Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b9587bf-35bc-3c68-a1a7-1370d45d31b0.roa
File:                     3b9587bf-35bc-3c68-a1a7-1370d45d31b0.roa (raw, json)
Hash identifier:          KQnKMpEW+8LC0jn46kx4j+kw0THY+hTp5bu17gfh8go=
Subject key identifier:   50:57:BC:C9:28:42:40:A0:28:68:AF:C5:72:ED:76:3F:7E:E4:31:9E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A96366EB86C113A8695BC7C00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b9587bf-35bc-3c68-a1a7-1370d45d31b0.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        72.199.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:6e:b8:6c:11:3a:86:95:bc:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=e08b292d-30d4-4fb5-af57-3fd3bdf4c82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1b:9b:54:29:d6:58:c6:cb:02:55:18:48:87:
                    c8:76:4f:3b:55:5e:a0:74:1e:fa:b0:14:d4:e0:aa:
                    af:42:65:e8:b1:77:7b:b2:11:1c:10:10:aa:8c:58:
                    0d:fb:71:5f:f6:e5:95:c4:0c:b5:21:df:44:0a:ae:
                    06:5b:0f:f8:80:ff:a1:f1:66:ba:76:17:43:5f:c0:
                    32:60:0e:7e:f0:b7:e2:e0:86:74:ba:ac:39:62:1f:
                    fd:9e:82:95:14:fd:9d:ea:23:ec:64:21:06:dc:c0:
                    d2:7b:ac:f6:ce:a6:13:a8:38:8e:4e:e7:d4:e8:6e:
                    52:45:11:bd:4d:14:64:ac:f1:16:31:cf:cf:4c:c6:
                    f8:e6:bb:1c:e5:a3:b3:cf:ea:00:58:35:ac:3b:05:
                    13:33:c3:da:fe:0b:3b:ba:cd:a9:93:f4:4b:6d:ef:
                    ea:cb:95:f9:9f:07:14:c8:f3:85:45:99:60:f3:29:
                    b2:f9:99:65:0d:a1:86:8a:63:bc:7d:69:c6:88:e1:
                    f4:26:33:f2:6d:fa:17:88:a6:be:cb:d1:2c:73:8a:
                    f8:a8:af:c8:30:48:6a:ba:51:a3:65:c8:fd:9b:2d:
                    f0:84:1c:7e:d7:e3:05:ac:f3:bb:da:42:eb:95:29:
                    f6:65:c5:29:f2:32:a6:d5:0e:24:07:ba:78:61:02:
                    d3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:57:BC:C9:28:42:40:A0:28:68:AF:C5:72:ED:76:3F:7E:E4:31:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b9587bf-35bc-3c68-a1a7-1370d45d31b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.199.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:0d:e5:70:ba:e5:40:de:c5:d2:a5:69:55:7e:63:7d:cf:3c:
         01:72:ec:b2:dd:62:9c:83:22:fd:4b:3e:95:c0:eb:d0:76:86:
         e4:53:ea:c9:de:79:b9:7a:1c:94:01:be:b3:25:ae:92:c3:39:
         03:f7:32:55:9e:ab:69:77:c6:3c:a9:ab:d8:f8:21:7b:51:2e:
         f3:b4:07:06:92:64:42:09:0b:52:f8:76:a9:3e:6f:ce:6e:d9:
         94:45:b8:88:e7:70:31:51:29:95:51:4f:5d:47:ae:f7:46:e3:
         08:04:6f:8e:09:88:5d:29:37:9e:f3:af:6f:8c:d2:7a:c1:4a:
         2c:24:23:e7:c0:10:75:ca:3d:a4:3c:84:3f:50:5b:26:cf:30:
         9f:8e:eb:13:fe:20:a5:e8:ff:94:48:df:f9:51:06:73:d5:9f:
         6d:0c:ba:a1:80:b7:59:70:f6:af:d4:47:35:ac:18:ca:5c:5d:
         df:25:fa:5e:b9:8e:00:8a:d6:55:4c:dd:f1:bd:5b:79:f3:1e:
         f8:2d:cc:78:b7:b7:55:6c:a3:68:1b:df:42:ef:9d:ad:ea:a4:
         36:4f:b3:68:36:49:a1:b7:4a:72:73:be:ba:79:d6:13:a5:2b:
         72:f6:1d:78:d8:42:38:72:65:81:3b:28:a3:4a:ab:f5:a8:8a:
         14:0c:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:28:21 2025 by rpki-client