Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9ec68d3-1c25-3752-b016-9390802ab2ed.roa
File:                     d9ec68d3-1c25-3752-b016-9390802ab2ed.roa (raw, json)
Hash identifier:          iFfQBfd7TG+0iddjFYZJL1xKGTOIzLKWh4WBDqqYz6k=
Subject key identifier:   98:74:34:C2:0D:03:73:60:89:7B:D4:E7:A5:AD:93:1C:9F:C8:19:1A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A963671B320B845646BA158C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9ec68d3-1c25-3752-b016-9390802ab2ed.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        72.220.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:71:b3:20:b8:45:64:6b:a1:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=94104f52-19d8-444c-9f40-f3f5b661ba9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:17:01:13:e3:84:09:df:67:ea:18:e6:d4:86:
                    c1:89:16:8c:56:58:fc:24:c9:0e:55:64:ca:bb:f2:
                    29:f5:49:12:21:28:c9:aa:35:df:a3:9e:93:53:6a:
                    d1:4c:1a:28:29:74:99:53:c3:24:44:ee:bc:97:fe:
                    0a:8d:53:cf:ba:6b:11:2b:3d:39:e0:1e:ed:8c:4e:
                    c8:7e:57:c1:36:16:ae:49:9a:b4:75:ca:7c:14:9c:
                    73:f7:a3:b6:22:7e:4a:01:52:c6:bb:95:ef:61:83:
                    43:1c:29:df:b2:3e:75:20:76:f2:04:28:9d:55:cb:
                    ba:04:49:40:b9:b0:58:5b:16:53:ee:fc:a8:de:84:
                    31:5f:3a:71:98:19:02:71:ba:ff:32:6e:b7:83:f4:
                    aa:64:80:a6:ca:66:b7:b4:cc:73:06:1b:e4:20:1f:
                    c4:b3:18:91:77:a2:3a:e9:4c:8e:51:b0:f4:e3:a9:
                    fe:d6:68:0e:f8:fd:7f:5c:dd:d8:86:73:4d:45:b6:
                    21:ec:75:b4:5c:bc:a4:aa:80:26:c2:14:bd:8e:b8:
                    e0:e6:10:18:f2:a2:7e:8e:13:d4:75:96:cf:77:f7:
                    ef:a3:56:7e:82:77:3a:54:91:4c:cb:cd:86:f1:d5:
                    2c:0c:07:c6:7a:42:5b:08:97:a6:3c:97:a4:eb:28:
                    ee:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:74:34:C2:0D:03:73:60:89:7B:D4:E7:A5:AD:93:1C:9F:C8:19:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9ec68d3-1c25-3752-b016-9390802ab2ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.220.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:26:f0:3d:03:db:24:bd:1a:5a:df:e3:07:6c:13:53:5d:66:
         b9:85:9e:de:7d:4c:ac:63:c9:bf:f6:08:85:0a:a1:26:0b:74:
         2c:55:f4:d1:b5:84:32:ed:e9:a0:34:a6:6b:a0:8c:88:6a:89:
         24:e2:91:70:2d:83:04:fb:76:41:ae:81:26:9c:5b:18:83:45:
         c4:80:0f:30:49:f9:b3:83:c9:75:9a:44:0f:7a:a7:44:56:af:
         a4:45:e6:3d:90:15:24:6f:eb:2d:77:c2:44:d4:ce:5f:1a:14:
         c7:7c:51:12:e4:71:41:04:21:95:0d:59:49:97:07:0f:eb:89:
         88:6d:84:df:01:6f:3c:72:cf:25:0a:58:e4:2c:92:73:1b:a9:
         5d:a9:a5:c3:86:0f:ce:a2:e4:28:3e:18:f4:95:f8:33:73:61:
         26:51:34:9d:37:4f:17:85:53:59:9f:10:43:65:56:c9:3a:b5:
         36:d8:3c:49:a0:53:c2:d0:57:46:2c:a6:01:b0:42:c7:26:b7:
         6a:b1:62:07:b9:3b:bb:ec:67:37:ba:f9:17:0b:28:90:7f:d5:
         0b:c3:7c:05:56:95:cb:e9:3e:bb:6a:96:84:82:f0:44:65:fa:
         b5:ac:17:5c:58:ef:9b:54:bb:2f:8a:a7:f0:3f:0c:e8:60:af:
         dc:9f:da:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:46:31 2025 by rpki-client