Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e2b4017-53e5-31d7-9f6b-8804ffd7e098.roa
File:                     2e2b4017-53e5-31d7-9f6b-8804ffd7e098.roa (raw, json)
Hash identifier:          PAZ8klhCjbhUJKSnRp5Yzq4u9V8ociliNWJsa+YfnUg=
Subject key identifier:   47:C6:30:57:EA:E1:EB:84:AE:D8:9E:D3:28:AD:BC:8D:C0:4B:31:E9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F019BA5CD4DF286985EDF80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e2b4017-53e5-31d7-9f6b-8804ffd7e098.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        72.200.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:9b:a5:cd:4d:f2:86:98:5e:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=8e41678f-5057-4262-b781-023c68d6f9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:2c:b8:9d:70:ad:cf:cb:75:06:66:a3:ca:
                    23:21:62:73:18:cc:17:25:90:72:71:39:d2:a9:f8:
                    b2:3e:13:a5:db:75:a2:03:3a:df:9b:04:e1:b5:92:
                    35:94:c5:25:10:b7:cf:31:3a:30:d2:93:3d:e8:70:
                    3b:f9:1e:5c:83:e9:cb:49:45:09:17:80:e1:8e:d4:
                    31:e3:80:fe:be:a2:ad:3d:d5:77:b9:a0:12:33:45:
                    91:c9:60:3b:34:dd:d1:1c:a5:80:40:5d:7b:0d:13:
                    af:5c:5e:27:6f:25:65:25:25:88:86:64:3e:ed:5e:
                    c7:56:09:f2:40:c2:70:26:2a:ac:4d:b1:20:c5:76:
                    6d:fb:ab:ba:13:28:37:1b:ff:a0:bb:0c:a7:7a:7d:
                    bd:bc:93:0b:86:75:b1:25:c6:9a:f0:5b:fc:00:f2:
                    e9:6a:5b:13:64:5d:4e:8a:29:23:d6:e5:3f:77:2a:
                    95:48:38:4d:30:5d:54:0d:82:73:c9:c3:44:e9:af:
                    0f:73:b1:58:08:ea:4a:fe:29:2d:04:a5:f6:44:e6:
                    4a:38:b9:97:c3:a8:88:8c:d0:88:68:48:5c:86:9b:
                    ea:0d:7d:cc:5a:8c:be:0b:cf:ad:b4:6f:d8:ef:6a:
                    2c:a3:22:ec:c6:d7:01:c4:22:e3:aa:e6:84:9c:16:
                    f5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C6:30:57:EA:E1:EB:84:AE:D8:9E:D3:28:AD:BC:8D:C0:4B:31:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e2b4017-53e5-31d7-9f6b-8804ffd7e098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.200.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d7:18:ba:a5:84:8a:19:50:bd:10:ce:94:b2:30:a9:3c:c3:
         b7:01:df:00:61:bd:a6:7c:73:b0:a4:cf:88:8a:ac:98:b7:de:
         5a:7a:06:c8:00:c4:9c:18:19:d1:0a:99:a3:03:05:28:86:00:
         b6:70:fe:3d:dd:28:20:7e:0c:ac:3a:b4:af:bf:76:ae:0e:4a:
         7e:37:da:4a:62:6e:5c:1c:e6:c7:76:16:36:42:48:13:b4:b6:
         4b:40:92:e5:8a:7d:a7:ed:e4:15:aa:6c:66:60:62:0a:32:90:
         82:5a:9d:1a:74:2d:2c:ad:61:b8:55:e0:4e:fa:67:ea:63:18:
         0f:aa:ad:30:e6:cb:c6:82:bf:fc:34:23:6a:55:aa:ec:62:18:
         89:1e:ca:8e:dd:68:3f:09:1b:4d:21:61:89:66:0a:12:d7:11:
         04:09:09:91:91:2d:17:31:23:0d:1c:bf:49:b8:f9:af:71:2f:
         37:ca:3d:9c:b7:09:56:2c:5e:08:10:83:10:6c:e8:03:eb:f7:
         a7:72:7f:d0:97:aa:da:8c:ee:fa:7b:75:1b:24:26:89:1a:ef:
         64:d6:81:d2:d5:51:d5:da:03:57:b5:1f:75:dd:41:04:f5:54:
         bf:41:38:49:07:d8:89:15:08:ab:40:c2:dc:a8:72:36:86:35:
         51:a6:ec:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAZulzU3yhphe34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
OGU0MTY3OGYtNTA1Ny00MjYyLWI3ODEtMDIzYzY4ZDZmOWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxssuJ1wrc/LdQZmo8ojIWJzGMwXJZBycTnS
qfiyPhOl23WiAzrfmwThtZI1lMUlELfPMTow0pM96HA7+R5cg+nLSUUJF4DhjtQx
44D+vqKtPdV3uaASM0WRyWA7NN3RHKWAQF17DROvXF4nbyVlJSWIhmQ+7V7HVgny
QMJwJiqsTbEgxXZt+6u6Eyg3G/+guwynen29vJMLhnWxJcaa8Fv8APLpalsTZF1O
iikj1uU/dyqVSDhNMF1UDYJzycNE6a8Pc7FYCOpK/iktBKX2ROZKOLmXw6iIjNCI
aEhchpvqDX3MWoy+C8+ttG/Y72osoyLsxtcBxCLjquaEnBb1aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEfGMFfq4euErtie0yitvI3ASzHpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmUyYjQwMTctNTNlNS0z
MWQ3LTlmNmItODgwNGZmZDdlMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMhaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHXGLqlhIoZUL0QzpSyMKk8w7cB3wBhvaZ8c7Ckz4iKrJi33lp6BsgA
xJwYGdEKmaMDBSiGALZw/j3dKCB+DKw6tK+/dq4OSn432kpiblwc5sd2FjZCSBO0
tktAkuWKfaft5BWqbGZgYgoykIJanRp0LSytYbhV4E76Z+pjGA+qrTDmy8aCv/w0
I2pVquxiGIkeyo7daD8JG00hYYlmChLXEQQJCZGRLRcxIw0cv0m4+a9xLzfKPZy3
CVYsXggQgxBs6APr96dyf9CXqtqM7vp7dRskJoka72TWgdLVUdXaA1e1H3XdQQT1
VL9BOEkH2IkVCKtAwtyocjaGNVGm7BY=
-----END CERTIFICATE-----
Generated at Wed Oct 15 21:27:28 2025 by rpki-client