Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07e7864f-1595-35ef-85a5-15534e8532f8.roa
File:                     07e7864f-1595-35ef-85a5-15534e8532f8.roa (raw, json)
Hash identifier:          q+lXbk5MJ02Dqy0IqcUdzRz/u8O6LXu14Agpit1mCJQ=
Subject key identifier:   87:31:CB:BF:92:36:3D:95:92:AC:74:D2:DB:AE:4C:1B:70:B3:3F:E5
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E15E47FBF479D159413FD4B00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07e7864f-1595-35ef-85a5-15534e8532f8.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     22773
IP address blocks:        72.199.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:7f:bf:47:9d:15:94:13:fd:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=08097c2f-ab3b-47d6-9c3c-59931cb1a9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f0:80:14:fb:15:78:86:21:9e:71:db:22:20:
                    c2:91:56:41:f1:5b:a8:81:88:aa:a3:c1:a9:80:f0:
                    7e:17:bc:99:46:68:59:21:c3:d2:7e:bd:d3:c9:04:
                    18:18:15:ac:a1:a5:4a:e1:e2:ef:f7:86:4c:15:a8:
                    8a:ba:b3:7b:18:d9:83:48:4c:ef:68:dc:06:2c:d1:
                    62:1e:5c:90:5b:03:fa:47:37:bf:cb:ac:0a:44:a3:
                    8c:46:b3:13:0e:6f:65:93:00:a7:da:2f:7a:0f:a0:
                    4a:c4:8c:58:f2:47:47:aa:7b:2f:e8:72:f0:41:e6:
                    19:6c:e2:ab:93:bb:e0:c8:09:e8:4f:96:25:de:61:
                    25:13:c1:ad:39:7a:72:98:bf:8e:0f:fb:93:08:31:
                    57:10:17:aa:a4:2d:3d:90:da:ab:79:5b:f2:f3:63:
                    eb:42:59:6b:e7:88:6c:43:f9:29:0c:d6:b1:68:80:
                    22:87:13:84:06:18:ce:5f:d4:3c:d9:1e:ca:8f:d4:
                    6b:ee:8e:f7:f4:f0:85:0e:74:e4:04:7c:5f:6d:6e:
                    ca:4b:14:f2:50:cf:c7:e0:4a:b8:d3:21:14:6c:f9:
                    e4:79:86:02:8e:35:15:40:1f:39:1e:28:fe:67:3d:
                    eb:e3:52:6f:3c:98:b9:a2:91:ab:18:4f:35:cb:bc:
                    ba:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:31:CB:BF:92:36:3D:95:92:AC:74:D2:DB:AE:4C:1B:70:B3:3F:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07e7864f-1595-35ef-85a5-15534e8532f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.199.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:0e:36:d8:8c:a2:05:35:a0:39:35:83:b1:16:7c:ff:fb:64:
         32:89:97:a3:07:5c:b9:6b:91:a3:47:e3:2a:a6:8b:4a:b9:a1:
         5b:dd:4b:83:00:2f:92:24:b7:48:b3:16:7d:33:e1:e1:23:d0:
         0c:ac:fb:0c:10:aa:95:ba:bc:e8:3c:b4:25:0d:d3:56:ee:05:
         5e:f2:b2:c6:e9:bf:73:61:ed:9d:72:dd:72:c2:6e:ed:26:e1:
         a2:15:42:d6:07:7e:e8:36:1a:67:be:b6:63:3c:91:9f:f4:fb:
         d2:4e:13:79:da:70:18:e2:16:7c:d9:7d:fa:bc:ce:eb:87:fa:
         7c:99:01:24:f5:88:b9:18:5b:05:fd:d3:03:19:8c:d0:d4:c4:
         b6:5e:22:f4:ea:a7:a7:98:3d:63:04:71:92:ad:89:6a:18:14:
         d8:b4:de:9d:db:c5:2f:9b:c1:c1:02:82:67:6f:c3:49:53:14:
         44:e2:e9:5d:65:b0:b9:68:0a:0d:bd:fa:92:22:23:9c:6c:af:
         4a:ed:ac:e3:00:71:53:d4:23:33:2d:39:d9:d2:06:53:20:ef:
         f3:6e:d1:42:cd:d3:a6:5e:02:07:9c:0d:90:f1:be:c6:a3:68:
         19:4e:49:d2:42:89:13:b3:d9:e0:f8:5b:3a:b5:01:28:3f:52:
         25:62:94:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:02:12 2026 by rpki-client