Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e84c4050-da84-326a-9f6a-08cb76767673.roa
File:                     e84c4050-da84-326a-9f6a-08cb76767673.roa (raw, json)
Hash identifier:          KPv9YP5ZDGHx9OpqfQRQStCaoR931ulPj/X+I+M59nw=
Subject key identifier:   F9:B4:23:CD:2B:35:4D:4E:7C:AB:17:A0:CC:51:7F:CF:68:8D:86:79
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DFE3F8842F74E7BF44D2500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e84c4050-da84-326a-9f6a-08cb76767673.roa
Signing time:             Thu 19 Jun 2025 10:37:21 +0000
ROA not before:           Thu 19 Jun 2025 10:37:21 +0000
ROA not after:            Wed 17 Sep 2025 10:37:21 +0000
asID:                     22773
IP address blocks:        174.73.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:fe:3f:88:42:f7:4e:7b:f4:4d:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 10:37:21 2025 GMT
            Not After : Sep 17 10:37:21 2025 GMT
        Subject: CN=802efd6a-f0d9-43c7-8a95-593ee55c9ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2a:c0:4c:b6:5d:a4:dc:73:f2:11:9c:2a:46:
                    b0:22:7f:6b:68:f0:a2:af:25:16:0f:7b:f2:7f:02:
                    c4:2d:cc:16:4e:60:9c:31:28:39:b3:ab:48:28:14:
                    98:16:91:2b:00:6b:51:4f:83:48:ea:a4:da:59:db:
                    e9:94:ea:ce:66:95:04:e9:9f:1f:bb:d2:32:b3:7e:
                    78:9d:98:45:0c:a5:53:40:c8:86:40:7d:81:8c:ed:
                    1e:c6:e6:0d:52:92:55:a8:73:95:a5:0a:60:b2:ea:
                    9f:3a:66:39:6d:d1:4b:a0:a2:cc:aa:73:e4:8b:74:
                    2a:aa:bb:dd:09:ca:34:76:b7:30:85:82:b1:a3:be:
                    b0:8c:a2:d3:30:88:85:1d:3a:85:79:b4:1d:ba:6d:
                    14:51:ac:84:d2:44:2a:a2:5a:0e:29:f4:83:39:0e:
                    80:c8:3c:fb:da:7b:45:23:1e:1e:8e:83:92:5e:f6:
                    92:64:47:5f:df:be:62:2c:f3:6c:56:36:ff:45:d0:
                    32:02:68:a7:16:7e:ed:3b:0c:11:f3:31:46:2e:31:
                    2d:1a:43:a7:38:43:f7:f4:be:5c:c5:66:1c:75:60:
                    11:9c:79:03:94:46:c1:b9:47:8a:c8:07:ac:2b:d8:
                    cb:b9:f1:48:c7:42:2e:b9:dc:a9:ec:3f:e1:2c:c2:
                    02:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B4:23:CD:2B:35:4D:4E:7C:AB:17:A0:CC:51:7F:CF:68:8D:86:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e84c4050-da84-326a-9f6a-08cb76767673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.73.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:2c:aa:b8:6f:42:a8:e8:46:5c:64:45:7e:04:4c:9b:26:fb:
         4d:d0:78:e3:17:69:0f:e9:04:3e:c2:26:f5:37:33:20:de:10:
         97:ab:ea:f2:7b:f7:c8:80:73:39:83:c7:9e:5a:27:d7:71:92:
         6b:0c:69:e2:f3:d7:bb:f5:22:5a:c3:bb:e9:21:28:5a:a6:ba:
         bf:15:67:1c:ce:5e:71:ce:4d:4a:03:35:5f:12:df:2b:04:6d:
         51:7e:81:16:5e:74:3b:86:ef:07:66:c3:7e:b4:13:0a:c8:a1:
         29:96:51:fd:9a:33:1b:9e:36:a5:a1:b3:10:49:12:9c:ed:d6:
         2a:ee:76:62:0c:dd:b2:90:0f:4d:46:3f:4e:21:79:e2:7d:e3:
         90:9f:43:5e:03:89:9a:de:6b:34:96:f5:21:71:8e:7d:7d:4f:
         0e:db:fd:70:f9:4e:fa:7c:8e:69:06:b1:96:02:6c:42:93:5a:
         be:a8:52:df:a1:e6:d8:69:07:7b:79:86:ae:4f:ab:2c:7c:19:
         6e:75:be:e1:28:0c:0e:10:b2:6c:86:fe:e2:64:cb:f1:1d:d7:
         82:ca:d2:68:3a:ad:9d:77:2d:37:88:64:b2:9b:1d:15:aa:3b:
         00:3c:ed:b2:a9:b1:a2:98:07:bc:22:eb:a2:f9:37:af:7d:85:
         25:f3:06:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:17:16 2025 by rpki-client