Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fc6a0e0b-98c9-3a61-97b6-89d50d4d19cb.roa
File:                     fc6a0e0b-98c9-3a61-97b6-89d50d4d19cb.roa (raw, json)
Hash identifier:          wAov7sa9X4aGvNXtVhE9xiEqirA46M1EGUe58bAEgwk=
Subject key identifier:   97:B4:FF:B9:23:18:28:26:CF:55:F4:3E:73:90:D5:13:BE:40:89:0E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858493C0947F8824651D9748F8000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fc6a0e0b-98c9-3a61-97b6-89d50d4d19cb.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     22773
IP address blocks:        72.222.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:47:f8:82:46:51:d9:74:8f:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=df8169da-9fdf-4d25-998b-42139da2ad21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:05:c0:c6:ff:0f:50:2c:6c:9d:c7:81:7b:44:
                    7e:78:c3:ce:85:94:ee:7c:17:a2:57:78:c7:49:ab:
                    20:dc:99:c6:23:75:9e:91:28:83:b9:45:23:4d:51:
                    b9:37:eb:d1:de:b0:70:1f:27:9b:3b:26:78:1d:64:
                    36:4e:99:f8:0f:5c:6b:73:82:2b:dc:cb:a8:19:ec:
                    cb:98:02:63:f0:98:14:14:04:c5:5b:5a:ec:11:ef:
                    fa:75:ed:8b:f5:77:f6:93:85:0e:91:c4:4e:06:14:
                    6c:d0:36:16:59:c4:23:9b:46:64:08:4b:40:dd:84:
                    12:75:74:dd:9a:7b:79:80:e8:fb:41:7e:3e:54:35:
                    d4:dd:c1:5e:4e:94:88:57:be:f2:0a:1c:3a:dc:44:
                    73:aa:ad:ce:0a:00:58:7a:2b:c8:ed:27:a1:9b:ce:
                    79:91:43:70:af:9a:77:cd:9c:5b:62:26:23:58:9c:
                    70:a4:5d:e6:a0:f7:f5:4c:53:fe:bd:b4:95:44:87:
                    1c:41:60:b6:ed:af:d4:88:53:71:6a:d9:a9:49:b3:
                    b6:40:07:a1:40:82:f4:4e:93:46:5f:a5:70:ed:6e:
                    73:d9:60:98:32:38:cc:ec:c4:1d:f9:13:6b:3e:b8:
                    0b:83:ab:b7:74:a6:eb:ea:f9:4c:6d:85:9e:08:f0:
                    b6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B4:FF:B9:23:18:28:26:CF:55:F4:3E:73:90:D5:13:BE:40:89:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fc6a0e0b-98c9-3a61-97b6-89d50d4d19cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.222.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:91:aa:e3:99:0a:65:a9:10:7c:a8:a2:9f:bb:cd:35:59:a3:
         14:97:45:21:71:05:79:71:b0:f1:7d:b1:79:84:51:e1:cb:e4:
         0f:b0:b5:9c:39:89:5c:f6:2e:04:a0:0f:6d:37:3b:16:61:e2:
         13:a2:91:31:ed:00:69:75:e0:78:ac:20:6a:0b:ea:e3:fe:1e:
         14:3e:72:51:5c:bc:70:d0:92:cb:36:a4:e3:6f:2e:5f:de:d9:
         59:e6:26:a7:8b:70:33:02:6a:e1:bf:9e:c4:fe:69:a6:9b:4e:
         31:db:a6:03:82:7f:ed:60:75:29:84:b5:41:39:8b:53:a0:e0:
         3d:b2:26:af:d5:27:39:36:3d:6c:18:7d:6a:53:cd:25:07:1f:
         40:94:c4:97:c0:f3:1c:7c:76:06:5a:3a:62:1f:d5:30:83:34:
         25:cd:d3:2d:c8:6a:df:76:5f:da:9d:6f:db:68:ce:5f:4b:f8:
         75:94:5c:4c:97:60:64:e6:c6:01:e6:61:f9:78:1a:02:c5:4a:
         cc:8b:bc:2e:bc:fd:91:7a:d5:ad:a9:5d:94:a2:fa:67:2f:33:
         56:17:cd:73:39:89:ae:f4:22:0b:27:0c:46:84:4b:b6:bf:72:
         c9:59:14:8d:02:18:6c:c3:74:93:be:24:28:ad:bf:99:cc:f6:
         c3:fd:2e:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CUf4gkZR2XSPgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
ZGY4MTY5ZGEtOWZkZi00ZDI1LTk5OGItNDIxMzlkYTJhZDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQXAxv8PUCxsnceBe0R+eMPOhZTufBeiV3jH
Sasg3JnGI3WekSiDuUUjTVG5N+vR3rBwHyebOyZ4HWQ2Tpn4D1xrc4Ir3MuoGezL
mAJj8JgUFATFW1rsEe/6de2L9Xf2k4UOkcROBhRs0DYWWcQjm0ZkCEtA3YQSdXTd
mnt5gOj7QX4+VDXU3cFeTpSIV77yChw63ERzqq3OCgBYeivI7Sehm855kUNwr5p3
zZxbYiYjWJxwpF3moPf1TFP+vbSVRIccQWC27a/UiFNxatmpSbO2QAehQIL0TpNG
X6Vw7W5z2WCYMjjM7MQd+RNrPrgLg6u3dKbr6vlMbYWeCPC24QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJe0/7kjGCgmz1X0PnOQ1RO+QIkOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmM2YTBlMGItOThjOS0z
YTYxLTk3YjYtODlkNTBkNGQxOWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSN4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+RquOZCmWpEHyoop+7zTVZoxSXRSFxBXlxsPF9sXmEUeHL5A+wtZw5
iVz2LgSgD203OxZh4hOikTHtAGl14HisIGoL6uP+HhQ+clFcvHDQkss2pONvLl/e
2VnmJqeLcDMCauG/nsT+aaabTjHbpgOCf+1gdSmEtUE5i1Og4D2yJq/VJzk2PWwY
fWpTzSUHH0CUxJfA8xx8dgZaOmIf1TCDNCXN0y3Iat92X9qdb9tozl9L+HWUXEyX
YGTmxgHmYfl4GgLFSsyLvC68/ZF61a2pXZSi+mcvM1YXzXM5ia70IgsnDEaES7a/
cslZFI0CGGzDdJO+JCitv5nM9sP9Lhw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:25:46 2025 by rpki-client