Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5fb740fc-e59e-33f3-bd58-31f76f386c49.roa
File:                     5fb740fc-e59e-33f3-bd58-31f76f386c49.roa (raw, json)
Hash identifier:          8TJtNw1hziSWIlVI0vjAcHvuzEzI088xKt4FTf3pVes=
Subject key identifier:   EC:54:CC:91:AA:52:96:49:2E:D0:C4:FA:F2:5D:36:D9:EF:D1:67:C7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A963675F181E54F73F0575500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5fb740fc-e59e-33f3-bd58-31f76f386c49.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        72.221.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:75:f1:81:e5:4f:73:f0:57:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=a3afae4b-7e84-4985-9fb4-d6e4fd73b2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:86:f0:f4:3a:21:0d:40:3f:80:50:27:f6:8a:
                    a3:d3:a9:da:3d:22:a1:b2:f9:e0:80:7b:d7:a6:47:
                    78:b6:91:95:1f:74:d6:63:00:ab:16:63:6c:c3:a0:
                    2b:78:3f:3c:5c:2d:bf:3f:08:bc:78:3b:a8:f2:f3:
                    52:03:20:ff:c0:67:11:f6:20:65:9e:7c:d6:87:ca:
                    34:d9:d3:8f:50:fe:a2:9f:f3:c0:c7:1d:8b:f8:85:
                    72:ea:d4:c4:36:c6:03:4b:4e:30:79:aa:41:ef:8b:
                    7b:55:44:8e:48:93:e6:e6:2e:6a:ba:04:57:4c:fa:
                    ef:e6:a8:26:31:a2:68:37:57:bc:ab:bc:9e:5a:6f:
                    a6:e1:64:e9:0a:e9:aa:3b:a8:67:af:5b:dc:26:65:
                    81:a1:af:d2:b1:43:3d:a6:b2:ae:c2:59:24:4f:21:
                    d3:55:67:a4:e9:b7:f2:83:96:9f:1f:13:4d:8c:13:
                    aa:74:58:3e:57:ac:f7:56:4d:66:65:14:d5:ee:9a:
                    5e:39:98:b4:4c:7a:01:8a:19:52:0c:f9:38:fb:c3:
                    ea:07:d2:47:d0:49:be:ce:b6:02:a4:45:eb:ce:4e:
                    41:25:83:86:eb:8e:9e:64:ab:65:d4:1e:ec:a4:ab:
                    fd:d6:a3:a8:71:3d:ce:bc:30:71:17:2b:91:15:b0:
                    21:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:54:CC:91:AA:52:96:49:2E:D0:C4:FA:F2:5D:36:D9:EF:D1:67:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5fb740fc-e59e-33f3-bd58-31f76f386c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.221.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f6:6c:89:95:af:6a:6b:8a:3d:9b:93:c2:6c:93:06:89:e1:
         76:d2:d8:47:eb:e0:b8:ad:cf:6f:c1:cb:b0:de:36:48:78:d4:
         5d:e4:1c:2a:5e:79:3c:83:ad:ed:53:80:f0:bb:4f:23:6f:dc:
         1b:2f:f9:d6:cd:76:e5:83:46:c7:29:13:65:02:f6:05:db:c0:
         8f:7d:46:90:53:59:e8:05:a0:ef:c1:fb:4a:81:3d:80:e5:88:
         0c:bc:3c:76:83:fe:fa:fc:ab:51:b3:59:90:5f:90:a7:51:63:
         b2:fd:01:52:55:95:83:60:3b:a6:c2:ec:b4:d0:13:21:dd:d5:
         76:1b:55:53:50:7e:b6:17:48:ff:3a:75:70:a0:fe:a2:f3:5e:
         2e:f3:49:77:bc:59:bf:21:e9:ed:9c:ed:7a:b9:ac:7e:eb:97:
         7a:80:c8:dd:15:9e:d4:48:59:d5:55:d4:bf:fb:c0:3e:95:a5:
         da:35:98:a8:51:62:c6:29:29:84:87:92:0b:2a:eb:37:57:cf:
         d5:f8:75:56:99:e8:12:eb:28:1b:c0:6f:91:0b:ad:3a:16:6c:
         c0:08:f8:3f:9d:04:25:d8:9e:a4:39:bf:76:ce:dc:75:1c:09:
         cf:f9:65:10:5b:c6:97:65:5b:df:cf:8a:1d:83:d9:d0:6a:84:
         4c:ad:ed:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:12:38 2025 by rpki-client