Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42cc8781-fcbe-3204-b79d-344324376dc9.roa
File:                     42cc8781-fcbe-3204-b79d-344324376dc9.roa (raw, json)
Hash identifier:          95XLGSLpdGdESStxrEBR8ZfeIwjlUSVxofEFSX9UTjo=
Subject key identifier:   19:BA:95:B6:46:87:F1:A4:26:0C:5A:71:40:EA:58:C6:AB:0B:57:E2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A963626CC80DF5549D8E97300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42cc8781-fcbe-3204-b79d-344324376dc9.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        72.192.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:26:cc:80:df:55:49:d8:e9:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=44c05c41-1899-432a-9238-ff263d6cb877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:43:01:18:d7:c9:9e:b8:f4:e5:e2:4c:91:
                    d8:bc:05:c0:28:13:a8:95:53:28:33:e9:32:27:1b:
                    aa:72:ad:48:e7:17:c2:69:11:36:a3:a4:25:24:14:
                    a5:50:f9:ee:73:96:a2:ba:34:64:b4:1f:50:6e:81:
                    6f:27:a0:93:fc:3c:40:b5:e2:83:96:a7:fe:57:65:
                    d5:6b:ee:96:aa:c0:d2:e0:c1:bf:d4:58:41:d7:d7:
                    02:be:ed:65:1c:bd:ef:6d:e0:cf:de:74:44:4d:47:
                    1e:ba:11:bd:59:70:11:7b:a4:7b:d7:c2:d1:5f:15:
                    d3:e8:69:c5:22:f3:25:c6:59:ad:42:75:78:eb:c4:
                    ef:e8:68:f5:d1:dc:02:6e:92:bd:ed:18:90:4a:b7:
                    34:eb:e5:bf:ab:06:ab:fc:cc:ec:28:34:59:09:c1:
                    a4:0d:05:58:5e:76:f0:2d:bc:08:be:18:64:eb:21:
                    fd:73:4b:42:ba:42:89:90:61:ab:3d:56:0a:f7:32:
                    a7:96:33:53:94:0e:e1:6e:23:1d:15:bc:f5:1e:9a:
                    ad:a6:8f:07:9f:d9:72:0f:40:83:e8:35:29:4c:45:
                    3f:85:21:3c:8d:85:e2:8e:52:06:1b:74:ff:04:eb:
                    6d:d3:b2:ce:c0:55:b2:b6:f8:5f:3b:f7:07:ad:0c:
                    e4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BA:95:B6:46:87:F1:A4:26:0C:5A:71:40:EA:58:C6:AB:0B:57:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42cc8781-fcbe-3204-b79d-344324376dc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.192.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:da:32:2e:07:30:16:d9:14:99:5a:5e:3c:98:c8:ae:4f:27:
         9c:3e:d3:88:24:bc:06:d6:f5:7b:b4:b4:56:4b:cb:c5:39:fe:
         e7:16:f3:2c:28:2c:f1:39:ef:36:52:2e:59:4c:a7:9c:5c:a5:
         8b:c8:4c:39:7d:05:f7:45:ab:ea:17:35:c1:1c:c7:88:ad:a1:
         26:5f:3f:c4:99:ea:32:51:71:27:fa:ee:fe:c1:24:7e:0b:c1:
         74:9e:95:52:61:13:76:fa:60:8c:88:6f:41:d2:76:c1:e0:3d:
         89:2b:f8:5e:8f:bb:66:94:a5:6c:b7:79:03:e4:07:80:5f:2a:
         84:f5:b9:af:03:e6:a5:7a:c2:2a:39:72:ec:1f:83:1f:2f:9e:
         d0:76:db:0f:08:4b:86:06:36:00:9d:f1:dc:82:93:ee:27:8f:
         bc:fc:02:38:bd:a3:0f:e2:c1:bb:3a:0e:d3:54:dc:8b:97:d5:
         35:1d:48:8d:1f:b3:e1:0d:43:d5:53:d6:e1:3e:9b:68:ba:36:
         c0:58:bf:6c:05:e4:36:70:26:a9:50:cb:ef:46:3a:38:77:a0:
         e4:d2:82:f7:fe:e4:c6:aa:af:ab:bc:82:58:20:1a:c2:73:1b:
         46:a2:cd:47:cd:d2:50:a7:59:fe:35:56:20:ae:59:9a:15:1f:
         1a:66:78:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNibMgN9VSdjpcwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk
NDRjMDVjNDEtMTg5OS00MzJhLTkyMzgtZmYyNjNkNmNiODc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd5DARjXyZ649OXiTJHYvAXAKBOolVMoM+ky
Jxuqcq1I5xfCaRE2o6QlJBSlUPnuc5aiujRktB9QboFvJ6CT/DxAteKDlqf+V2XV
a+6WqsDS4MG/1FhB19cCvu1lHL3vbeDP3nRETUceuhG9WXARe6R718LRXxXT6GnF
IvMlxlmtQnV468Tv6Gj10dwCbpK97RiQSrc06+W/qwar/MzsKDRZCcGkDQVYXnbw
LbwIvhhk6yH9c0tCukKJkGGrPVYK9zKnljNTlA7hbiMdFbz1Hpqtpo8Hn9lyD0CD
6DUpTEU/hSE8jYXijlIGG3T/BOtt07LOwFWytvhfO/cHrQzkwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBm6lbZGh/GkJgxacUDqWMarC1fiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDJjYzg3ODEtZmNiZS0z
MjA0LWI3OWQtMzQ0MzI0Mzc2ZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMAEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjaMi4HMBbZFJlaXjyYyK5PJ5w+04gkvAbW9Xu0tFZLy8U5/ucW8ywo
LPE57zZSLllMp5xcpYvITDl9BfdFq+oXNcEcx4itoSZfP8SZ6jJRcSf67v7BJH4L
wXSelVJhE3b6YIyIb0HSdsHgPYkr+F6Pu2aUpWy3eQPkB4BfKoT1ua8D5qV6wio5
cuwfgx8vntB22w8IS4YGNgCd8dyCk+4nj7z8Aji9ow/iwbs6DtNU3IuX1TUdSI0f
s+ENQ9VT1uE+m2i6NsBYv2wF5DZwJqlQy+9GOjh3oOTSgvf+5Maqr6u8glggGsJz
G0aizUfN0lCnWf41ViCuWZoVHxpmeOs=
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:59:55 2025 by rpki-client