Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a592a21e-a234-3b9e-8504-426452511177.roa
File:                     a592a21e-a234-3b9e-8504-426452511177.roa (raw, json)
Hash identifier:          Uf8snFfSj3AzMd6caYBpHbrdDZN8eNgZ8FYsbBul5Ug=
Subject key identifier:   CA:27:BB:FB:8C:38:43:A4:67:78:C0:1D:83:F9:F4:29:23:41:56:89
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01929DB9390A48F3FD9A40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a592a21e-a234-3b9e-8504-426452511177.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        70.190.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:92:9d:b9:39:0a:48:f3:fd:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=730da9e3-4111-4002-89ac-60286b30d77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:57:d9:11:34:5c:32:d8:be:d0:e9:c7:38:bd:
                    34:f1:88:48:b1:eb:15:67:64:7c:11:b9:f7:9e:12:
                    f2:88:6a:dd:57:58:7f:31:b6:50:25:9c:9e:c8:58:
                    3e:17:ff:cb:dd:fd:c8:ba:b1:93:3e:d8:3e:2d:83:
                    e4:e1:5e:a1:9e:f3:64:e9:bf:d3:f6:67:23:db:cd:
                    89:c0:bc:7b:64:5c:f6:c2:6c:fe:e7:2a:c2:69:cd:
                    d0:04:d9:0a:90:33:f8:7a:b9:68:77:d0:04:6c:42:
                    ba:ff:d5:c9:da:d2:38:17:b7:16:16:a7:17:98:14:
                    cd:12:35:17:16:3a:75:ed:c7:a7:0d:ee:bc:6c:6a:
                    e4:a7:95:4d:72:96:c8:26:0e:1e:a0:ae:96:6d:8b:
                    c7:86:79:30:03:9b:ae:6e:06:73:0f:74:6f:fb:21:
                    13:da:e6:3f:6a:4e:b5:f4:e1:af:40:49:ec:3b:5d:
                    c4:ac:b2:3a:fa:f2:f2:3a:18:d9:81:43:43:27:8d:
                    a6:12:98:39:ba:2d:cc:3e:30:2f:52:d7:ba:da:32:
                    76:3c:9a:0c:eb:91:12:17:f2:81:2b:9b:66:61:d4:
                    e9:27:de:cc:dd:8a:9f:8a:01:c5:96:ec:b9:a7:5e:
                    f3:e5:5a:a4:6e:2f:85:48:68:d8:ff:0c:eb:6f:99:
                    43:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:27:BB:FB:8C:38:43:A4:67:78:C0:1D:83:F9:F4:29:23:41:56:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a592a21e-a234-3b9e-8504-426452511177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.190.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a0:e1:a7:4a:21:93:d5:e2:ab:5e:29:c3:42:27:e2:f0:9b:
         54:8c:35:b1:24:a4:3f:97:5a:7a:27:d2:2f:cc:ef:6d:eb:00:
         d2:3f:a6:d9:37:61:d7:c5:5f:ce:a9:73:57:a0:b3:a4:9f:36:
         e2:e1:49:9a:49:35:15:34:4e:ef:4a:13:69:ff:8b:85:13:f7:
         05:5c:2a:72:d2:05:a2:6a:f7:da:ab:82:91:18:d0:a7:ce:31:
         6f:d0:0b:66:41:fc:99:8c:f4:c6:6a:1b:8f:09:7c:89:da:2e:
         6b:92:75:74:ff:f8:e6:d1:d7:52:2f:74:31:d9:85:8a:ba:f0:
         8a:d0:a9:ed:52:d5:ef:97:4b:ff:7b:5d:c0:aa:f7:26:03:d6:
         de:2c:ef:c6:ff:df:f0:da:b3:82:69:63:9e:6c:db:da:48:27:
         2b:65:06:30:d1:aa:e8:93:ca:51:df:77:45:21:f2:ab:5d:7d:
         3e:72:c5:72:2b:85:9b:43:d9:3c:96:19:82:25:15:d0:3b:a6:
         75:3d:52:1c:42:74:fd:c8:d6:b8:ce:4b:0a:bd:00:8f:7d:a7:
         32:e5:81:1e:7a:68:9c:f3:8d:22:79:01:b0:3d:bb:06:27:3e:
         95:d7:f0:b2:d8:ca:45:7f:ac:9a:54:12:5a:b3:8e:59:6b:68:
         c6:a4:ae:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:31:19 2025 by rpki-client