Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d8210cd-c4d1-3356-8b0f-77ae9950adfb.roa
File:                     8d8210cd-c4d1-3356-8b0f-77ae9950adfb.roa (raw, json)
Hash identifier:          +y3ZB9KFESel3YedmhqX6rGnVqao2ungDIySlSt41HE=
Subject key identifier:   71:FB:88:FC:2D:05:E9:4B:31:13:99:04:88:32:A1:24:DA:3F:5E:62
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01BE8747C1327CFA68DD80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d8210cd-c4d1-3356-8b0f-77ae9950adfb.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        72.216.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:be:87:47:c1:32:7c:fa:68:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=80a43454-5c91-4170-b54b-45088b254cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:64:79:b6:a4:ca:0f:75:ce:73:d1:fc:3d:14:
                    30:57:a4:11:9c:d5:03:16:b7:4e:f5:6d:0c:0d:9f:
                    51:0f:f7:36:c8:ec:27:e7:6a:5f:14:eb:e9:88:a7:
                    3a:dc:de:00:c1:05:32:29:d4:2f:0c:ce:8e:09:70:
                    a0:0a:96:21:3f:30:6a:94:ce:80:74:c5:a5:c1:2f:
                    07:c3:76:41:74:aa:15:b9:59:89:82:1a:1c:d6:c1:
                    ad:3c:a6:e9:f7:38:f9:98:98:ee:18:d1:3f:42:d9:
                    e6:0f:a6:58:bb:17:37:57:04:d8:08:15:f7:d4:52:
                    69:e2:8b:ed:67:5d:39:73:09:af:01:80:38:0e:20:
                    32:f6:f0:0f:10:44:fe:ce:4f:4c:fd:41:60:a0:6e:
                    d2:6f:e4:58:56:70:31:a1:de:20:77:ae:d4:d8:c2:
                    61:b4:67:a8:4e:a9:1f:bb:88:3f:fd:25:05:a1:47:
                    d0:c1:28:61:92:e6:95:8a:06:88:50:02:5c:0b:60:
                    6d:24:47:c9:90:08:ab:85:ca:f0:95:0b:b2:bc:78:
                    49:a7:a0:16:bf:ca:fd:bf:b3:22:4e:51:93:e1:26:
                    fb:ed:7b:83:f9:02:7e:46:ba:b7:99:5d:c5:6d:64:
                    7d:44:e0:0a:64:62:bf:3c:6b:dd:77:fd:c4:a8:a9:
                    70:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FB:88:FC:2D:05:E9:4B:31:13:99:04:88:32:A1:24:DA:3F:5E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d8210cd-c4d1-3356-8b0f-77ae9950adfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.216.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:0c:7b:50:02:f1:1d:83:62:00:b1:a4:2d:cb:b9:5c:d8:8d:
         dc:22:bc:98:ed:e8:fd:aa:88:a9:35:b2:0e:5e:01:40:8a:5e:
         b2:09:dc:36:b2:bb:96:8e:6f:97:00:ef:98:3c:39:b7:cd:b4:
         b3:1e:a5:1b:ee:f8:1d:37:8d:3d:37:8f:8f:10:c4:ed:c8:96:
         b9:06:b3:66:a1:1d:13:38:1c:3d:e5:39:1e:76:f4:51:cf:e0:
         46:ee:38:6a:5f:98:07:3c:33:21:80:89:f1:54:20:e2:39:a9:
         b7:ec:64:d4:55:35:50:e8:f5:46:cf:f5:f3:36:cd:00:20:ed:
         de:09:61:9f:03:9a:cd:c6:fc:c3:96:cf:b1:9b:5c:9e:fd:18:
         52:a8:dd:27:a4:c4:0e:b1:a0:83:cd:c4:2f:ec:11:6f:8f:d4:
         7c:6b:c2:ac:1d:24:6d:a8:fd:64:0b:4c:17:38:52:e5:4a:24:
         e9:d2:30:30:20:60:20:f0:36:8b:56:8a:c1:d2:58:c3:c1:a7:
         ec:bb:75:0e:5b:5b:e8:ed:68:2a:d1:ce:4a:38:7b:74:f2:9b:
         75:f7:9f:e2:f4:44:a1:e0:17:f2:d4:c3:d5:48:41:38:0c:7b:
         24:f0:18:bb:61:8e:66:a9:3b:b8:d5:3e:5a:93:c2:ba:d0:68:
         e6:eb:34:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:31:57 2025 by rpki-client