Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/26120589-84a0-3446-a6e7-0e307ae163fd.roa
File:                     26120589-84a0-3446-a6e7-0e307ae163fd.roa (raw, json)
Hash identifier:          unWTX2CggZ4YqVzOKQ1wVrC5iz6WOl5Wu6gDXaCU5fY=
Subject key identifier:   49:B2:0C:87:46:5D:24:22:58:D0:2F:C2:FA:29:92:CB:63:D4:B9:85
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F275963582A41658D674C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/26120589-84a0-3446-a6e7-0e307ae163fd.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        72.199.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:75:96:35:82:a4:16:58:d6:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=bec18eb8-78b0-4d7b-9bf7-e0ca40d50ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4a:98:47:af:9a:b1:00:d5:59:76:8c:cd:f3:
                    cd:d0:1b:05:d2:9f:0f:b3:2c:d1:9d:70:48:5c:6c:
                    df:9c:e1:0c:49:5a:21:2a:25:0a:aa:41:5a:d9:9f:
                    3f:1b:5e:03:16:59:29:1c:f0:b6:80:9a:c0:5b:cd:
                    21:53:0b:bc:ed:08:88:d5:c6:a5:b3:4c:f5:d7:25:
                    2b:52:5c:79:81:74:2a:00:3e:73:90:db:f0:07:be:
                    5b:1a:99:a5:01:9e:3a:2f:4f:c6:11:65:be:34:b6:
                    32:ea:46:3e:0b:05:5e:67:d4:26:d2:a0:04:a5:57:
                    4c:e0:c7:40:7b:d7:f7:11:0e:0e:88:d3:86:5d:c5:
                    fa:34:54:12:f5:9b:f8:b3:52:67:ec:6f:82:c8:31:
                    36:64:e6:f1:d2:1a:dc:26:26:6c:07:02:87:b5:3e:
                    6c:c3:c5:2d:fa:20:9c:e9:73:9c:88:7d:c7:b4:5d:
                    58:da:9d:e8:18:3e:a7:65:ba:ba:44:a9:04:49:00:
                    a9:8c:00:11:62:f8:8d:81:72:6f:d9:d9:f6:d1:1c:
                    51:84:a1:32:a4:17:7d:f9:ca:66:be:df:3b:2b:72:
                    14:24:fd:7b:a2:f3:d0:33:4f:96:9b:3e:aa:d9:20:
                    80:ac:c7:0f:40:12:ea:f5:3a:47:c6:00:b5:2f:5a:
                    b7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B2:0C:87:46:5D:24:22:58:D0:2F:C2:FA:29:92:CB:63:D4:B9:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/26120589-84a0-3446-a6e7-0e307ae163fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.199.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:10:46:7f:3a:ba:5a:d5:59:44:46:e2:d5:8b:a0:ce:82:f3:
         4e:f3:10:f4:57:99:3c:05:b7:7b:9d:ab:da:31:cf:b4:ee:05:
         5f:22:df:77:6b:04:cb:8c:16:13:b1:58:67:ee:82:a1:cc:17:
         54:90:b0:1c:bf:4d:51:98:87:f4:09:7f:49:fc:8e:f1:f8:c1:
         a8:51:ae:e2:56:4b:4b:33:8d:f6:f7:c4:c5:a8:41:b2:fb:cf:
         8d:e4:11:df:b1:ef:d9:33:f3:c1:6b:1d:e4:f5:9e:91:45:da:
         a6:21:d8:8d:87:40:69:c1:5f:4b:fb:ff:ee:bb:cd:28:26:f9:
         d8:29:b6:a4:10:71:09:3f:23:30:82:08:5c:5c:a6:cb:31:2e:
         e9:15:f7:66:58:a5:95:ec:87:0d:a4:01:69:27:d0:ac:88:c8:
         5e:74:25:87:3a:70:88:ad:42:ba:2b:d7:ee:33:92:3e:b7:d7:
         3a:62:f0:fb:80:5d:90:5a:50:8b:40:89:67:f5:d2:24:c7:3e:
         e5:fb:34:95:69:e8:3b:48:6e:c7:39:57:41:b7:be:d7:dd:18:
         0c:ae:00:7f:88:51:90:a9:bb:6c:40:d6:47:d6:00:bf:86:78:
         9a:e1:f8:50:27:c7:93:c5:e7:10:64:ff:9c:d1:9c:f0:13:da:
         74:3a:06:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:38:58 2025 by rpki-client