Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38692496-fae6-317b-962b-9a70c68b5570.roa
File:                     38692496-fae6-317b-962b-9a70c68b5570.roa (raw, json)
Hash identifier:          O76Z5avT4rXfOAPwHHkvTgz4CwYxpNsGwL9Q0I2E3nE=
Subject key identifier:   4B:3A:54:5E:D6:88:60:84:B1:F6:BD:B9:C9:92:2A:9D:E7:6A:F0:18
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F021A61FF4D0B964C7EBC00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38692496-fae6-317b-962b-9a70c68b5570.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:b73c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:1a:61:ff:4d:0b:96:4c:7e:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=e62d580a-7103-4e57-8179-8e300bcfd18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:48:18:42:58:d6:56:c5:ed:f9:23:71:be:06:
                    77:b4:7c:cb:66:6d:74:75:c9:af:25:86:87:2f:a3:
                    c6:a2:17:85:69:a6:00:ab:f8:a6:ca:90:9f:eb:2d:
                    26:7c:16:dc:ae:3d:2f:4a:4b:da:93:4e:69:c2:3e:
                    d7:70:78:e4:9a:a9:4f:08:c4:b9:2b:67:05:f7:4d:
                    6f:17:8e:0f:23:9a:43:75:0c:d1:82:bc:d1:fc:be:
                    62:6e:68:47:57:c1:24:e3:fc:c2:01:e4:ca:d6:12:
                    cf:99:46:4f:7e:d6:86:7f:f8:a4:04:75:68:c8:2e:
                    77:e2:75:77:1c:d0:1f:5a:28:4e:cf:19:22:6f:95:
                    4f:db:bf:4f:5f:e8:05:52:6f:a4:6a:b0:5a:f4:2b:
                    92:47:ca:7c:14:be:b0:1b:04:63:01:51:d2:01:1e:
                    fd:c7:e8:6c:44:19:7e:25:85:0d:c6:33:08:44:3d:
                    97:b6:f4:3a:72:c7:88:e2:3d:bf:e8:02:7f:3d:06:
                    22:a0:8b:81:29:a8:50:24:b0:e5:13:57:15:18:88:
                    ab:3c:2e:8d:03:a7:4d:95:cb:dd:7c:b3:e5:a9:0c:
                    84:e4:8b:b6:d2:72:44:f4:73:f1:f2:d9:ea:fb:da:
                    bf:93:d6:62:b3:f9:3a:67:e7:1f:fa:48:1f:63:44:
                    dd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3A:54:5E:D6:88:60:84:B1:F6:BD:B9:C9:92:2A:9D:E7:6A:F0:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38692496-fae6-317b-962b-9a70c68b5570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:b73c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:bf:4e:5d:98:10:a2:b2:22:37:5a:7a:ce:ae:60:50:26:aa:
         07:f0:9c:2e:30:ad:35:07:2a:b6:de:c9:6e:68:80:a5:3c:fc:
         ea:cf:3f:59:97:d4:3e:a6:b8:26:c7:53:d6:10:ff:6d:2d:ce:
         0a:ce:5a:32:79:19:55:1e:3e:5d:bf:1e:d5:0b:37:a0:93:14:
         af:40:aa:1a:ac:b9:6a:13:38:98:71:93:6b:35:9e:f2:c1:3c:
         8c:6b:8d:11:bc:03:79:ec:94:ee:3a:d4:f6:a7:2c:72:9a:93:
         2e:d8:63:ad:ad:73:6c:28:a1:bc:fe:43:d7:fb:0f:c6:5c:e7:
         ec:14:36:9f:06:f8:64:b2:cb:2c:12:1f:31:4a:1a:f9:11:13:
         b2:97:74:da:77:5c:4c:93:d3:00:b3:cc:da:6e:ed:5f:a5:8b:
         d6:88:e2:77:18:18:73:29:64:98:bf:48:f6:83:6d:8c:9a:6c:
         0e:cb:1d:95:85:d3:3b:8a:88:3b:49:99:ac:ca:9b:35:77:c1:
         cc:b9:26:6f:fd:dd:a6:bd:67:e7:ab:2c:5c:77:71:e2:ff:96:
         46:79:1a:59:4d:f4:df:8c:c2:8c:5c:a5:24:f4:04:a8:a6:35:
         cf:e9:f0:b4:2f:ce:ab:1a:00:66:19:df:c9:26:49:ec:3b:d2:
         96:0c:20:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:32:10 2025 by rpki-client