Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/69e90794-13c6-35b4-82d8-096f40c40230.roa
File:                     69e90794-13c6-35b4-82d8-096f40c40230.roa (raw, json)
Hash identifier:          Tv+BHyES0wAwyC9RuwoeHxe7w5HxA6VvLU32qZ7GJAY=
Subject key identifier:   CA:FA:85:25:CA:40:C5:68:DD:E2:06:CA:6F:79:A4:5E:C9:4B:53:94
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A96367F5D4CC3F69A02BB0DD0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/69e90794-13c6-35b4-82d8-096f40c40230.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        174.65.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:7f:5d:4c:c3:f6:9a:02:bb:0d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=33f1b95c-78f8-4564-bbe9-99a6fec880a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:68:53:3c:53:18:8b:4c:af:f7:3b:44:27:
                    ba:18:30:aa:bd:21:b8:73:b5:20:02:95:6f:66:23:
                    15:1d:e7:54:0e:35:09:5c:aa:b6:20:9b:7a:b4:96:
                    3f:49:77:3f:93:e7:80:67:cb:08:fd:8a:04:14:e4:
                    ff:bf:22:2b:c6:d1:77:35:1a:bb:e4:86:86:29:c3:
                    2c:d6:8f:93:ba:16:bf:79:23:79:db:e1:4d:94:8f:
                    12:b7:20:42:84:7c:d9:99:2a:28:b4:57:90:ef:ed:
                    bf:14:11:fa:b2:68:e7:f1:ac:73:25:13:db:e2:9f:
                    f0:9a:af:d1:18:d2:00:6c:10:2e:99:ec:61:de:ee:
                    cd:f1:9d:79:f0:1f:50:91:f3:5b:c6:2e:8c:e9:ca:
                    3a:a8:10:46:ff:16:87:ea:52:f5:14:15:75:db:b2:
                    91:d1:aa:76:65:e6:fa:63:7b:4e:58:9a:94:85:85:
                    5a:78:d1:3f:e6:09:0e:b6:4c:8a:44:ca:51:4f:57:
                    9a:74:b7:78:9c:96:4e:b0:16:95:e7:52:56:fd:0c:
                    23:4b:34:b1:d2:48:17:42:fa:93:90:de:b0:1a:f6:
                    7c:c8:e2:3f:90:1b:40:ab:d4:c8:51:8b:0e:1f:ba:
                    16:14:e0:c6:4f:bb:df:0f:3f:2c:63:f0:73:26:51:
                    9d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FA:85:25:CA:40:C5:68:DD:E2:06:CA:6F:79:A4:5E:C9:4B:53:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/69e90794-13c6-35b4-82d8-096f40c40230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.65.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e7:0b:04:03:6c:47:46:b9:12:ec:9b:f6:1d:93:04:30:f3:
         19:e1:2e:b0:1e:5d:6f:1c:04:63:23:3f:6d:1a:37:4a:58:7a:
         bb:26:5a:43:85:28:6e:ab:f7:92:4f:08:9a:81:77:fe:c4:1b:
         ac:af:0c:26:4b:06:e5:fe:7a:18:68:96:63:11:e7:08:33:82:
         95:da:3f:05:df:e9:4b:05:cc:33:6b:63:4a:ad:93:0d:01:fe:
         23:2a:c8:78:2c:b0:8e:d9:06:0b:db:78:86:b1:cd:a6:8c:60:
         8e:63:3c:ff:3b:b5:78:3b:14:b4:69:c3:8a:97:d3:a8:a7:b7:
         b3:ec:75:80:fa:e1:13:48:fd:49:4d:f2:c5:96:8d:2b:f1:97:
         f1:74:43:bc:4f:3b:fa:1f:50:91:74:8e:95:ad:8a:1f:be:02:
         32:8c:a1:26:e9:47:5c:7c:32:54:bd:75:00:4b:40:51:55:4c:
         22:65:54:08:32:e0:80:f8:3b:66:36:8e:25:04:48:3b:dc:62:
         1a:28:72:8d:01:b0:cf:d0:8e:44:8b:cf:04:91:a6:85:4c:d5:
         36:e1:ab:54:d0:a6:9f:4d:1a:4f:e5:f5:9f:57:14:3e:d6:83:
         5c:83:86:5e:a6:d0:1a:b0:61:ba:e8:1a:d1:95:36:04:35:f5:
         8a:81:24:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:10:16 2025 by rpki-client