Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d2148c4-37d2-3452-bc1a-b2eb54a830dd.roa
File:                     4d2148c4-37d2-3452-bc1a-b2eb54a830dd.roa (raw, json)
Hash identifier:          ZJJ2Qgfcn9ojWytswsFZRtEj+VJUhOH48H7tNAFuZB8=
Subject key identifier:   76:AF:D1:D4:9F:A6:6C:C8:0B:A6:CF:12:91:44:C8:1D:3E:81:74:FE
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B206727055F2E97595DE83DC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d2148c4-37d2-3452-bc1a-b2eb54a830dd.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        72.207.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:27:05:5f:2e:97:59:5d:e8:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=0a37e83a-20d2-431f-8dbe-0eb426e61336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:46:48:6e:7b:2b:cf:5a:d6:db:77:ba:dd:43:
                    9a:eb:24:df:e7:4a:f2:e2:9a:a7:76:73:5d:61:29:
                    85:5c:4a:5c:36:be:20:ac:77:d9:1e:10:8f:75:b6:
                    d2:31:87:94:63:89:ec:58:ee:ae:64:22:6d:af:d3:
                    19:34:9d:d9:33:f9:d7:8c:f8:97:39:c1:48:e1:ca:
                    dd:fb:43:61:e3:c5:81:60:ce:14:32:24:a2:02:82:
                    b3:a2:9c:64:f5:bb:0f:e4:ea:ea:dc:ac:72:f4:c7:
                    74:bb:51:8b:44:e5:84:25:e2:e3:e3:a9:53:57:0b:
                    2e:8e:24:bd:e3:f4:96:f4:ce:64:4f:0f:b2:5c:b4:
                    09:0f:97:93:0b:1b:44:32:a6:95:90:0b:c4:f0:15:
                    fc:35:37:97:11:c9:ff:cd:8a:3f:59:37:4d:fd:09:
                    f8:44:1a:96:3b:e7:19:56:e2:dc:19:1c:e9:8c:6d:
                    c9:d3:cc:dd:31:c6:1b:fb:cc:82:5b:19:1b:9c:3f:
                    c9:7a:8c:79:77:da:ca:ba:4e:7c:42:5e:49:02:7b:
                    40:d2:48:79:8d:c9:86:fb:61:f6:da:b1:bc:e4:62:
                    ad:23:2c:eb:5a:96:8d:27:a4:ff:d2:64:ae:e6:8d:
                    d1:ce:f3:87:8e:c4:56:24:b4:8f:7d:df:2b:92:a8:
                    ba:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AF:D1:D4:9F:A6:6C:C8:0B:A6:CF:12:91:44:C8:1D:3E:81:74:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d2148c4-37d2-3452-bc1a-b2eb54a830dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.207.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d1:15:ba:54:b0:8f:19:c5:da:e2:43:59:75:34:a1:c4:89:
         ad:cf:b6:3b:11:21:1c:1f:e5:a2:0d:9b:bf:0d:cf:29:d8:cb:
         d7:1f:31:e6:6d:62:49:28:c0:2f:c8:f6:c3:d6:85:3c:ac:11:
         66:b2:4f:86:1f:49:84:cc:72:79:2d:5a:38:13:a0:da:36:28:
         aa:9b:98:6e:d2:38:c4:12:07:e8:0a:45:c9:84:48:e1:4f:1d:
         0f:f5:65:37:6f:86:b2:b4:fa:28:0d:02:0d:e3:19:c6:7c:7a:
         a0:2b:37:eb:b2:d6:e5:3e:b0:87:65:0e:99:55:95:88:65:53:
         9b:14:60:44:19:ad:62:d0:c7:e4:58:2b:77:de:e1:95:ac:d5:
         b4:1b:56:03:67:cf:92:8e:7f:c5:40:61:a9:77:19:35:f2:2e:
         ce:48:cc:01:7f:d6:b1:c4:53:96:82:9a:f0:2d:c4:8c:44:01:
         cc:89:ae:74:2a:56:b6:f4:a4:db:1e:2e:35:b7:9a:fd:78:5f:
         69:7c:e1:28:df:c4:5e:30:ac:31:3b:0e:7f:ed:d9:a9:a7:d7:
         57:2b:29:a2:55:53:9f:20:c5:0f:d4:43:17:2d:e8:27:35:41:
         65:75:1f:78:e5:f1:63:83:b1:2e:28:5d:6c:94:74:29:d1:eb:
         4a:0d:3d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 01:47:02 2025 by rpki-client