Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10c44590-900c-3a1a-994e-c034138d78e2.roa
File:                     10c44590-900c-3a1a-994e-c034138d78e2.roa (raw, json)
Hash identifier:          N1YzkrKg0dDbvBzbZjN2mYgaMkhUUoY21qdTiuoqnAQ=
Subject key identifier:   C2:D1:01:A9:BB:33:0F:31:B1:78:35:26:0E:0B:2E:E3:36:ED:5D:C6
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B6797F7D62B65CF3AD6B0D900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10c44590-900c-3a1a-994e-c034138d78e2.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:4e00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:f7:d6:2b:65:cf:3a:d6:b0:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=fb306aee-b9c2-42e6-a12d-f917d73eaa6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:85:ee:8f:9c:1b:cc:95:a8:56:3a:72:d1:3c:
                    9c:a1:be:a7:f1:fc:e2:64:3d:d7:7b:48:ca:56:9b:
                    3f:00:c5:42:81:38:1c:a1:49:23:d8:1c:d4:81:e0:
                    56:06:7d:1a:f8:4f:8b:c8:a2:52:4f:f1:89:05:ea:
                    d4:20:3f:16:dd:1d:3d:fc:72:27:9e:0f:33:b0:e2:
                    11:bb:d3:cd:e7:b5:88:4a:0f:7f:8e:78:e4:3b:b0:
                    b1:ab:26:79:15:38:29:24:fa:48:a3:e6:5d:a8:01:
                    4e:64:46:f0:b2:c4:b5:b9:ce:b7:05:d1:40:45:c8:
                    52:b9:94:5e:13:db:a1:cc:b9:8a:5c:0a:19:ba:da:
                    5b:c6:cb:a5:d1:d2:09:4b:59:e1:cc:3b:13:57:e6:
                    8b:c6:6d:7e:21:83:e6:4b:b7:a7:24:d0:b0:53:2c:
                    fa:9c:08:49:e2:92:13:c6:01:e8:45:fd:59:f7:68:
                    aa:e8:3b:57:4f:da:50:b0:74:90:e9:6c:d6:15:23:
                    11:d1:3f:98:26:ed:f5:55:03:5b:9e:bb:c7:dc:be:
                    08:21:97:86:e6:da:bc:62:4c:13:32:4c:1f:ac:27:
                    be:67:4e:8b:5b:f2:05:58:51:4b:60:3a:0f:43:d0:
                    f7:67:de:ca:f4:25:79:e2:ac:be:13:4e:c7:c4:60:
                    92:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D1:01:A9:BB:33:0F:31:B1:78:35:26:0E:0B:2E:E3:36:ED:5D:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10c44590-900c-3a1a-994e-c034138d78e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:4e00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:43:73:17:30:ef:03:79:0d:dc:00:e8:d4:23:7d:50:b2:82:
         39:c4:3c:f2:5a:8b:e1:03:e8:11:30:d0:5a:c2:0b:46:69:e8:
         e1:dc:17:ee:9a:33:84:cf:03:07:a0:c1:cb:8f:88:51:da:de:
         00:c9:39:65:85:0b:fa:80:5b:8d:03:ef:d3:c4:7b:15:47:0f:
         27:cc:30:1f:d6:95:58:a6:ad:bc:fb:80:98:f0:f0:fb:70:36:
         26:04:b9:41:ad:70:28:85:a9:e6:2e:78:b3:b7:a3:64:e8:d2:
         d8:f9:81:92:be:2f:fd:df:38:2b:72:09:4e:2d:45:bd:74:ce:
         54:67:b4:9e:ee:ec:2d:0f:87:d5:84:7d:c7:4f:8c:11:2d:16:
         ce:f7:37:26:4c:d1:3a:0e:43:3a:2b:b1:5a:89:ab:42:1d:d7:
         30:4a:88:8c:3f:9a:65:f7:83:21:84:62:d7:b0:2c:36:ba:fd:
         ef:a7:ba:9b:72:6e:bd:57:5a:f4:d3:34:8c:44:3d:19:44:d4:
         ed:9e:39:32:94:f2:4b:34:bc:e5:70:9c:58:c9:03:9d:82:2c:
         84:d9:0d:6f:87:cb:d1:43:99:89:d0:b0:a9:59:1f:43:fe:59:
         ba:30:3c:1c:ea:a8:ee:f3:27:db:56:d6:16:ad:2b:3b:2e:a1:
         fb:33:fc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:26:46 2025 by rpki-client