Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66ed7191-6650-3e90-99be-c96df97595f3.roa
File:                     66ed7191-6650-3e90-99be-c96df97595f3.roa (raw, json)
Hash identifier:          NqjnY6VMo49JS4LGcP0fJ1SjqVEvcfaRwrSTrFVZqPI=
Subject key identifier:   13:E3:C0:E3:15:41:CB:6E:52:AF:B3:B1:53:29:F7:9A:CF:79:22:C1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01A6EE9DD537A0AEFCA138
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66ed7191-6650-3e90-99be-c96df97595f3.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        72.206.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:a6:ee:9d:d5:37:a0:ae:fc:a1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=3ce645df-5adb-4a09-969e-436f1f35d217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ee:88:6b:1c:67:12:93:e2:74:c3:09:ce:47:
                    40:45:71:48:bd:be:9d:30:7c:43:4d:d4:31:7f:d0:
                    eb:fa:61:60:20:d3:ab:6f:9e:72:e4:bc:6e:57:0c:
                    29:9e:72:87:22:a8:e0:a8:46:f5:20:d7:36:af:3f:
                    4e:d1:88:5b:f7:5b:e4:3b:57:2b:2c:f2:d4:a1:fa:
                    a4:2d:97:af:cc:bc:ac:df:2f:f6:1f:33:16:53:99:
                    76:25:3e:c1:3e:c3:4d:95:82:32:dc:a2:75:d7:c5:
                    72:a2:e8:5f:fc:31:b2:22:87:8f:a8:0c:a1:c9:d7:
                    e0:e8:fd:5f:81:17:fe:3f:4c:44:d1:80:26:63:a7:
                    97:4c:da:ea:9f:f9:b1:90:a1:d7:e3:bf:68:7b:3b:
                    aa:4e:8d:6d:fc:df:ae:a5:40:42:57:47:3e:4b:72:
                    c6:c5:26:65:a7:7d:c6:17:5f:37:ec:79:31:7a:ce:
                    b0:01:d0:61:c7:45:85:e6:ce:30:01:03:12:f8:75:
                    4d:0e:da:ab:e7:b7:11:e5:25:3a:41:3d:a0:35:36:
                    8d:1c:5d:02:8a:19:6d:8c:7e:be:f2:77:8e:da:43:
                    6f:40:38:4f:59:2d:1d:90:f6:56:66:3f:32:ef:99:
                    5d:0f:e1:db:91:b6:bd:ef:e3:c7:0b:9b:90:08:53:
                    db:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E3:C0:E3:15:41:CB:6E:52:AF:B3:B1:53:29:F7:9A:CF:79:22:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66ed7191-6650-3e90-99be-c96df97595f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.206.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:0c:7f:57:b0:1f:f3:06:28:97:aa:55:d7:e1:9e:86:e9:4d:
         59:e2:c9:eb:d2:48:bb:8d:be:30:d5:1a:b0:25:a9:54:a3:8f:
         74:d0:c5:2b:34:8d:d4:77:c7:42:c5:e1:91:97:d2:a9:3e:17:
         ae:84:79:b6:e0:18:ae:7d:32:5a:db:07:d3:c0:f7:ae:14:00:
         98:7a:a1:78:6a:4a:d9:91:dc:a8:5e:0b:14:97:86:d9:52:57:
         b3:1e:d4:6c:d0:a1:2c:ca:de:ce:1f:1b:8f:3c:8b:9e:c9:85:
         ed:a9:23:2c:d2:93:8e:d1:2a:bf:3b:db:76:96:e9:d9:38:57:
         09:fe:9a:d6:37:ff:e7:4a:97:cb:e5:b3:c1:96:4e:cd:0c:d0:
         d4:d4:30:26:63:e0:17:42:9b:8c:c0:65:49:a6:e9:46:7b:86:
         a0:d5:b2:23:f9:b1:e0:d6:f5:01:87:10:7b:d9:62:9b:be:28:
         a3:11:b3:14:df:19:be:a4:8b:ee:8f:d0:36:74:b2:15:ed:fd:
         be:fa:ee:91:e4:53:7c:41:43:66:1b:45:37:af:64:e6:ff:be:
         9a:ca:6a:1a:65:d0:77:97:71:5c:7f:8b:07:fe:70:31:fe:1d:
         49:8d:d5:b4:e5:d1:59:13:73:ba:1e:4f:a7:e5:b0:7d:08:da:
         e5:9c:3a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 01:58:18 2025 by rpki-client