1cef0ce0-6ebe-4271-82bf-8a64add85dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:02:a7:8e:7c:66:e5:fc:9d:78:59:47:81:6f:
                    77:ef:a7:f9:f6:d6:03:b7:a6:09:da:c4:b2:7a:02:
                    cf:be:60:1f:e0:77:2b:24:8d:3a:24:cc:6e:73:17:
                    94:16:a8:39:5c:b4:6f:7a:4e:bf:2f:a1:a6:4a:43:
                    db:92:d6:54:e4:35:78:98:20:3e:f4:07:b1:8c:10:
                    60:f7:47:0b:b4:9c:32:be:0e:0f:14:47:00:66:28:
                    ac:07:3f:b3:4b:5f:d7:ea:20:ab:3d:5d:98:da:a5:
                    52:fa:81:cf:8e:09:24:e3:ab:98:9d:e8:46:0b:f1:
                    2b:04:98:fd:83:3d:7e:fe:f9:5a:e2:9e:bb:23:7a:
                    fa:80:18:6e:b0:18:93:77:08:78:bd:cd:56:5a:ac:
                    41:01:a7:1d:eb:fe:a9:4f:c6:29:d7:1e:ba:62:75:
                    fa:7a:7f:28:22:ac:64:be:b0:74:0c:0a:01:3c:d7:
                    63:59:e2:c6:cd:45:69:92:ff:f2:eb:59:90:59:73:
                    de:32:4b:ca:2b:6e:51:7b:3d:5e:b5:5a:4e:90:15:
                    f3:ac:73:d0:f9:26:57:d2:eb:d2:5d:3e:06:a7:a2:
                    6d:48:b2:09:e6:5a:98:56:a8:d9:d2:79:5f:c1:3b:
                    2e:bc:95:27:09:bd:57:3b:96:85:96:e2:26:cc:1e:
                    0b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:49:5A:F0:10:CA:06:7A:31:67:1B:BB:77:2B:59:79:5F:86:41:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/19844c1d-d249-3245-9802-7a623538bd0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.192.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:cb:23:58:d5:9e:7c:7f:5d:a5:eb:10:23:35:13:15:e5:67:
         be:31:d5:a2:a9:fa:d3:e5:83:fb:6a:7d:f3:b4:07:8f:e6:fd:
         01:16:ff:6b:68:3f:ac:00:93:51:a3:83:15:46:af:19:db:76:
         39:81:a3:0f:18:58:ee:a0:29:db:9d:49:fa:7c:88:d3:00:29:
         48:1f:90:7b:0f:a7:9d:0a:9a:4f:6f:e8:cf:0d:b5:b7:e2:83:
         67:71:a3:0f:de:08:eb:e9:80:86:32:4f:17:08:4a:3e:51:e8:
         20:cb:62:0d:c9:6e:38:6d:b5:34:7e:fd:c5:41:dd:da:60:88:
         1c:ac:a6:05:ea:88:3d:c9:67:87:2e:71:e4:5b:13:bd:b1:c8:
         69:37:27:83:81:86:51:d5:78:c3:03:9b:f3:77:cb:97:9c:86:
         4d:ef:e5:38:12:fe:2c:16:07:80:5c:15:0d:8f:1d:0b:aa:86:
         48:dd:60:fe:0c:0a:d3:30:02:0f:5f:ff:53:06:05:e1:d9:cb:
         0b:83:09:ef:89:2f:11:2a:e6:78:71:dd:51:8c:cd:d0:6e:70:
         fa:5e:b0:84:61:aa:24:78:d9:9a:39:a0:0c:99:61:f4:ac:92:
         96:ad:a5:dc:df:13:d1:67:56:97:b4:76:33:29:1c:17:f4:d1:
         c4:37:38:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:38:56 2025 by rpki-client