Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a359c870-9fee-35c4-9795-48cfdea24f26.roa
File:                     a359c870-9fee-35c4-9795-48cfdea24f26.roa (raw, json)
Hash identifier:          zVvG9MFYHPhK8P2R2QYS6C6tjoDfDxIgkpTNoWU/8HM=
Subject key identifier:   0C:C5:B6:A2:90:80:C3:33:CF:0F:89:31:A5:10:B8:BD:F3:B7:44:7A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B20672174BAF06ED134DEF440
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a359c870-9fee-35c4-9795-48cfdea24f26.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        72.193.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:21:74:ba:f0:6e:d1:34:de:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=7a085036-0e3d-4f42-a27e-df2da9fca7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a1:9e:24:68:5d:0a:ae:a0:b5:1f:7d:56:a7:
                    c3:fa:13:0c:ac:df:a3:62:8c:73:4e:78:33:98:c5:
                    b9:17:ca:06:8b:18:83:32:7a:e7:e2:5b:17:60:46:
                    57:7a:98:6d:a1:ca:5b:79:2a:f4:85:fb:ca:db:b5:
                    49:bd:f0:73:47:59:b8:3c:a1:84:ba:69:b6:c6:55:
                    d2:a2:61:8d:3e:31:91:6e:57:a1:3f:23:c7:e1:44:
                    8b:1d:68:82:58:c0:c7:8a:6e:06:6f:28:e2:92:91:
                    3a:bd:18:3f:97:0a:40:f8:93:6b:92:8c:db:4e:7a:
                    c9:ac:20:68:5b:32:58:f9:26:7c:d8:d3:f8:ff:58:
                    52:9d:ac:57:c0:94:77:a6:89:28:9c:3d:41:ab:57:
                    72:58:f6:17:cb:de:e7:3e:b5:a1:f3:4c:44:9d:ea:
                    01:03:e2:49:8e:2a:18:6a:59:da:f0:bd:16:cd:c7:
                    61:1f:19:e9:ac:63:39:88:11:e2:fb:2d:8e:8f:1d:
                    38:65:95:b5:12:db:99:2a:dd:bb:73:66:9c:4f:d8:
                    f6:6f:19:0b:8a:f4:0e:dd:df:b6:02:03:52:17:17:
                    45:9e:b8:ba:33:0b:87:c0:16:34:58:fd:8e:31:e3:
                    37:a3:e5:16:ab:c5:b1:73:59:67:9f:a0:15:eb:fb:
                    cd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C5:B6:A2:90:80:C3:33:CF:0F:89:31:A5:10:B8:BD:F3:B7:44:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a359c870-9fee-35c4-9795-48cfdea24f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.193.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:70:ff:8e:98:8c:7a:08:f9:1e:82:34:6b:40:cc:c0:11:ec:
         d3:84:f3:c6:9b:e9:bc:5e:dc:b8:32:eb:2d:f7:2d:36:60:7d:
         d0:1e:e6:6b:bd:61:70:99:72:72:94:02:59:bd:31:8c:2e:00:
         46:8a:c9:ff:13:a5:12:76:ba:06:8a:e8:03:88:ac:a2:22:25:
         23:42:79:6e:a1:05:8a:73:12:67:59:ad:03:2c:06:5d:f6:48:
         54:c6:8d:f1:5a:40:ad:e9:2e:f5:83:de:77:79:a1:ca:6b:38:
         48:ba:e9:54:fa:87:b2:51:fe:48:b0:96:92:30:e9:e7:ba:b3:
         9d:53:10:a2:32:50:7f:33:96:27:d7:3a:6e:f5:09:8b:a3:81:
         9e:88:ea:4f:62:78:22:63:7f:d8:60:c3:c4:10:82:03:8c:e7:
         0d:88:0e:ec:39:11:9d:ef:e2:34:20:f0:14:aa:79:48:9e:0e:
         eb:ad:0c:db:23:6d:02:da:a0:9c:41:a8:76:85:28:c6:78:83:
         2c:ab:72:2d:94:ec:2d:22:98:fb:d3:1e:45:9e:ba:48:25:2d:
         60:cf:78:fc:2d:e0:fc:41:c7:6d:d7:23:75:87:92:5a:e6:98:
         8c:40:5e:df:e7:08:2f:cd:c0:94:90:e1:6f:87:a4:8d:c6:40:
         5d:5b:22:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:31:37 2025 by rpki-client