Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b5b077b-6500-3e73-93f2-c8c33fe5ade5.roa
File:                     5b5b077b-6500-3e73-93f2-c8c33fe5ade5.roa (raw, json)
Hash identifier:          XhzOSRnypBfRY5cual+MCBBQGbd0uzWaBCoUXNE65nQ=
Subject key identifier:   05:A4:48:25:FB:65:97:14:44:09:E0:4A:F5:1C:2E:F9:AF:4D:50:C5
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01A15E8DE8756233A1B080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b5b077b-6500-3e73-93f2-c8c33fe5ade5.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        72.201.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:a1:5e:8d:e8:75:62:33:a1:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=bf8c0b8f-8535-4a77-a03d-2d410430cec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ca:6a:6e:b0:e2:27:6c:15:58:58:c8:82:d8:
                    f2:40:79:7b:db:6e:33:52:c5:12:16:cf:16:b0:22:
                    9a:a7:c6:95:61:cc:dc:bc:46:f4:43:95:9c:ad:3e:
                    58:68:51:26:ac:a6:45:cd:47:d7:03:8f:50:60:41:
                    5e:4e:0b:03:bc:ca:ac:bd:43:51:01:1f:a1:17:04:
                    0c:d8:77:78:d7:97:d5:db:a9:ad:03:46:65:da:1f:
                    38:21:ed:f4:89:73:c2:88:03:47:fe:4f:e8:cc:6c:
                    86:a7:f0:6c:09:0c:28:6c:b6:8a:2d:3c:22:64:51:
                    09:db:1e:51:42:a4:fa:c5:03:bc:a0:6f:c2:ab:82:
                    76:cb:5a:c7:2e:c4:63:ac:43:80:38:38:5d:78:2b:
                    89:53:08:b8:e0:70:e4:09:3a:5f:ad:11:ed:14:a4:
                    66:fc:ac:9b:9d:25:c0:e8:09:94:0f:37:70:75:4d:
                    ba:ad:1f:ef:0f:f7:1b:50:d1:9b:a7:b3:9a:24:5c:
                    6c:e6:21:74:9f:87:a3:a8:5d:e6:50:00:e7:81:21:
                    ff:d0:bf:34:20:f1:97:8f:e1:5c:a4:ac:1b:1b:5a:
                    5c:11:5c:0b:bc:03:88:81:f7:12:16:ac:a6:f4:2a:
                    ae:b5:2f:e3:b7:d0:76:37:b9:5a:5c:e0:a7:6f:50:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A4:48:25:FB:65:97:14:44:09:E0:4A:F5:1C:2E:F9:AF:4D:50:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b5b077b-6500-3e73-93f2-c8c33fe5ade5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.201.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:04:cc:35:bb:4e:93:19:e0:ac:df:51:37:1c:4c:fa:79:32:
         43:6d:d9:90:53:14:a4:a8:e8:73:0d:9b:72:d2:b1:f7:90:23:
         1b:67:8c:07:fd:a8:44:cd:01:e9:d2:71:fd:cd:8a:10:71:b0:
         32:89:83:6a:d4:7e:9a:3c:ec:41:c5:73:35:36:da:6e:42:c9:
         27:73:ec:d2:df:e0:65:39:8a:0d:e8:7e:fd:c4:ee:58:06:07:
         05:de:c3:25:d9:33:e8:05:fe:76:33:8d:a4:86:a7:30:b8:ed:
         66:f1:58:99:ca:f9:7b:82:8b:0d:f1:75:65:a5:db:05:56:ec:
         7a:08:83:48:2c:a5:64:30:4b:e4:41:79:6c:c7:9d:c9:d9:31:
         fa:83:c4:77:ff:f3:63:91:4d:c0:f9:e3:61:87:9b:7d:7d:4b:
         b6:fb:d3:4b:3b:74:c5:9e:7d:1b:66:b4:11:48:16:35:7f:ce:
         00:9a:23:ce:b1:e9:3c:a4:79:cc:36:2c:54:56:b3:01:7b:d0:
         ea:63:92:6b:5e:74:28:eb:0a:08:54:6e:90:1c:f8:01:6b:47:
         b9:34:6b:ce:de:e8:3d:ee:cd:ae:bc:bd:03:42:eb:37:22:fe:
         4f:ba:9e:9b:69:73:09:6e:d5:72:2f:86:dd:12:4b:fc:a7:79:
         f2:dd:eb:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAaFejeh1YjOhsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
YmY4YzBiOGYtODUzNS00YTc3LWEwM2QtMmQ0MTA0MzBjZWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcpqbrDiJ2wVWFjIgtjyQHl7224zUsUSFs8W
sCKap8aVYczcvEb0Q5WcrT5YaFEmrKZFzUfXA49QYEFeTgsDvMqsvUNRAR+hFwQM
2Hd415fV26mtA0Zl2h84Ie30iXPCiANH/k/ozGyGp/BsCQwobLaKLTwiZFEJ2x5R
QqT6xQO8oG/Cq4J2y1rHLsRjrEOAODhdeCuJUwi44HDkCTpfrRHtFKRm/KybnSXA
6AmUDzdwdU26rR/vD/cbUNGbp7OaJFxs5iF0n4ejqF3mUADngSH/0L80IPGXj+Fc
pKwbG1pcEVwLvAOIgfcSFqym9CqutS/jt9B2N7laXOCnb1DbhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAWkSCX7ZZcURAngSvUcLvmvTVDFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWI1YjA3N2ItNjUwMC0z
ZTczLTkzZjItYzhjMzNmZTVhZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMmMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0EzDW7TpMZ4KzfUTccTPp5MkNt2ZBTFKSo6HMNm3LSsfeQIxtnjAf9
qETNAenScf3NihBxsDKJg2rUfpo87EHFczU22m5CySdz7NLf4GU5ig3ofv3E7lgG
BwXewyXZM+gF/nYzjaSGpzC47WbxWJnK+XuCiw3xdWWl2wVW7HoIg0gspWQwS+RB
eWzHncnZMfqDxHf/82ORTcD542GHm319S7b700s7dMWefRtmtBFIFjV/zgCaI86x
6Tykecw2LFRWswF70OpjkmtedCjrCghUbpAc+AFrR7k0a87e6D3uza68vQNC6zci
/k+6nptpcwlu1XIvht0SS/ynefLd6/0=
-----END CERTIFICATE-----
Generated at Wed Oct 15 21:22:47 2025 by rpki-client