Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fcb75476-51a4-3030-8e9a-c50ef4a7d553.roa
File:                     fcb75476-51a4-3030-8e9a-c50ef4a7d553.roa (raw, json)
Hash identifier:          e8/TWK5QyCVtsFLJLyrECqX5Wfb1UD+B4em8T/MKWkc=
Subject key identifier:   A1:80:D2:36:C6:1B:8F:F0:C1:29:AD:79:FE:41:58:D0:DB:6C:86:7F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01BB4C8C5AC3BF68C939C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fcb75476-51a4-3030-8e9a-c50ef4a7d553.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        72.212.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:bb:4c:8c:5a:c3:bf:68:c9:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=a7acf990-8bcb-4dc8-8fb8-b71f074da1e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ea:21:9e:24:e2:ca:d0:60:a9:4f:6b:32:45:
                    33:ce:37:c6:85:07:60:a2:e7:f9:68:f2:d8:2c:74:
                    0a:d9:af:65:2d:fa:ab:1e:6f:7e:f1:eb:58:55:78:
                    f6:ac:08:7b:b0:bc:51:7a:4f:d0:13:c8:0d:53:81:
                    c2:1d:5e:f0:94:c8:b0:1d:09:11:26:27:24:1d:ee:
                    ef:1b:0b:71:c5:a6:dc:48:c1:c1:95:32:2b:fc:97:
                    72:46:77:d3:5c:d6:19:ba:a2:d9:4c:6f:20:2e:5d:
                    31:3d:9f:5a:3b:83:43:d3:e0:d6:7b:22:43:53:53:
                    c2:5b:2e:2c:73:51:5d:c1:33:ed:e0:70:d7:2e:55:
                    bb:ab:59:4b:95:5b:69:c2:f6:d1:6e:60:d5:39:d8:
                    1e:68:10:ab:c1:58:57:dd:4a:80:06:49:fb:61:6d:
                    89:40:ea:fa:dd:89:a4:d9:4b:ad:3e:b1:ab:6e:84:
                    71:f9:a8:50:fe:b8:8a:43:25:69:89:26:a8:be:92:
                    8c:5e:f3:95:fd:1f:a0:3c:e7:bf:59:c7:be:40:4b:
                    5e:a1:66:22:ed:6c:d4:14:4f:ee:2e:b8:b4:53:88:
                    58:a7:a6:2d:29:10:e2:4e:3f:fd:ab:aa:c2:96:58:
                    1d:d2:0f:ee:23:a3:89:4c:7a:c5:1e:a5:25:ec:21:
                    7f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:80:D2:36:C6:1B:8F:F0:C1:29:AD:79:FE:41:58:D0:DB:6C:86:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fcb75476-51a4-3030-8e9a-c50ef4a7d553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.212.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:d4:36:46:06:6d:4b:5a:db:e9:67:89:0d:0b:34:31:45:d1:
         7b:fa:74:f1:20:22:f2:7f:2a:0c:ec:ce:e6:ac:0a:b3:97:cf:
         81:ee:9b:6b:7a:d8:21:19:01:c4:7c:9b:3a:7b:46:f2:b5:65:
         4b:da:55:04:f2:48:76:8a:7b:94:ef:37:b6:96:59:b4:4e:b0:
         bd:5b:0f:1f:ab:35:36:6b:c2:f4:95:71:95:99:8d:90:a4:13:
         0f:69:01:f1:c6:ac:6b:ca:71:0b:2e:eb:63:d3:89:73:1a:e8:
         a7:fd:43:2f:6c:8c:a8:79:2d:20:34:5b:dd:de:cf:39:5c:77:
         b0:59:1b:a6:05:ad:5f:7a:4e:ac:af:50:09:52:70:ea:7c:eb:
         45:31:30:4e:0e:a1:95:10:e8:67:8d:91:75:a7:24:ce:b0:83:
         6e:c8:b8:a6:40:92:e9:d8:56:4c:d1:ba:30:f0:ff:b9:cc:92:
         26:01:14:10:2b:1a:56:ee:ee:ce:c6:0d:2b:f4:90:02:ab:73:
         05:49:57:93:d1:90:ac:23:70:5d:43:65:e9:cf:02:56:bd:a2:
         95:61:16:40:04:de:99:2f:23:1a:1b:b3:7b:da:e0:93:8b:23:
         94:15:8a:55:85:dd:6d:71:a2:58:9f:69:fa:17:9c:77:e5:47:
         0e:57:94:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:22:49 2025 by rpki-client