Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6cfb2e34-4ed0-36e2-a8e8-ac6994468cf6.roa
File:                     6cfb2e34-4ed0-36e2-a8e8-ac6994468cf6.roa (raw, json)
Hash identifier:          pbOsK7Y3iapdSIK9FD6deMVWiz12vl5UnFp110fxvsY=
Subject key identifier:   6D:46:D7:CE:FE:2C:A3:5A:9C:B0:72:D8:2B:A9:C0:D4:60:C9:3F:F6
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01A50DC9ECD2CA64DDB6C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6cfb2e34-4ed0-36e2-a8e8-ac6994468cf6.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        72.201.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:a5:0d:c9:ec:d2:ca:64:dd:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=def54b0e-1634-4833-806c-5e4cc6b64129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8c:28:06:8c:7d:81:bc:4d:9a:c3:73:f4:8d:
                    0f:69:68:85:0c:31:a8:d0:78:80:32:f5:fe:b5:71:
                    62:71:c0:f3:e5:12:d8:2b:fc:4d:48:aa:64:dd:83:
                    ef:b2:0a:88:b4:47:94:09:f9:62:28:3d:89:39:fe:
                    9f:a1:eb:50:a7:ef:83:ef:e8:21:2d:c3:58:5d:00:
                    42:79:7f:a1:90:b3:9c:20:8e:24:65:b4:69:b6:f7:
                    ed:5b:81:1d:ce:44:14:6d:6a:0a:96:ec:f2:1a:59:
                    c7:43:b8:d0:6b:0f:d6:39:69:b2:c9:1a:ab:74:bd:
                    e1:f8:b3:44:24:e0:0c:e9:0b:0b:d9:4c:39:43:11:
                    ec:75:a9:e0:b0:60:31:a7:20:53:57:b5:99:4d:00:
                    16:0c:c5:75:b1:73:15:63:f6:a0:28:6e:db:7c:7b:
                    5d:aa:f2:d5:84:95:2b:0e:7f:3e:ad:dc:fe:88:fc:
                    38:46:12:04:cd:bb:1d:66:fb:02:88:ce:ea:8b:1a:
                    74:34:d3:68:4a:36:a5:1b:68:37:20:9e:fb:9e:c4:
                    8a:2f:c6:82:47:44:5d:78:42:f2:b6:db:f8:94:a4:
                    d9:b0:e7:0d:da:02:78:c7:42:f3:1e:79:b3:9c:2f:
                    71:32:bf:48:d6:b2:45:b3:2e:04:25:7c:d2:4b:75:
                    cb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:46:D7:CE:FE:2C:A3:5A:9C:B0:72:D8:2B:A9:C0:D4:60:C9:3F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6cfb2e34-4ed0-36e2-a8e8-ac6994468cf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.201.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f5:b1:17:56:e9:66:69:24:9c:39:9a:69:30:2a:57:a6:1a:
         e5:0d:20:01:69:66:3c:fb:40:ed:6f:7b:15:23:64:d7:dc:9c:
         98:82:ce:5d:39:9d:c3:a2:cc:8b:c8:94:72:66:75:fe:f8:a9:
         e9:ed:ae:10:22:72:2e:45:21:bd:e5:48:47:c4:7f:12:29:79:
         46:c8:f8:37:5a:c0:79:e1:fb:4b:a9:c9:7f:93:4a:86:9f:90:
         66:fe:e9:6c:ea:b6:a6:06:b6:b0:67:a6:0d:1a:96:5a:0f:25:
         04:63:e9:31:8c:5b:c1:a6:a4:92:c4:78:47:e1:7a:3a:64:3d:
         7e:0f:c2:8c:f5:e3:1b:bf:c4:46:70:dd:d0:eb:2d:57:27:7d:
         42:7c:3f:9e:96:28:e5:82:ad:71:84:4a:10:e4:1e:24:68:04:
         64:25:1a:a6:76:8c:b3:79:dc:d9:99:00:66:b3:45:1f:41:01:
         de:ed:dc:98:de:ac:d0:7a:0d:2b:41:d7:fc:d3:2f:31:41:7a:
         64:73:4f:b8:51:b9:0e:f1:90:b0:ee:45:5a:fe:af:8b:be:21:
         71:5f:ce:33:e0:63:5e:23:53:fb:7c:5a:4a:bb:59:40:a5:05:
         21:68:67:2e:2c:bd:07:da:f6:78:f8:e8:8c:47:ad:41:13:db:
         35:d1:3d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:29:32 2025 by rpki-client