Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/45526e80-a31b-3add-82c3-c20763763522.roa
File:                     45526e80-a31b-3add-82c3-c20763763522.roa (raw, json)
Hash identifier:          sxSC12JFabZLUwiKEYVBU9OVnvS2P/kvLdTfwGHYnfQ=
Subject key identifier:   82:F0:0F:28:B6:E5:EE:54:6C:D9:CE:41:C8:95:A0:5B:82:D0:A9:97
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584B25FC3AE41E85EFEF117E37C0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/45526e80-a31b-3add-82c3-c20763763522.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     54538
IP address blocks:        2606:f4c0:7000::/43 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Sep 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:3a:e4:1e:85:ef:ef:11:7e:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=fd31cfe0-8c64-4408-b691-2672887a075f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:e9:45:b4:cd:6b:2d:8d:95:51:b2:e7:6c:
                    5c:f8:32:03:e7:43:93:30:5d:4a:f0:d2:75:e1:e0:
                    45:15:3e:94:32:ef:1f:2b:65:85:be:2d:4b:5a:83:
                    7c:b3:94:48:11:13:df:6c:3f:01:9a:71:73:a2:a6:
                    7f:51:62:b8:f1:51:4e:e5:64:0f:d0:80:7c:f2:74:
                    50:2e:59:9a:37:33:6b:44:23:56:a5:cb:4d:98:3e:
                    9f:0d:7e:dc:0a:5a:c1:7f:bd:91:49:84:9a:ef:1f:
                    ea:1b:b0:9a:25:14:5f:28:7d:5a:65:45:01:8f:b5:
                    e9:1f:0a:df:69:89:3e:9a:2c:55:9d:92:e8:d5:f0:
                    45:68:b1:fc:68:4b:bb:ad:20:a0:b6:bd:81:2a:91:
                    36:9b:c5:c0:c3:92:e2:f7:81:a9:59:eb:ec:4b:13:
                    d2:9c:00:6b:13:3d:49:72:f3:f2:f0:b3:17:2e:00:
                    2d:63:98:7b:a0:3b:32:ae:d8:e1:3a:06:88:35:69:
                    88:32:9a:b7:9f:be:ec:e6:b7:7a:3f:1f:e9:42:ff:
                    a0:9b:5d:d3:3e:8a:93:54:d4:bb:b1:55:f0:ca:35:
                    2d:82:0c:2e:c6:81:0a:22:b8:cf:22:2b:eb:57:16:
                    31:04:ff:5c:1e:9c:92:9b:0d:e6:30:14:63:cd:c9:
                    35:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F0:0F:28:B6:E5:EE:54:6C:D9:CE:41:C8:95:A0:5B:82:D0:A9:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/45526e80-a31b-3add-82c3-c20763763522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:7000::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:da:40:8d:7c:0b:36:38:05:ea:8b:d7:93:aa:24:46:fd:48:
         53:61:fd:fd:a2:cb:49:c6:94:ed:44:ba:a6:61:f0:77:cb:ed:
         c7:26:a2:b2:5c:0c:6a:cb:af:35:67:3c:35:d7:7c:94:56:7f:
         75:84:ab:99:be:b3:c5:64:50:73:85:fc:03:e0:16:b5:25:c7:
         19:a3:fc:93:97:a0:c2:50:42:c4:5b:59:ab:2d:7c:eb:15:f6:
         59:d6:f9:45:90:30:eb:d7:20:9e:e2:9a:22:dd:f4:65:1b:e6:
         8c:cb:db:d0:ec:8f:5b:d5:49:40:da:79:83:49:99:62:64:89:
         36:37:09:15:e0:0e:c9:4c:48:f5:9b:8d:cd:50:27:5a:2b:50:
         91:84:2a:0f:49:78:27:d8:69:d3:4b:4e:bc:b0:e9:fe:25:98:
         1d:ef:90:c6:0b:8f:dc:3d:7d:3e:f4:cf:a2:83:ec:d9:91:0e:
         b9:a7:51:91:7c:1c:e6:fe:ae:5a:9e:9b:e0:be:e1:dc:88:6f:
         16:2c:67:5c:47:92:9a:e4:47:d3:78:90:8e:94:bd:f0:d7:d0:
         37:7c:75:b4:87:f3:14:e5:3c:11:ef:6a:ff:4c:62:26:12:06:
         8b:08:80:54:fc:95:55:45:f2:6b:e5:4f:2e:f5:ea:54:cf:46:
         8f:2a:84:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:39:28 2025 by rpki-client