Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/80cd4dc6-086a-302c-a05d-fd5ea09356f1.roa
File:                     80cd4dc6-086a-302c-a05d-fd5ea09356f1.roa (raw, json)
Hash identifier:          2PPlbEitC2b0XZVAlBpMIWEvH940xsn+7jUSqpGU7AE=
Subject key identifier:   5C:3C:69:2A:2E:71:6A:EF:F7:ED:01:C2:F4:70:3D:9E:6E:0F:DA:7E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A96367552234E60DD71500300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/80cd4dc6-086a-302c-a05d-fd5ea09356f1.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        72.220.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:75:52:23:4e:60:dd:71:50:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=85107407-c0e8-4b3e-8de0-532c97a6b214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:dd:6d:59:48:66:18:92:3b:d7:62:7d:c8:
                    3a:b6:3b:47:2f:8f:a5:58:b4:9e:1f:a9:ff:3a:7b:
                    cb:48:20:73:06:fc:54:8f:d2:e4:3c:6a:5a:fc:72:
                    60:2e:e3:d2:a9:86:bf:d4:7c:59:25:66:f7:d4:45:
                    e5:73:7a:37:94:9f:68:0c:12:3b:69:04:40:cf:90:
                    8b:50:12:4e:cc:b3:fc:ad:e6:e6:9f:2b:e1:66:11:
                    5a:df:9f:2e:fb:9f:0b:57:07:0b:b8:c8:47:b9:9e:
                    6c:02:78:ea:60:11:6e:2a:41:7e:e2:13:16:52:a1:
                    66:5b:78:0b:e9:3d:86:a0:21:ac:3a:1a:3d:58:29:
                    73:1c:35:5e:43:59:55:14:a1:2c:10:cc:67:95:c5:
                    9a:80:97:d0:82:90:4d:77:7e:f6:2b:4e:fb:4d:12:
                    f5:94:8b:b2:42:e7:c9:3e:58:9d:41:89:a2:cc:90:
                    68:67:5f:d5:c1:c5:dd:03:62:69:4c:68:a8:db:56:
                    45:6a:2c:62:66:ce:78:18:be:4e:4d:cc:17:51:c7:
                    3d:83:2b:53:cf:a3:f3:e5:e3:42:10:ce:1d:77:b0:
                    0d:e6:86:95:00:dc:ae:7f:87:ad:b1:9e:f7:89:b6:
                    e6:92:5c:43:18:cd:3d:54:f6:a6:dd:44:47:44:40:
                    6c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3C:69:2A:2E:71:6A:EF:F7:ED:01:C2:F4:70:3D:9E:6E:0F:DA:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/80cd4dc6-086a-302c-a05d-fd5ea09356f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.220.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:89:9a:ee:5c:a3:32:66:14:58:93:6e:3e:e2:94:34:4b:b2:
         b5:79:fe:cb:df:1b:ed:b9:8f:95:56:0c:72:55:38:a2:eb:18:
         ce:90:6f:92:82:27:38:99:d4:f0:08:c9:6d:61:ca:f9:41:f4:
         47:44:c2:87:55:06:25:17:43:c6:92:c1:6d:31:aa:ae:15:7f:
         cd:bb:19:ce:86:c1:98:02:c5:f7:ae:6c:6c:1e:8b:1c:99:05:
         9e:c9:dd:b8:6a:4e:77:99:26:3b:f2:01:fe:6a:e6:60:59:fa:
         33:1a:62:e4:2e:23:17:84:6d:12:8a:ed:f8:75:10:f7:5a:b6:
         1d:aa:29:13:a5:65:a0:82:44:9c:5b:52:82:a7:b0:5c:6c:86:
         e3:0c:38:8b:c4:a1:36:78:c9:f9:f3:9f:10:ca:7f:14:e7:79:
         2b:fa:14:89:1e:4b:c1:0c:38:58:72:31:57:ec:4c:8f:fd:6f:
         d7:69:9a:6d:bc:0c:58:32:f2:f5:51:4d:49:32:a0:ce:a7:81:
         61:8f:4d:89:a9:74:0c:85:6b:35:c6:be:8e:5a:00:49:45:06:
         a5:a3:42:6d:78:c9:41:10:96:e0:86:f7:f4:f4:22:23:50:da:
         bb:7f:54:be:f4:3a:a8:96:52:51:ee:3c:64:81:db:f9:9f:cb:
         7a:2a:2f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:08:12 2025 by rpki-client