Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20fd1725-b8ce-306c-8f5b-281325002095.roa
File:                     20fd1725-b8ce-306c-8f5b-281325002095.roa (raw, json)
Hash identifier:          605AXmnp76pBMuAqy/Yt5VXxERhkewRcEnope1fnB1I=
Subject key identifier:   41:FD:71:E8:08:A5:D5:94:54:19:BF:58:FC:36:11:B4:B9:B1:E5:5E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01F8DFCE0624C099D16400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20fd1725-b8ce-306c-8f5b-281325002095.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:5602::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:f8:df:ce:06:24:c0:99:d1:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=6660063b-2c2d-48b5-8215-468e4b47d3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:84:8f:84:4e:7f:16:00:69:d7:36:9b:b6:2a:
                    7c:7d:91:11:c4:af:de:f4:55:20:22:1d:98:c6:ac:
                    42:9a:ce:a8:d4:1f:4f:ae:33:0f:3d:31:81:ca:90:
                    79:ad:51:e2:1f:70:61:a9:f5:21:f4:89:0d:ce:21:
                    7c:85:a4:22:de:47:b8:49:b1:bb:1a:13:b1:b4:b8:
                    28:1b:e0:55:d5:1d:cf:cb:52:e4:ab:99:b0:71:84:
                    b9:70:c6:01:e5:66:21:f6:4b:dc:e4:5f:66:99:d1:
                    75:39:9c:69:42:3f:de:46:4a:5c:71:97:ce:f7:95:
                    73:91:be:b3:99:61:e1:08:99:2f:6b:92:32:59:99:
                    1f:22:61:6a:29:ab:f6:bc:74:8c:76:fa:77:91:d2:
                    1f:7e:69:7c:7b:c7:4b:d9:f9:77:46:72:98:15:44:
                    0a:48:4c:dd:a6:ed:3e:a2:37:a1:40:44:fe:3d:a2:
                    ec:08:9e:ac:bc:2c:39:24:44:63:f3:2b:6e:f6:93:
                    09:56:9b:0b:80:90:00:a0:b7:68:e8:b8:ea:72:66:
                    a9:aa:c4:cb:f4:8c:b1:6b:72:aa:da:cf:58:81:a1:
                    ef:4d:21:3a:1e:77:92:81:47:04:47:7d:8b:a4:73:
                    b3:fc:6f:6e:ee:46:91:3c:de:48:3b:1f:17:2a:df:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FD:71:E8:08:A5:D5:94:54:19:BF:58:FC:36:11:B4:B9:B1:E5:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20fd1725-b8ce-306c-8f5b-281325002095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:5602::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:79:95:d5:86:5c:11:5d:dc:10:59:2f:4d:25:db:1d:84:98:
         52:5a:96:3f:f0:4d:2d:bc:a2:75:bb:02:34:54:14:22:07:01:
         e2:af:83:46:fe:8f:50:7b:41:da:99:3c:21:06:95:fb:78:71:
         fe:f2:b5:3d:98:70:dd:f7:ee:a6:47:61:ee:5d:7f:cf:03:da:
         7a:34:5f:88:22:69:38:31:30:36:9a:99:08:53:ac:a2:85:a2:
         0a:15:3e:3f:2e:f9:e4:cb:6b:4e:35:f2:64:67:6c:c6:97:3b:
         5d:18:32:90:b7:e3:96:56:14:44:ad:98:63:98:55:b5:81:15:
         de:08:d2:85:a7:31:50:30:16:25:7a:9c:1e:bf:96:7a:81:bf:
         af:e2:6a:d5:3e:b4:a3:61:64:d1:d8:ed:9f:e3:f3:51:fc:f9:
         98:d6:be:85:9b:71:3f:02:61:ab:c0:25:3d:05:c9:6d:17:3f:
         e4:22:56:07:5e:5e:6d:fa:51:a1:4b:40:6a:6d:89:c1:be:60:
         1b:5b:6f:65:e5:bd:9a:dd:21:9e:54:dc:fa:69:a0:69:07:05:
         be:70:fa:e9:38:50:68:07:fb:82:52:16:9f:20:0f:49:48:88:
         b2:46:d8:14:e4:92:8a:d9:42:94:2e:9f:9f:2c:ff:f5:11:da:
         5e:ed:e7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:38:59 2025 by rpki-client