Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bad13dd-9a2f-3925-97d1-63e29ec5ae32.roa
File:                     0bad13dd-9a2f-3925-97d1-63e29ec5ae32.roa (raw, json)
Hash identifier:          VAWUCedlfRKYOulEJka8CO5Sa0cTsYSSlwTXXpbidOs=
Subject key identifier:   2D:E9:AB:4F:D3:5C:E3:07:74:62:88:C4:5E:20:29:77:40:D6:A0:9D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F0218A689BFA71E6B80CF60
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bad13dd-9a2f-3925-97d1-63e29ec5ae32.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:b708::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:18:a6:89:bf:a7:1e:6b:80:cf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=3ad514e8-6124-4ce7-bbf7-702025cfd533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:2f:1b:a5:f7:41:77:a6:1b:5f:05:ce:74:
                    cf:91:2c:32:a0:23:b2:8d:20:c6:76:ff:d1:ed:b9:
                    26:45:94:d2:88:27:bc:8c:f0:da:aa:3c:2b:6c:19:
                    d1:8a:ed:3b:d9:6b:48:9b:5c:0e:3a:84:99:c9:f0:
                    ad:32:c0:8b:b4:28:02:f7:4b:9f:0d:91:87:a7:f7:
                    c9:78:e1:20:20:f3:6e:c1:ed:be:bd:be:1c:65:db:
                    c7:42:52:d1:5c:90:09:31:bb:42:96:00:14:cc:93:
                    2c:a2:1d:72:62:3c:e9:a5:e6:d6:dd:2c:25:45:61:
                    af:cc:81:20:81:a1:8d:e0:14:46:f9:a5:48:05:d3:
                    01:61:49:35:87:6a:df:a5:32:5d:74:42:29:2c:56:
                    72:69:4a:3d:06:4d:80:61:e9:7e:38:6f:fa:07:34:
                    73:74:6b:70:5d:ee:84:ad:4a:18:28:8e:de:96:43:
                    40:c6:f2:3e:fe:b7:da:de:20:46:28:2e:bd:44:c3:
                    e4:a3:f1:5a:51:cc:20:06:67:29:90:8b:d4:40:17:
                    7e:24:90:ea:f0:91:72:4e:0b:5a:15:48:13:31:4b:
                    f3:19:7b:ca:a9:40:45:05:c4:4c:ee:bb:12:02:01:
                    b4:db:2c:ba:33:b7:4f:36:bf:2d:18:8c:02:f4:07:
                    c2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E9:AB:4F:D3:5C:E3:07:74:62:88:C4:5E:20:29:77:40:D6:A0:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bad13dd-9a2f-3925-97d1-63e29ec5ae32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:b708::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:4e:51:55:24:4c:cb:4c:a3:0c:54:8b:10:04:46:f7:00:c1:
         00:7f:57:de:f3:53:ff:9c:08:32:f2:c1:32:ce:09:76:c4:d1:
         94:b0:1f:1d:16:f1:82:44:1a:52:c2:fd:20:ef:62:ef:27:5c:
         f3:5b:b5:1a:76:80:fa:93:fe:67:86:8d:ef:8f:5e:55:07:49:
         f8:5b:8b:1f:18:3e:20:1b:3f:e0:36:86:8c:9e:db:77:7b:38:
         ba:66:34:30:0f:bd:d3:7b:31:1b:e9:0b:df:8f:c6:eb:6a:43:
         19:71:d1:56:81:ab:5d:68:12:38:b1:73:f0:4d:21:67:13:e4:
         a6:e5:a0:5a:f0:f6:19:63:ff:3c:0a:c2:e8:6b:3a:bd:59:56:
         3f:b2:ec:7c:be:e7:45:54:e7:b2:a5:5a:7e:6b:8d:bb:6c:05:
         fa:f2:08:66:62:fc:31:6b:34:cd:fe:00:44:e9:4d:95:b6:93:
         7c:0a:e1:8d:ab:34:d4:25:6d:a9:00:6c:9d:db:cd:e2:24:08:
         6d:ac:93:c4:f6:e2:e5:12:cf:d9:0a:3f:1b:af:b3:0c:45:67:
         9b:0e:8e:69:33:24:4a:73:90:c8:e1:bd:9c:16:4f:5e:b8:93:
         d4:d1:7c:bb:a4:b1:80:fe:b4:75:02:f7:46:f8:79:0b:77:68:
         3e:cc:a1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:31:05 2025 by rpki-client