Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fc6a0e0b-98c9-3a61-97b6-89d50d4d19cb.roa
File:                     fc6a0e0b-98c9-3a61-97b6-89d50d4d19cb.roa (raw, json)
Hash identifier:          NU7QSSujPEn4AVgknE41h7GHktM5guCWlyirIho0ZM4=
Subject key identifier:   85:90:CA:4C:F5:7B:D7:3B:04:D1:12:B5:F8:0A:19:4B:D4:DC:65:BD
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858485CD02D29A1F79116AE5A9300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fc6a0e0b-98c9-3a61-97b6-89d50d4d19cb.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     22773
IP address blocks:        72.222.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:2d:29:a1:f7:91:16:ae:5a:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=987784f2-b2e0-45bc-b539-ee64cbcb86e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:14:f9:b6:a2:ef:0e:68:a8:1a:93:25:ce:
                    cd:e6:dc:1f:16:f5:22:32:e3:08:89:ea:1d:9a:8f:
                    42:f5:5b:59:bc:5d:72:26:02:e1:78:0f:96:67:46:
                    40:af:63:54:92:6b:4b:00:0e:b9:28:f6:f2:95:bf:
                    65:65:7d:62:dd:16:46:11:77:bc:6c:58:36:af:21:
                    4e:45:f2:4b:c7:2a:bc:c3:fe:18:4d:e5:30:49:a0:
                    b6:fa:00:b8:e1:dc:6b:52:b4:b8:69:a4:37:2b:da:
                    b8:66:a8:fc:e7:81:b4:02:f1:ed:61:17:7d:8a:a9:
                    2a:7f:ab:c6:2a:db:c8:ab:53:e9:11:2e:40:9f:56:
                    48:fd:8e:f2:65:16:61:b3:9f:10:e9:e9:a0:81:0e:
                    27:56:16:b1:d5:b6:80:28:ad:f6:9d:17:a0:a4:7e:
                    c3:ef:06:f1:76:c8:82:9e:0a:f3:03:91:25:d3:b1:
                    be:59:5a:b7:93:d7:3b:19:c1:39:16:b6:1a:1d:67:
                    b4:e5:aa:3b:f6:f1:6f:f0:6a:fd:1c:1c:ae:54:ef:
                    84:a3:5a:d4:62:6e:1e:5e:e7:af:3b:1a:b0:06:69:
                    e8:07:37:6a:2b:48:e6:25:37:95:c2:de:a2:69:35:
                    b0:f8:28:cd:c9:f2:09:2f:a6:9e:6b:d4:21:89:8b:
                    28:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:90:CA:4C:F5:7B:D7:3B:04:D1:12:B5:F8:0A:19:4B:D4:DC:65:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fc6a0e0b-98c9-3a61-97b6-89d50d4d19cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.222.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e2:f0:ae:5b:e8:81:9f:3c:99:2d:ce:45:a9:1e:e9:57:1c:
         94:46:83:3b:5e:c8:cb:ba:39:e4:33:7e:d0:14:1f:89:78:50:
         75:57:3b:01:0a:4d:63:bc:bf:77:95:51:1c:6f:23:86:27:43:
         98:e5:57:f1:92:26:31:ef:aa:98:49:52:52:cb:20:de:49:c1:
         a1:9e:99:45:fe:57:3c:f2:9d:48:22:bf:43:4e:98:30:3c:ab:
         30:a0:a0:1e:2a:42:5d:32:02:63:1a:3f:b7:64:1a:e8:80:f9:
         55:c6:34:4f:46:f6:22:f5:7b:52:d8:e9:b2:8b:2a:7a:a9:ac:
         2e:e3:b9:c8:5c:cc:91:1d:e6:15:3c:ba:ba:c3:d9:56:b2:d7:
         4d:2f:0c:b5:22:6c:7b:48:9a:dc:66:f3:ff:cd:31:62:2d:66:
         24:4c:8e:e3:eb:2d:09:ac:53:55:f6:f3:a0:58:2c:04:ba:25:
         71:b2:58:87:fa:7e:3a:15:0c:48:a6:48:e3:e6:f5:64:e0:86:
         14:bb:f6:0b:29:27:a1:36:1f:e9:75:be:ba:7d:21:00:6b:ae:
         89:49:45:bc:87:34:bb:14:e8:af:49:27:02:4f:b5:78:95:8e:
         87:63:9e:fa:09:f9:fd:ad:fc:28:0c:de:34:cf:d1:ca:da:9f:
         28:f8:a7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:02 2025 by rpki-client