Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbdcf041-2ff1-3a7e-875e-10d3d9f9c016.roa
File:                     cbdcf041-2ff1-3a7e-875e-10d3d9f9c016.roa (raw, json)
Hash identifier:          Qq0LhXp9fgzisW8afVc1G0yjgjDHa8jRaC3Bg2LDUyw=
Subject key identifier:   B6:3C:28:B4:3B:AA:49:50:73:C0:9E:60:38:8D:D8:7C:93:CF:2A:7A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01B78F32D0F3F6ECB90810
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbdcf041-2ff1-3a7e-875e-10d3d9f9c016.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        72.211.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:b7:8f:32:d0:f3:f6:ec:b9:08:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=364bfa16-cedd-436d-a7c3-ff3d4ba9d177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1e:55:a4:4a:70:60:1b:4c:11:24:02:39:e4:
                    15:2b:e1:71:e4:56:0a:dd:96:6b:f3:d0:d6:9c:b1:
                    fe:cc:ef:67:18:f6:32:89:3d:8f:0f:a6:dd:a0:82:
                    4b:d1:53:8a:08:f1:39:63:61:60:fc:cc:d8:6f:61:
                    dc:9e:d4:36:84:d6:65:7b:0e:1c:34:6c:86:b9:c2:
                    d1:1f:1a:12:47:f8:aa:e0:8e:b7:5b:92:84:fc:e8:
                    b2:91:86:15:0d:09:58:95:57:2e:da:22:26:3b:cd:
                    26:24:aa:f0:c5:12:32:88:da:84:9a:0e:e2:be:88:
                    ce:c7:ec:1d:32:bf:3f:1f:d5:8a:0f:f1:a4:a4:2b:
                    0e:33:11:0e:c8:a9:b7:5f:df:f1:77:58:19:39:a9:
                    bc:13:01:0d:5f:e4:8f:36:37:a6:ed:6b:8c:7e:24:
                    f2:68:de:98:84:8a:65:f2:a0:4a:6a:17:2b:00:a0:
                    bb:4a:e1:bf:c3:d7:4c:66:fb:4e:1e:a9:a6:0f:2f:
                    9e:2a:05:bb:02:8a:c6:6e:32:7f:0f:4a:a0:0f:7e:
                    e4:47:04:4c:94:75:7c:6c:e9:3a:81:ff:7a:33:9d:
                    7a:b5:5e:cf:ba:66:c5:1a:3a:85:d5:61:42:fd:02:
                    12:60:13:07:eb:b9:84:84:84:82:9d:d1:3e:15:ba:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3C:28:B4:3B:AA:49:50:73:C0:9E:60:38:8D:D8:7C:93:CF:2A:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbdcf041-2ff1-3a7e-875e-10d3d9f9c016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.211.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:8d:a5:09:f2:85:b8:d5:03:3e:ce:86:65:bf:79:ab:2f:b4:
         6f:c1:f0:13:59:e6:51:14:e9:22:7c:02:63:30:dc:bb:90:1e:
         2c:45:36:b0:41:48:49:8f:3c:ee:c0:69:3e:a9:2e:d8:25:43:
         fe:5b:09:20:c9:7d:35:d9:98:7a:af:83:53:4d:92:23:cb:c5:
         ca:59:63:80:b1:09:36:dc:55:ff:d1:44:fa:31:2f:d2:91:32:
         e5:c2:ba:b5:1c:bc:28:84:88:30:3a:a6:fe:3b:09:85:c8:6c:
         bc:d1:14:f3:87:23:d9:3b:24:03:be:eb:03:07:c6:64:74:3b:
         58:2a:10:a0:52:c2:ea:dd:19:0e:62:de:da:10:a9:1d:86:ef:
         d5:21:53:bb:22:04:ac:83:cc:b2:55:70:6d:b3:40:e5:b3:a9:
         c8:ba:99:f7:83:e0:bc:ad:b5:85:80:32:03:59:42:7b:d7:3d:
         79:b8:ea:91:08:8a:8d:21:1e:94:dc:db:62:b6:12:54:e8:66:
         2c:ea:9f:e1:9e:c8:0e:cc:83:86:4a:d1:0e:ca:cc:6c:6b:24:
         04:3d:4c:93:2e:ec:a8:1d:0e:81:3e:32:b1:85:60:90:9d:aa:
         06:df:9a:d2:8d:48:ec:aa:8d:2c:d7:ec:6b:4a:03:7a:5c:46:
         da:bc:21:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:20:19 2025 by rpki-client