Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e723ef6f-ebd1-323a-a8c6-c50adf430196.roa
File:                     e723ef6f-ebd1-323a-a8c6-c50adf430196.roa (raw, json)
Hash identifier:          TiPq3+uiYdRDG0wqt2kHJNuz7oVfkQDWFg1aFwCSlYo=
Subject key identifier:   68:7E:E1:3E:8D:A6:57:FD:12:70:DC:5A:D4:25:E3:46:EE:EF:5B:62
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F2675B4D58BBB9F9E266C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e723ef6f-ebd1-323a-a8c6-c50adf430196.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        72.221.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:67:5b:4d:58:bb:b9:f9:e2:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=a29fd196-2748-430a-a3ae-0703beee8b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:cd:98:a7:50:61:bf:50:da:b7:82:5f:d8:
                    b3:bf:4a:4a:f6:1e:6a:21:ec:ce:a9:7a:d8:71:d3:
                    14:0e:b9:76:20:d0:00:83:c2:e3:42:e5:28:12:8d:
                    55:bf:0c:83:18:58:c0:a5:df:99:00:54:d8:97:85:
                    30:f1:83:98:f2:a5:4e:dd:bd:a8:6a:f9:a8:6f:97:
                    68:c5:74:3a:f5:c3:98:87:86:3f:b0:29:64:04:26:
                    2a:d0:b0:4c:8b:f5:c7:d8:8b:26:68:4e:7f:6e:66:
                    48:12:00:1a:56:6c:75:2c:e3:c3:3b:c7:14:63:c4:
                    a2:84:fc:25:fe:29:5e:e5:35:7f:2a:c6:9a:0b:7f:
                    d0:78:38:f8:68:96:e7:cc:6e:fb:6b:73:f4:66:7f:
                    9b:10:f9:95:41:e3:d7:06:c1:53:06:e6:6c:64:a5:
                    4b:1f:13:a3:93:16:bf:11:be:32:3a:0b:ba:bd:ed:
                    73:e3:12:29:02:9a:be:b5:68:fc:8a:69:76:37:c8:
                    11:fe:71:f3:63:57:b5:b2:23:f7:39:ae:32:7a:85:
                    40:44:5a:53:97:ef:bc:21:f4:5c:80:ff:4c:fb:81:
                    50:35:11:56:1a:89:8b:fa:cd:d6:cc:5e:06:2e:c2:
                    d1:88:78:86:4c:03:44:f2:8e:76:5c:cf:87:53:50:
                    8d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7E:E1:3E:8D:A6:57:FD:12:70:DC:5A:D4:25:E3:46:EE:EF:5B:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e723ef6f-ebd1-323a-a8c6-c50adf430196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.221.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f1:a2:d9:51:1d:7a:43:6f:87:86:0c:c0:16:1c:7c:9a:e6:
         0c:4b:a4:7a:48:8b:44:3f:7d:20:87:be:05:ad:69:b1:d3:96:
         57:2f:2d:fc:0e:f5:28:76:e6:fe:be:29:22:ba:7d:71:8c:a7:
         81:59:93:af:3a:7c:cd:f4:57:6e:0c:f9:57:0b:ea:04:7e:cb:
         f2:a3:69:d7:df:7e:ab:f1:36:bc:cc:36:fb:86:17:68:de:6a:
         07:54:4d:0d:11:f0:13:58:51:50:00:fc:a5:27:e6:83:51:9e:
         b3:cb:d9:c9:26:44:c8:9b:ae:28:40:0d:51:87:2c:05:08:a3:
         4f:db:3c:f1:9d:0a:13:04:68:8a:b4:89:b9:31:cd:a8:c4:90:
         6b:74:e2:b7:52:79:af:7d:27:c7:ad:1f:1b:00:af:b3:00:1b:
         d0:05:a0:86:37:d3:12:d1:55:e2:57:f5:eb:46:6f:b2:2a:30:
         9a:6b:e8:84:ba:32:ad:e0:59:e1:08:42:14:e1:04:84:de:12:
         e6:08:1e:21:01:c0:a8:a8:7f:14:92:cd:36:25:07:c3:96:2f:
         85:27:92:43:c2:20:80:aa:f6:56:47:80:30:a1:c9:95:1e:0c:
         ea:5f:87:55:11:0c:14:80:7d:d8:25:ba:f1:43:f4:cc:57:2c:
         e3:39:36:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:29:55 2025 by rpki-client