Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66bf5a2-b4da-3ff4-bad2-183dd58e6908.roa
File:                     a66bf5a2-b4da-3ff4-bad2-183dd58e6908.roa (raw, json)
Hash identifier:          wiQMyRXb/MBGYPby5STUm71rkv+Guwn3P+skIoiI7M4=
Subject key identifier:   F7:03:AD:F6:81:0A:8C:FD:F4:30:AF:B9:C9:2B:AD:B4:27:D0:FE:A5
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01D279547D757B68506780
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66bf5a2-b4da-3ff4-bad2-183dd58e6908.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        72.223.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:d2:79:54:7d:75:7b:68:50:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=205dd0e8-8410-46a8-97c4-a16ff1bb2bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9c:8e:c0:43:b3:cf:55:40:fc:3f:5f:93:fc:
                    65:d3:15:25:6b:bd:d5:10:77:7e:53:16:7c:dd:95:
                    6e:6a:7d:7c:28:82:19:fb:bb:29:c6:6e:36:a5:91:
                    8e:7c:28:a8:00:5b:af:be:01:78:86:80:1e:18:2b:
                    0e:c7:3a:49:a6:a9:dc:7b:de:be:50:b9:e1:28:71:
                    8b:02:8b:00:72:bc:3a:d0:c8:d6:49:72:c8:ed:40:
                    34:2a:ee:4a:c5:e7:95:fd:5b:26:87:ae:4d:3a:f8:
                    d5:3d:8d:b4:0b:88:b0:f7:9c:29:39:97:0c:04:94:
                    66:ad:11:bc:6c:61:d3:4e:e0:39:c9:ed:d6:4f:4b:
                    86:9a:14:2b:77:4b:8b:48:b4:a3:02:cf:dd:2b:8d:
                    c6:ba:72:a0:0e:51:b0:56:00:4b:b5:b3:af:1f:04:
                    67:ff:1e:7e:48:e7:b1:f1:fb:31:76:95:5d:14:cc:
                    5f:5c:d0:c1:9f:4b:6e:ac:b0:3b:64:a6:24:d7:ce:
                    60:d5:3d:34:e6:d6:38:16:24:aa:f7:ab:28:24:35:
                    0c:c0:1a:ff:3c:d6:20:8e:e1:8d:d9:a0:12:0e:5a:
                    a6:16:84:35:70:b4:61:75:d8:73:0c:f7:41:cc:6a:
                    76:2e:a6:cf:36:5f:6e:c7:dd:64:a6:b4:3a:05:cc:
                    89:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:03:AD:F6:81:0A:8C:FD:F4:30:AF:B9:C9:2B:AD:B4:27:D0:FE:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66bf5a2-b4da-3ff4-bad2-183dd58e6908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.223.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:20:fd:d7:8c:b6:7b:8e:0a:2b:20:9c:a5:f6:a7:63:8c:e9:
         8b:69:fc:c6:fc:23:3b:14:42:54:aa:90:71:be:c5:d4:cc:b6:
         54:98:e3:16:23:45:ce:8c:98:e6:d4:16:78:45:5c:04:6b:b5:
         8f:d1:39:f0:1b:cc:d3:24:9c:92:38:23:60:30:f7:9f:20:67:
         66:99:3b:f0:90:c9:01:22:7a:2a:e6:61:c4:47:d2:10:b1:63:
         20:20:58:23:d0:0c:31:d8:5b:bb:5b:63:51:18:c0:61:14:16:
         d1:41:6b:7e:0f:b6:b8:b7:f3:f1:c5:4f:b9:d4:e6:1a:40:98:
         db:28:c8:5f:b6:00:e1:2f:d5:49:fd:45:2c:6a:c0:b7:39:1b:
         b1:fa:46:56:c9:76:bc:27:a7:53:62:be:7b:76:bc:e1:26:7d:
         67:04:b7:a6:d4:36:4b:8a:6a:98:e4:ee:b8:83:36:d4:c5:b4:
         45:48:0c:d5:d7:ae:17:0f:bb:e4:4d:ee:8e:5e:0b:4c:33:d6:
         d6:30:fc:a2:01:f6:d5:c3:59:a7:5a:84:d8:08:45:da:c1:3f:
         b5:e2:29:77:0e:fb:68:50:d4:d4:32:fb:23:6c:b0:09:de:e6:
         ae:1d:e3:db:a8:81:e3:70:ec:b9:b2:08:ee:c0:c3:f5:95:98:
         cc:22:50:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 04:47:27 2025 by rpki-client