Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23eb2abf-4fe8-3fb2-aacf-aaf6bea39d7a.roa
File:                     23eb2abf-4fe8-3fb2-aacf-aaf6bea39d7a.roa (raw, json)
Hash identifier:          gCQ8WxFv56h/HJ7eJD6TFHSMkYmIfZFIUlS9nBpBiPo=
Subject key identifier:   0A:FE:A9:67:34:07:40:49:D2:25:C8:CC:8D:97:6E:8A:F1:A3:87:A9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01F0CB1F3C44E534757F80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23eb2abf-4fe8-3fb2-aacf-aaf6bea39d7a.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:3e90::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:f0:cb:1f:3c:44:e5:34:75:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=8b9a0fca-b980-41ee-98c1-beee174fd248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:3e:6a:80:a8:96:af:53:1b:14:87:6c:91:
                    21:d9:5d:1a:c9:4d:cd:ac:02:0a:ef:c5:c6:42:a2:
                    13:d6:c7:8c:47:2a:7d:05:70:6c:d5:c1:70:c9:d9:
                    68:78:7b:e7:6b:2d:1b:66:eb:b0:7d:cb:1b:78:0f:
                    e7:22:39:ad:ab:b2:34:f3:1e:2c:17:8b:0f:05:47:
                    25:62:9c:48:03:54:9f:6b:38:b9:c6:02:6b:54:74:
                    7b:86:ac:de:88:f8:46:bb:ec:e5:88:50:6b:ec:95:
                    35:bc:67:54:29:ca:0e:4d:36:fc:74:6d:b1:ed:81:
                    64:ab:94:4e:74:b8:a7:e7:7c:b0:25:19:04:49:bb:
                    74:37:61:55:38:29:40:e4:10:32:59:15:e6:1f:3b:
                    cc:29:d7:88:0f:00:be:42:7a:46:39:f5:5b:f6:9f:
                    bf:9f:c8:71:c6:d5:76:2e:86:0a:a8:22:be:3f:63:
                    bc:76:55:a5:32:f0:75:49:24:ee:dd:72:3f:d1:1c:
                    8d:0c:d4:19:6f:dc:d1:12:77:e5:ac:2e:2b:b6:8f:
                    c7:a4:6b:5d:3c:1d:9f:b5:c4:e5:57:21:1e:4f:8f:
                    5b:97:38:26:ec:44:6b:03:4c:f0:f2:e8:55:15:75:
                    55:c4:27:f7:47:8f:23:0c:c4:87:28:b7:1a:a7:ee:
                    10:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FE:A9:67:34:07:40:49:D2:25:C8:CC:8D:97:6E:8A:F1:A3:87:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23eb2abf-4fe8-3fb2-aacf-aaf6bea39d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:3e90::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:80:cc:fd:9f:0e:7b:03:c0:2c:2b:b3:31:e8:63:de:a0:16:
         a2:c8:eb:8f:c9:c4:36:5c:9b:4b:1b:c0:2d:c0:49:95:e2:36:
         7b:16:3e:08:1b:44:89:75:a1:8a:2f:33:56:ac:3c:3c:34:62:
         f3:7e:6a:0e:ed:1d:f2:1a:44:0a:6d:62:4f:2b:09:f4:54:88:
         b9:ee:df:a5:a5:45:1f:3f:d3:b1:62:ae:c7:e4:d1:a7:b3:42:
         d7:33:71:09:89:06:7d:1e:6f:5f:92:f9:b6:a5:b1:07:74:70:
         eb:6f:6f:4e:00:08:b3:dc:0a:99:05:9c:92:4d:8c:e6:d3:cb:
         af:c9:6c:9b:85:39:54:04:1c:de:d0:5c:49:13:2b:9f:51:13:
         0e:07:dc:2c:5e:3b:e4:e1:01:23:ca:36:4b:bd:15:c8:3b:b9:
         8c:eb:60:3a:7c:46:f7:15:2e:05:b7:02:95:c5:67:05:59:ff:
         47:22:04:d7:d2:4a:1d:cc:61:d5:b2:e9:0b:e7:f9:d4:26:20:
         a5:45:1f:3e:65:19:62:5c:64:f9:2e:2e:d2:7f:d7:e0:42:f3:
         36:84:27:36:27:d0:74:9d:e2:63:01:80:f2:fc:28:dd:e6:e6:
         aa:0a:a9:8e:52:f6:9c:ca:98:26:05:28:12:94:8f:6b:49:6e:
         4a:a9:bd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 01:28:23 2025 by rpki-client