Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2be4e1b2-ea0d-30f3-bf2c-8550e97f759e.roa
File:                     2be4e1b2-ea0d-30f3-bf2c-8550e97f759e.roa (raw, json)
Hash identifier:          Y2xOoFMzi6B1YFIgpRy4qzOFqdQjF5OoHnIpyXuUJzw=
Subject key identifier:   C9:D7:81:F4:D6:59:DD:C1:13:E8:34:57:BB:90:59:CA:2A:7F:D8:C3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F2120A9DFFBA5CD4D5BB80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2be4e1b2-ea0d-30f3-bf2c-8550e97f759e.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        72.221.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:12:0a:9d:ff:ba:5c:d4:d5:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=f234b96d-8f74-4801-8498-e7bb9e69f5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8e:35:fe:65:0d:f7:b6:fd:97:14:96:73:d2:
                    54:c2:cf:ec:68:d9:60:4e:df:ae:b9:1b:48:e6:f4:
                    16:53:35:1d:54:88:4b:2b:5d:96:59:7b:91:6c:d7:
                    4e:de:5b:1d:a0:f9:87:04:27:52:5b:75:14:63:93:
                    e2:86:b9:ce:52:3d:9a:e4:06:93:12:bc:0c:55:55:
                    8c:5c:2f:4a:1c:e8:c5:b5:62:fb:40:06:e6:a4:ba:
                    3d:f2:76:94:c3:d1:3a:61:56:e4:8b:38:0e:ac:3d:
                    5a:05:d4:ca:7c:84:71:df:69:3d:2f:89:85:9f:62:
                    dc:65:ff:10:b2:04:e1:18:8f:60:63:3a:21:30:fb:
                    86:d8:e8:50:5f:c0:51:60:ef:e2:74:51:e6:e6:d6:
                    4a:21:a3:35:7e:54:66:b4:73:58:99:ce:67:ec:39:
                    fb:a9:95:11:12:ac:6c:c3:77:e0:90:39:35:72:4a:
                    51:e1:b4:ca:45:22:44:9d:02:7e:fc:af:4b:0c:6c:
                    aa:e3:16:04:6b:e2:72:0d:e4:09:94:95:81:e1:8e:
                    91:ae:19:0f:03:ae:f7:fc:ad:9a:3f:ed:77:bd:ca:
                    f1:b2:fb:6f:60:cb:97:65:fa:ce:30:96:e6:ef:7d:
                    83:3e:88:06:0a:56:00:ab:be:33:60:27:f7:10:df:
                    b2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D7:81:F4:D6:59:DD:C1:13:E8:34:57:BB:90:59:CA:2A:7F:D8:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2be4e1b2-ea0d-30f3-bf2c-8550e97f759e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.221.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:72:0b:0c:a6:ad:51:0e:61:f7:68:1b:59:b0:f0:63:25:67:
         e4:d4:d3:42:85:6c:62:f5:43:c3:7b:39:aa:86:c0:7f:73:9a:
         4e:a7:de:6e:e9:19:f7:3b:90:7f:d4:4d:6b:8e:f4:fd:6f:35:
         2c:85:dc:87:dd:34:ae:41:df:a6:ff:ef:2d:98:de:8d:5d:5a:
         b5:fb:7e:70:15:77:56:6d:4c:95:b1:6b:d9:6f:f6:6b:78:da:
         03:88:cc:54:de:b9:8a:5d:36:3a:83:41:d3:ae:51:b3:14:15:
         69:b2:68:81:5c:22:44:66:52:df:09:89:7d:6b:75:d1:bf:61:
         d5:78:6d:96:12:41:3c:6d:e6:2e:0d:c5:2a:76:9b:5d:c2:4e:
         01:75:3c:fd:53:e0:4d:8e:71:d6:6a:c3:03:ac:38:62:6d:62:
         7b:74:ef:ad:2f:87:95:0a:91:aa:79:14:ff:cb:22:95:db:ac:
         ff:5b:b4:67:12:e1:49:54:ab:84:b5:99:b2:66:b8:b2:58:7c:
         4a:9e:26:2a:ea:ba:dd:e7:43:63:b3:05:6b:f6:e7:09:08:87:
         d0:6f:d3:98:05:53:a2:21:15:af:9d:87:ff:88:9a:10:8e:6b:
         1f:b8:f2:f3:7d:b3:9d:f0:f4:1a:5a:e3:ab:6f:53:c5:9f:b6:
         1c:2c:5f:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28hIKnf+6XNTVu4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk
ZjIzNGI5NmQtOGY3NC00ODAxLTg0OTgtZTdiYjllNjlmNWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho41/mUN97b9lxSWc9JUws/saNlgTt+uuRtI
5vQWUzUdVIhLK12WWXuRbNdO3lsdoPmHBCdSW3UUY5PihrnOUj2a5AaTErwMVVWM
XC9KHOjFtWL7QAbmpLo98naUw9E6YVbkizgOrD1aBdTKfIRx32k9L4mFn2LcZf8Q
sgThGI9gYzohMPuG2OhQX8BRYO/idFHm5tZKIaM1flRmtHNYmc5n7Dn7qZUREqxs
w3fgkDk1ckpR4bTKRSJEnQJ+/K9LDGyq4xYEa+JyDeQJlJWB4Y6RrhkPA673/K2a
P+13vcrxsvtvYMuXZfrOMJbm732DPogGClYAq74zYCf3EN+ypwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMnXgfTWWd3BE+g0V7uQWcoqf9jDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmJlNGUxYjItZWEwZC0z
MGYzLWJmMmMtODU1MGU5N2Y3NTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN3CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5yCwymrVEOYfdoG1mw8GMlZ+TU00KFbGL1Q8N7OaqGwH9zmk6n3m7p
Gfc7kH/UTWuO9P1vNSyF3IfdNK5B36b/7y2Y3o1dWrX7fnAVd1ZtTJWxa9lv9mt4
2gOIzFTeuYpdNjqDQdOuUbMUFWmyaIFcIkRmUt8JiX1rddG/YdV4bZYSQTxt5i4N
xSp2m13CTgF1PP1T4E2OcdZqwwOsOGJtYnt0760vh5UKkap5FP/LIpXbrP9btGcS
4UlUq4S1mbJmuLJYfEqeJirqut3nQ2OzBWv25wkIh9Bv05gFU6IhFa+dh/+ImhCO
ax+48vN9s53w9Bpa46tvU8WfthwsXw8=
-----END CERTIFICATE-----
Generated at Thu Oct 16 01:33:27 2025 by rpki-client