Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/083189c9-8744-3de6-9338-f16983665aad.roa
File:                     083189c9-8744-3de6-9338-f16983665aad.roa (raw, json)
Hash identifier:          ch3KMu2drk5Gn4Ose8DVWWHDDJJBFpeFagunvwjvM9M=
Subject key identifier:   77:3C:AC:17:52:07:5E:14:7D:0C:90:FF:96:B3:56:F5:B4:44:3F:4F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A96364AD4E44082E7DF84A780
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/083189c9-8744-3de6-9338-f16983665aad.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        72.218.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:4a:d4:e4:40:82:e7:df:84:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=a09da9fa-28d2-4877-9556-abe2a2ae375e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4e:09:2a:7e:e8:eb:36:54:7a:cc:d9:74:14:
                    75:5e:46:87:50:69:61:68:9d:1f:7f:18:ae:6f:30:
                    cc:5d:f4:10:f4:7d:49:ee:05:12:87:14:93:e7:47:
                    74:48:6f:dd:f0:90:4e:c8:7d:c0:a3:73:54:6d:05:
                    06:5f:7f:ff:54:ed:5d:1c:42:5e:d0:7c:48:33:04:
                    30:be:2b:75:69:88:fd:75:88:fd:33:5c:1b:c0:03:
                    e5:a7:45:59:c5:f0:2a:af:13:25:16:7f:fb:06:12:
                    52:fa:7c:41:19:ee:1d:56:c3:46:fe:39:fe:52:bf:
                    f7:0e:b9:23:58:4a:f6:d3:73:d0:08:81:38:57:19:
                    a0:7c:eb:9b:0d:48:82:0a:65:42:e9:76:d5:b0:19:
                    2f:d5:f7:3e:4f:e0:2a:42:f2:9b:b9:88:c1:f2:34:
                    4f:0f:28:30:39:33:1a:14:de:b6:e4:83:e1:ec:d1:
                    a4:b1:67:0c:47:d0:74:34:46:cd:f7:03:c0:e7:1c:
                    fc:09:cc:65:46:f0:fe:c9:0a:54:5e:dd:9e:f7:81:
                    4a:94:2b:35:19:fc:65:85:38:7b:ea:55:87:11:d1:
                    8d:04:8b:e1:8a:cb:36:9f:c1:e8:b0:fc:71:81:29:
                    64:39:4e:b2:52:86:7a:ac:e7:23:2c:dd:d4:ef:30:
                    23:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3C:AC:17:52:07:5E:14:7D:0C:90:FF:96:B3:56:F5:B4:44:3F:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/083189c9-8744-3de6-9338-f16983665aad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.218.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:6d:2f:39:70:13:de:b3:0f:3d:60:9a:bc:9d:48:2a:9c:fc:
         c8:d5:b3:32:56:54:33:d1:de:77:50:02:e8:fc:f7:80:b3:82:
         11:62:3d:4e:45:a0:ec:a5:e0:e8:d6:5c:58:a9:1c:7c:67:04:
         1e:6e:5c:fb:71:d4:17:c1:17:83:5d:3d:2b:57:72:5b:22:24:
         c8:ba:76:35:fd:a3:c5:de:f7:39:19:f4:9e:5d:da:ed:9c:2e:
         8c:de:31:1f:34:77:b7:18:16:fd:d7:b2:20:d5:8f:94:e7:46:
         1d:98:17:82:b1:06:9d:ba:8f:8f:6b:a7:c7:38:1e:23:91:a3:
         29:54:f4:5f:ab:95:a6:c1:46:2e:65:d9:a6:e0:26:10:73:ee:
         dd:f9:03:7a:08:c8:38:14:92:a2:a6:0e:92:72:7b:3a:a5:14:
         85:95:43:ed:22:57:02:5f:dd:82:8f:a9:31:31:19:1a:0a:87:
         8d:20:71:eb:e7:9f:8a:19:4f:ac:4d:d2:91:40:e4:57:aa:7a:
         9a:af:a7:b0:07:ff:d2:36:7b:7b:a2:23:fa:2e:8d:e1:3f:74:
         69:b2:ad:55:3c:5f:2f:20:bc:b0:50:e5:c8:e5:8a:20:96:49:
         d8:42:6e:e2:9b:3c:e8:be:6c:0a:ab:c0:dd:2e:84:40:7f:c8:
         c7:0e:46:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:36 2025 by rpki-client