Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a70cc90b-824d-3edf-9d0f-08d86f66f7f7.roa
File:                     a70cc90b-824d-3edf-9d0f-08d86f66f7f7.roa (raw, json)
Hash identifier:          0pzPX/sOwXeQ4YdmD8Jni9YhmsleEDna75zkhPQ/c54=
Subject key identifier:   67:2F:B3:03:33:6A:3B:44:FE:6D:3B:D1:4E:D1:52:18:D0:F9:D3:EF
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584AC0164C19CDFC23C6DC9CC4C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a70cc90b-824d-3edf-9d0f-08d86f66f7f7.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     22773
IP address blocks:        72.194.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:4c:19:cd:fc:23:c6:dc:9c:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=b3c61dbf-dc3a-4166-82ea-bec04b0b3c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8c:24:6d:63:3c:43:0f:07:32:55:49:c2:f1:
                    a7:08:e0:bd:7a:b9:c8:9d:37:53:f5:db:76:f3:3d:
                    ae:21:9f:8d:f7:85:63:fb:aa:08:9b:d4:e5:0a:c1:
                    77:b6:d2:29:42:21:ac:b2:28:bc:29:e9:96:d6:ba:
                    ab:d1:cd:64:bd:c1:a5:4e:90:3a:eb:1a:cb:6e:de:
                    d7:58:cd:99:db:5b:17:dc:f5:da:92:ce:7f:c7:41:
                    16:99:08:4f:9e:d3:dd:b5:24:13:77:e9:98:ec:22:
                    f1:e6:3c:70:b2:35:b1:91:00:6a:94:a9:9d:8e:ca:
                    e9:3f:51:77:44:34:b9:d4:34:cb:e0:d6:cc:25:29:
                    54:31:45:fd:07:a0:a2:89:8c:2c:fd:2d:a3:a5:69:
                    4f:f4:0c:32:f1:8a:b8:3d:4d:33:08:76:b2:88:d3:
                    f5:96:e7:52:5f:51:83:fb:f1:b9:db:f2:e3:6d:5d:
                    21:3c:ac:36:10:17:18:61:da:24:92:67:3f:c2:fc:
                    de:2c:5d:6d:77:9b:0b:44:fc:46:ac:f0:c6:51:aa:
                    f3:fc:89:fb:fc:1c:ea:a7:46:c9:54:b4:49:1a:90:
                    bd:07:a7:6a:d8:aa:bf:27:81:ae:9a:57:a3:63:af:
                    4d:2a:3a:82:63:c0:d0:11:f7:33:3a:36:63:e0:00:
                    2d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2F:B3:03:33:6A:3B:44:FE:6D:3B:D1:4E:D1:52:18:D0:F9:D3:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a70cc90b-824d-3edf-9d0f-08d86f66f7f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.194.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7f:ac:84:3b:bb:83:14:b6:da:6f:a5:f5:be:cb:ef:5b:6f:
         f5:31:97:9b:f5:e0:6b:a1:6f:3b:04:6a:98:06:1e:1a:e6:9e:
         40:4a:a9:c0:e4:02:1b:5b:64:21:82:40:63:fe:b9:31:6a:6f:
         17:c4:22:c1:e1:96:d2:db:9e:d7:8a:43:b8:cf:ea:e2:c9:cc:
         c4:db:05:70:47:36:00:7c:ab:1b:ab:27:2b:27:81:68:26:65:
         d6:b1:bd:d8:79:a3:bf:55:cf:66:98:6d:a0:34:db:84:db:08:
         cb:36:e6:3a:eb:7f:43:3d:f5:6a:72:e7:f6:f0:aa:c7:a7:a2:
         34:1b:ad:f7:fa:cd:40:0a:37:b7:c4:8e:0b:70:8b:14:71:d8:
         9f:a7:08:64:0f:fc:ad:fe:03:60:fc:60:93:6d:24:8c:33:1b:
         85:b2:51:36:00:01:99:81:e1:ad:53:e0:e8:c7:0c:5b:e3:0a:
         50:12:8f:e7:34:3e:f3:44:c3:ed:a1:bf:aa:1f:92:06:61:f9:
         a8:b2:70:e5:be:02:9b:0a:1b:12:c0:db:be:f3:e1:e9:2b:4d:
         f7:a3:74:1f:11:59:66:82:b8:5f:30:48:7e:9f:67:ca:37:a4:
         57:de:97:42:22:fc:be:8e:62:20:92:5d:2d:0c:56:0f:93:dc:
         f9:5c:fa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:50:40 2025 by rpki-client