Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9fbfb51-ca82-3e39-a43c-5b8db6a3f29f.roa
File:                     e9fbfb51-ca82-3e39-a43c-5b8db6a3f29f.roa (raw, json)
Hash identifier:          nZTC+7q+Kxm4GVTT8EfkwHcYwsIWQ00e2Mo6cnvwVEI=
Subject key identifier:   CE:2C:A0:D9:26:CD:48:3D:96:7D:81:0C:F4:11:8B:E2:0F:37:C9:31
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01CC7A18E54A586CE2AF00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9fbfb51-ca82-3e39-a43c-5b8db6a3f29f.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        72.222.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:cc:7a:18:e5:4a:58:6c:e2:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=0e477ac8-d817-4090-8401-7432d7b02870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5a:8a:30:25:be:90:7c:3f:1b:01:78:8e:fd:
                    8f:de:ac:51:30:75:c6:40:b1:b9:81:4d:ca:c5:16:
                    96:91:22:33:b9:42:c5:7e:6e:df:d4:00:dc:a5:ae:
                    d7:69:40:b9:72:06:8a:be:e4:84:17:a4:d0:ec:d1:
                    cb:47:80:c3:04:c2:c9:0b:90:72:8f:c7:6e:06:96:
                    cc:c1:ca:09:37:42:7e:9d:90:87:92:bb:47:6a:1e:
                    bb:3a:bc:2c:ff:97:3b:53:47:e1:31:de:c4:6e:da:
                    73:1e:3b:ab:b8:c8:35:f1:fb:c7:15:e3:b4:d1:da:
                    dd:d1:38:88:e6:a1:8b:4c:9b:ad:01:be:45:c6:19:
                    45:56:70:61:41:5d:90:c9:f0:dc:f3:80:09:5f:45:
                    a9:1e:2a:b9:1b:22:bf:62:12:ca:06:bd:3f:a1:e8:
                    9e:13:ab:95:74:5e:d6:67:a8:4b:54:bc:fc:e6:80:
                    9f:af:2e:89:9d:83:a0:69:5c:ee:94:7c:2e:51:b5:
                    99:3b:7f:db:ce:69:f8:1c:74:83:64:cc:4d:88:b9:
                    6c:81:ed:60:25:bb:2c:79:bf:f3:c4:9c:7c:06:72:
                    25:b4:29:48:98:e7:fe:f0:83:41:71:e8:86:f1:71:
                    42:fe:dd:89:30:dd:f9:5e:28:48:6a:99:66:58:7b:
                    5e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2C:A0:D9:26:CD:48:3D:96:7D:81:0C:F4:11:8B:E2:0F:37:C9:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9fbfb51-ca82-3e39-a43c-5b8db6a3f29f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.222.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:59:9b:89:5f:22:72:00:21:e4:d7:77:3e:ba:66:b1:1d:f1:
         e3:bf:a8:83:be:ee:85:f6:68:4b:60:ba:02:25:03:d4:d5:7d:
         cc:d2:42:59:30:75:68:69:93:3d:ae:27:0e:2d:83:64:b6:5c:
         84:3f:47:18:ec:4a:74:1f:75:55:f6:82:b3:30:16:b9:10:d0:
         85:0d:26:0c:e1:43:0f:2c:fc:f4:a8:2b:b3:21:70:22:3f:d4:
         93:c6:34:aa:78:da:0f:ea:95:99:f1:cb:5b:42:89:63:42:bf:
         29:61:aa:09:b6:3f:71:a4:67:6e:58:29:78:95:cd:7e:3c:2e:
         5e:86:18:29:6e:06:ad:fd:76:78:ca:26:83:36:e3:f6:ad:32:
         f6:d0:ca:14:9e:42:d6:bd:bf:7b:6e:2b:21:96:02:fe:93:07:
         ea:4d:38:e2:4e:0f:95:14:00:8d:6e:fa:1c:5b:13:15:df:14:
         dc:b7:f6:df:fe:80:25:92:fb:5f:39:89:3e:26:12:5d:56:fa:
         23:a2:61:a4:af:27:a5:0c:ca:07:9b:85:a6:4d:9f:ce:db:12:
         8c:d5:26:ec:22:61:ba:a2:88:cf:bb:be:23:40:8d:f9:b3:a5:
         00:53:54:61:19:d4:ef:88:44:83:90:5b:e9:13:0c:7c:8e:0b:
         f3:26:dc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 04:01:53 2025 by rpki-client