Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eeae0b94-c321-30ee-8cb1-dfba16d3a3ff.roa
File:                     eeae0b94-c321-30ee-8cb1-dfba16d3a3ff.roa (raw, json)
Hash identifier:          ihFfNl29nyFP+9tWeoNQjBbhc8BhRPZg9mH9fNtR7Ug=
Subject key identifier:   48:11:77:A3:9B:50:59:98:E7:79:7C:7F:09:9B:36:80:92:15:F4:FC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A963676539DACAA20A5717CC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eeae0b94-c321-30ee-8cb1-dfba16d3a3ff.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        72.221.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:76:53:9d:ac:aa:20:a5:71:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=cc835d59-cf6a-457c-a042-ed909d21e85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:01:1c:bd:90:9b:79:d2:d7:cf:b9:14:8d:d0:
                    17:ec:b8:11:d2:82:f6:90:38:3a:61:0c:b1:e9:bd:
                    76:9f:dc:c1:e4:ad:d3:17:a7:13:61:1d:e0:14:31:
                    8e:69:c8:de:92:ab:9d:88:12:3d:fd:38:89:16:81:
                    22:38:19:0a:20:5b:46:67:29:d6:b8:fe:3b:38:54:
                    1e:37:2c:f6:d0:ae:63:bd:1c:52:08:a3:6c:94:b7:
                    21:0e:c5:3f:c2:b8:02:85:41:1c:c1:26:19:b3:a5:
                    2a:19:90:45:d0:13:f4:d8:f5:79:b3:10:aa:01:6d:
                    99:4b:72:2f:38:0a:b3:a4:50:c9:3d:27:3d:4c:20:
                    bd:c1:9e:78:f7:31:96:0a:69:17:d0:2d:c4:58:22:
                    68:08:b3:73:32:40:b9:99:b5:52:f1:a0:a1:66:4f:
                    84:d2:e7:5b:bf:42:99:0e:44:ff:56:94:10:41:32:
                    ce:21:6e:50:d8:a3:24:6d:ed:22:24:a9:ce:e0:1b:
                    b2:85:b0:97:23:c5:84:f9:44:d8:1f:7d:44:c7:77:
                    88:6c:53:3f:1f:9b:11:04:99:c4:54:36:70:a9:ac:
                    6b:fe:ec:98:e6:12:b4:01:33:ee:a3:aa:fc:bf:16:
                    d1:72:83:bd:51:3c:89:4b:53:a7:a7:03:19:5c:bb:
                    d7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:11:77:A3:9B:50:59:98:E7:79:7C:7F:09:9B:36:80:92:15:F4:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eeae0b94-c321-30ee-8cb1-dfba16d3a3ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.221.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:49:43:a1:de:4b:cb:1f:04:e9:2d:a2:5a:5b:93:13:a8:55:
         9b:0d:f7:bb:c3:de:bf:0b:46:ef:7c:95:00:51:06:04:74:41:
         61:0d:37:4d:bd:5d:d3:80:11:11:bd:de:0d:68:f2:f5:91:f8:
         19:25:3d:bf:44:37:54:d9:a7:f4:6f:c7:32:2c:fc:6e:18:c0:
         e4:08:28:a0:4c:09:ee:a2:4e:20:c7:c7:65:bc:f7:38:03:04:
         a9:29:f7:9d:cc:de:18:1f:9e:c4:f1:e5:40:53:cd:19:f7:1b:
         ab:8e:cb:73:bb:9e:69:db:2a:a1:b8:90:d9:a0:f3:c3:67:35:
         fe:1e:4d:0c:94:0d:77:fe:82:48:f2:f2:20:ea:c9:22:8f:ef:
         3d:a7:51:98:4f:15:89:9c:49:c7:40:30:f2:37:a6:03:a1:46:
         b7:6b:e5:cc:ec:4f:c6:d0:e0:e2:e4:9c:88:8d:c4:b8:87:68:
         f3:0e:21:c8:29:b5:ec:71:6d:4e:56:05:ca:8f:ab:fd:f4:cd:
         d6:b4:3f:06:fa:81:cb:a1:fe:19:0c:15:61:7b:f1:5b:1a:78:
         fb:c8:f3:49:76:38:2b:0b:98:c5:13:54:99:ed:dc:b3:54:fa:
         95:1d:51:b1:04:f5:a3:56:99:88:ed:bb:16:57:6a:21:aa:a6:
         75:6a:cc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:12:43 2025 by rpki-client