Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20053fb5-6869-3ef3-8a0d-53e14d82677f.roa
File:                     20053fb5-6869-3ef3-8a0d-53e14d82677f.roa (raw, json)
Hash identifier:          em1oOjyaQ4tL8+aFJTQgvBVFipFk04FFZc+y4uU3NAA=
Subject key identifier:   03:97:38:28:11:FF:E6:70:44:A3:9C:C9:D7:A4:D6:5B:CE:EC:92:CC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01A19432A7372EDAE190E0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20053fb5-6869-3ef3-8a0d-53e14d82677f.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        72.201.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:a1:94:32:a7:37:2e:da:e1:90:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=9b938962-81ef-4303-b609-1127d2d4ebb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:4c:96:5c:a5:45:73:fa:26:ce:d8:b3:c8:
                    ad:90:97:14:4e:d1:4e:20:64:ff:0f:42:55:65:3f:
                    70:fb:b7:1c:ea:af:28:8e:25:5c:dc:bb:63:d1:70:
                    d3:a6:ce:3d:37:f8:13:8d:d6:b8:b1:68:97:24:a2:
                    bb:24:4a:ec:91:14:ad:ec:c1:ef:62:ef:2a:a0:0b:
                    3d:a1:52:02:1c:64:59:f5:07:f9:09:d7:9f:9e:eb:
                    c5:48:23:02:0e:40:55:5f:7b:63:79:15:4d:6b:c6:
                    fd:a1:27:56:f4:92:aa:72:ce:32:d4:3b:c7:9f:cf:
                    b2:59:36:3d:f8:d3:46:d1:c2:88:f3:66:4f:02:cc:
                    6a:3e:54:95:af:4a:09:36:42:b0:a3:51:d1:51:68:
                    61:c9:36:9c:c1:26:50:59:52:83:b9:71:9b:99:48:
                    6f:5c:9b:ca:ba:97:4d:cd:3a:a2:67:ce:04:34:46:
                    f0:84:34:7b:85:4d:fb:b7:69:bc:1f:4c:c6:28:5d:
                    b4:46:aa:e2:12:7f:7f:16:d6:bc:57:e8:41:63:2f:
                    1c:21:85:0b:fb:8c:5f:5b:e4:f9:1a:3e:e1:c3:c5:
                    0c:b3:36:12:57:4b:3a:cf:a5:ff:49:ee:f2:ae:4a:
                    9c:4c:c1:7d:b3:8d:0f:5d:2c:c1:6a:0c:fe:ea:17:
                    f9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:97:38:28:11:FF:E6:70:44:A3:9C:C9:D7:A4:D6:5B:CE:EC:92:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20053fb5-6869-3ef3-8a0d-53e14d82677f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.201.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:81:6a:7d:25:9b:5d:90:ee:de:09:2f:8b:5f:cf:70:58:3c:
         83:93:4f:73:62:a1:24:1e:64:34:ec:1e:cd:36:07:a4:49:e7:
         0f:99:1b:ad:c4:3e:e6:29:4d:de:f3:75:e7:7f:ad:f4:83:4b:
         9e:d3:03:69:6e:c1:89:9a:bc:eb:1d:4b:c2:8b:a2:73:6e:72:
         eb:21:36:d9:44:77:1a:c8:09:8a:45:ce:e7:67:0c:85:32:47:
         ae:9a:18:3e:c4:95:42:71:ee:37:83:02:e1:6e:a3:7e:16:d0:
         40:21:15:9b:88:ed:59:bd:0f:b4:4a:77:cf:25:e4:d0:dd:a0:
         03:db:68:4e:9f:ce:94:df:f2:57:4c:21:bb:97:44:45:24:5f:
         9a:2f:bf:9f:68:10:59:20:77:fd:77:dc:cd:f7:bb:8d:4b:3d:
         97:be:ac:d8:3e:27:20:cb:d8:cc:8a:9c:a5:79:74:e8:3c:c3:
         7e:6c:09:18:88:f6:ce:59:52:0d:80:c0:c7:fe:11:e3:22:4c:
         d2:46:21:bb:9f:f4:2c:c4:3c:21:54:a3:3b:46:ea:78:66:5a:
         87:af:b6:9b:88:45:3e:6b:86:c9:48:fc:10:1e:9d:79:e8:b3:
         46:17:13:60:ee:29:8d:35:be:1b:94:85:f0:da:c0:b1:a1:24:
         b9:f0:06:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:29:54 2025 by rpki-client