Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/421ecad0-4e2c-35b0-a4da-a6de618990da.roa
File:                     421ecad0-4e2c-35b0-a4da-a6de618990da.roa (raw, json)
Hash identifier:          sa04hk2MR0RXpI97qG7X6Xv+tK78a/46RN9+SbFvk+o=
Subject key identifier:   62:8D:46:C5:0B:12:DF:26:45:4E:5C:D0:C4:57:A3:F3:22:F0:D0:25
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F021FFF1AA6FB15D92CC840
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/421ecad0-4e2c-35b0-a4da-a6de618990da.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:880a:314::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:1f:ff:1a:a6:fb:15:d9:2c:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=7b168138-61da-4b27-a637-cc99b35d75c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:2b:40:d4:2f:9c:87:0e:ae:03:db:75:e6:
                    8e:12:72:70:23:ec:e5:19:b6:74:28:0e:0b:09:47:
                    07:0c:eb:d2:c5:94:b5:d6:e3:0f:a0:91:8e:09:84:
                    8e:62:02:d2:e2:9c:e9:8e:ac:f0:cd:ea:73:e1:e0:
                    f4:72:57:fb:40:83:8f:0a:8a:a9:17:ce:0d:d8:e8:
                    f4:b5:31:a9:9b:c1:0f:fd:e1:e2:37:7a:91:eb:ac:
                    d2:b8:de:20:ac:c6:86:77:cc:69:aa:2a:09:0d:0e:
                    33:d2:de:e6:1f:07:ba:96:11:d5:d1:48:08:ba:51:
                    81:52:56:23:27:c1:68:f5:9b:92:c7:38:df:51:16:
                    95:72:6d:f8:eb:42:92:0f:df:a3:41:51:30:24:d4:
                    39:49:48:dd:d6:43:af:68:6b:d7:6d:66:37:01:69:
                    19:c9:b2:bc:0b:9f:d8:36:31:8b:d8:36:c9:5b:0f:
                    ba:dc:e8:99:6f:ed:dc:8b:b2:97:c3:4d:88:ea:18:
                    32:44:22:68:93:14:ef:98:0a:70:0b:be:cb:6a:d6:
                    cb:04:96:a0:52:30:53:56:09:2c:f0:08:17:17:07:
                    90:d7:ff:33:79:da:74:b8:0d:74:5e:cb:bd:c1:b0:
                    92:85:18:f8:d0:18:82:ae:a5:9c:be:59:9a:d0:0d:
                    69:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8D:46:C5:0B:12:DF:26:45:4E:5C:D0:C4:57:A3:F3:22:F0:D0:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/421ecad0-4e2c-35b0-a4da-a6de618990da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:314::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:e4:64:c0:ab:3c:0e:bd:f0:32:74:4e:37:bb:d7:f0:a8:98:
         c9:b4:99:33:0a:69:37:73:11:6d:c2:3c:15:1c:7c:b9:a4:a3:
         53:cd:88:43:62:24:d6:6d:b6:69:e3:49:90:91:f6:a8:0e:c2:
         87:37:2f:84:97:46:98:d3:f5:7d:50:eb:74:1f:2e:53:09:57:
         cd:8a:36:86:c0:5f:67:75:00:c4:4d:ed:39:cb:4a:6c:35:d3:
         31:56:4c:5b:ef:05:00:da:27:5b:81:22:bc:e6:6a:45:13:79:
         46:ab:fb:11:2c:d9:85:13:e7:1d:e0:21:c7:bc:0a:89:ed:e3:
         63:67:f7:13:ac:1a:ea:4e:21:70:c5:2e:f1:f3:ee:63:36:1e:
         91:dd:63:92:08:5e:c5:5d:0a:63:46:11:24:b3:73:75:28:1e:
         d3:c1:17:ae:dc:2a:1c:1b:ee:e7:55:81:18:42:15:36:00:fd:
         e1:6b:f6:7e:82:ef:06:5a:1c:8e:f8:98:60:01:59:0e:8d:ae:
         76:6d:7f:3f:d6:f1:94:bc:10:05:1c:44:15:80:59:5e:c7:23:
         27:be:d8:ca:d2:ce:f5:4f:bf:5b:d4:e2:f1:97:e7:a7:e4:7a:
         88:2d:3b:15:6c:0e:18:80:0e:98:ba:02:84:32:60:9b:22:97:
         87:b4:1c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:20:47 2025 by rpki-client