Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e13c3d5-9b89-3e9d-9d38-b13e7c6c49ab.roa
File:                     5e13c3d5-9b89-3e9d-9d38-b13e7c6c49ab.roa (raw, json)
Hash identifier:          kBtmgcEm+QZtRlejAb3+S+T0N7E9NTQGyuA/g1QcJ5Y=
Subject key identifier:   89:AB:91:33:FD:C6:9D:30:5C:D3:2D:79:C6:BE:13:17:E3:11:5A:DF
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A96362976FE40CABD73177240
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e13c3d5-9b89-3e9d-9d38-b13e7c6c49ab.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        72.209.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:29:76:fe:40:ca:bd:73:17:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=b9aefe94-9036-47cc-8504-ba2dd32fda1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:12:59:a8:f2:4e:58:97:f7:02:e9:08:2f:6f:
                    7c:ce:69:36:1e:47:fc:eb:bf:c8:c4:de:1a:e8:63:
                    06:30:23:c8:dc:8f:9f:9f:a0:bf:b5:07:31:89:ee:
                    d5:63:ee:64:8a:e3:b5:d3:9a:0c:4d:eb:70:ed:df:
                    87:1f:6e:8a:fc:57:15:5e:ba:24:ce:3f:a2:99:be:
                    8b:f3:55:f6:d8:52:96:31:f5:9a:85:e0:b4:09:7c:
                    61:83:42:ec:1b:83:41:55:30:a0:43:ee:0a:aa:6c:
                    5a:8f:47:08:fe:3f:03:d3:af:e4:91:bd:aa:89:5e:
                    98:43:a2:bc:ff:59:2c:30:89:04:bf:aa:ab:28:f5:
                    b4:6e:6c:bc:9f:b6:af:f2:71:77:57:c6:a9:49:cc:
                    5c:71:8e:93:d2:5c:00:71:95:8d:e7:b0:c0:47:f6:
                    c8:53:78:bb:24:5e:a1:9f:e6:6c:ec:1d:9c:c1:92:
                    d1:93:e5:be:c3:20:22:54:24:1d:1b:06:85:a2:c1:
                    17:2f:22:4a:c0:c9:a5:7c:cb:92:33:bb:81:8b:62:
                    fa:70:0e:58:a7:be:cc:1c:a8:3f:75:cb:01:51:26:
                    9a:1b:39:02:2d:19:cc:da:89:81:ea:13:2c:1f:69:
                    aa:23:31:d2:fb:9e:7e:9b:88:18:8e:71:e1:7a:bc:
                    56:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AB:91:33:FD:C6:9D:30:5C:D3:2D:79:C6:BE:13:17:E3:11:5A:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e13c3d5-9b89-3e9d-9d38-b13e7c6c49ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.209.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:5c:9b:b2:68:8d:12:92:16:92:9c:cf:66:d6:ff:68:ee:fc:
         d7:64:57:5b:0c:54:2d:57:71:cb:5a:1c:68:6a:95:ab:2e:e6:
         78:3e:42:d1:e7:0c:02:4d:7f:f9:b4:11:63:5c:5f:2b:99:96:
         08:17:bc:1b:23:0f:5f:8c:f2:5a:22:e3:45:81:07:52:a5:b6:
         ea:24:8c:df:43:e1:e3:13:89:d9:b4:05:3e:f3:7a:8d:62:c9:
         24:f7:65:0f:a9:41:20:bf:62:91:05:ef:5e:d5:d5:a9:7a:ce:
         40:75:d8:85:74:e0:e6:20:46:18:e8:3a:b6:21:79:59:d2:79:
         65:db:ae:df:4e:55:8a:65:4a:38:7f:36:46:eb:5e:3d:c2:0e:
         46:40:17:9e:be:48:d5:cd:5c:86:f9:8d:69:92:35:10:22:91:
         25:94:a4:10:fa:06:0d:f8:6d:37:13:92:7a:5b:14:3e:ca:3f:
         db:8b:b0:e3:1f:70:51:0f:70:d6:58:6f:89:01:7b:6c:a6:32:
         ef:7b:d4:fe:f9:12:7b:b6:ef:59:8f:9b:05:73:eb:6c:e7:a5:
         ad:ec:29:5b:74:39:b6:aa:84:0f:72:21:8f:c2:80:e6:52:16:
         2b:69:83:43:65:1d:15:73:2e:3c:17:aa:75:b4:07:23:90:d7:
         4a:28:15:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:41 2025 by rpki-client