Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/757fd3a2-b1f5-3dcd-84eb-bd504e207b2d.roa
File:                     757fd3a2-b1f5-3dcd-84eb-bd504e207b2d.roa (raw, json)
Hash identifier:          K3dPGua0OPofSbJ3V+Jh22l1eDwMjr3tRPbG+SC6P1E=
Subject key identifier:   F5:95:22:67:B9:21:B5:20:96:43:1A:1C:2E:CB:D5:6F:E1:F7:B4:1C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F24AD4A9FFCE85DFCC7B00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/757fd3a2-b1f5-3dcd-84eb-bd504e207b2d.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        72.192.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:4a:d4:a9:ff:ce:85:df:cc:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=e7b33849-b908-4aed-9a96-bc23c86dfe5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bf:ee:cd:15:50:ab:d9:ec:a3:4a:e0:b6:ad:
                    7b:2e:3e:89:ea:5f:fa:84:e5:8e:82:ba:09:28:78:
                    4b:c4:48:59:dc:04:55:d0:22:7a:99:b2:6e:56:36:
                    48:30:ee:a0:28:72:8e:0f:99:1a:3a:1d:34:cf:da:
                    5b:60:40:33:22:db:52:6c:0f:27:f5:04:7e:a0:0c:
                    fd:ee:43:ef:61:cf:2c:31:26:1c:7d:ca:bb:ea:10:
                    5b:5b:ec:ec:78:74:20:bc:1d:45:1f:f1:f3:52:c8:
                    08:e8:89:81:04:6a:ce:13:bb:5d:68:61:01:40:30:
                    99:53:42:13:e2:00:bd:4d:10:8a:dd:e5:80:9b:79:
                    2c:db:e4:ed:4f:4a:c1:d4:00:27:2f:93:5f:b1:95:
                    7e:04:48:09:04:02:ef:f3:3e:11:9d:fb:bd:17:64:
                    c5:14:7e:30:cb:90:d1:6b:5a:33:81:4e:ec:ce:10:
                    66:4f:3b:59:ad:c2:a2:52:59:6b:a2:20:23:8b:9d:
                    e7:a4:01:dd:4e:38:18:cd:8a:a9:6f:52:b6:3b:4c:
                    c5:2f:bb:2e:cc:25:a7:7f:b0:44:13:14:41:71:aa:
                    61:74:75:24:54:88:76:81:7c:50:09:88:4d:d6:18:
                    d4:2f:12:80:ff:4e:68:2b:c5:bc:0b:25:fd:70:83:
                    49:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:95:22:67:B9:21:B5:20:96:43:1A:1C:2E:CB:D5:6F:E1:F7:B4:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/757fd3a2-b1f5-3dcd-84eb-bd504e207b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.192.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b0:c5:7e:7d:db:e3:7d:e5:0c:f4:f2:4b:df:60:3c:f8:e1:
         c0:b8:ec:bc:78:78:1d:db:52:d2:7f:72:16:b0:46:13:a6:bd:
         57:6b:40:37:ad:5a:3e:e2:b9:41:6c:f0:f3:e4:26:1e:5a:33:
         f6:7f:07:46:3f:93:72:7c:e2:9f:5b:d6:e7:20:29:b7:59:e1:
         0a:55:e3:6a:bc:c5:e9:d4:af:0e:21:6a:44:df:7e:7e:10:aa:
         4f:ff:52:39:c5:aa:6f:d4:99:91:9c:6b:67:28:fe:19:46:9c:
         8e:62:e2:85:21:26:33:c2:52:08:89:65:f7:4d:f7:e6:6a:79:
         fc:0f:56:0b:ef:71:2c:a9:e4:53:20:4e:fc:72:4b:e7:80:12:
         88:ab:58:ea:26:a2:9c:34:dd:c9:7d:6b:a8:7c:d0:8e:7e:54:
         c2:fc:46:92:a6:7e:fc:c8:02:46:02:11:5b:19:4f:b0:a0:d6:
         ad:56:68:1c:39:e0:81:bd:82:54:db:14:be:85:09:9e:17:f2:
         85:a2:0d:f2:87:c9:ad:3b:91:a1:d8:0c:9a:ec:99:45:d2:f6:
         d6:56:c5:0d:59:87:8d:c7:e2:6f:c7:49:4f:ac:0f:8e:73:25:
         a5:c1:77:67:98:0b:fc:a7:ee:24:db:f2:79:23:8c:2e:34:b9:
         2e:96:60:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 02:01:01 2025 by rpki-client