Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5fcde5d5-96ed-395d-a9ae-9ff32db6f487.roa
File:                     5fcde5d5-96ed-395d-a9ae-9ff32db6f487.roa (raw, json)
Hash identifier:          x4zx/TCM6zxsRpWctrDWtRLetngkm8MJ+XrdgeJ6SEQ=
Subject key identifier:   2C:59:A5:0F:92:77:67:D4:8B:75:12:88:BD:3E:7D:84:0F:B5:7E:2C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F0210E675724C883DDC0440
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5fcde5d5-96ed-395d-a9ae-9ff32db6f487.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:9e80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:10:e6:75:72:4c:88:3d:dc:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=dd8a5329-de81-4ad3-a614-810414185571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:b3:35:6c:01:44:2f:fd:84:48:29:01:88:
                    34:08:f9:f9:b8:0a:13:f5:93:6a:0d:da:d0:4f:6a:
                    2b:12:ac:9c:f3:de:ac:16:e1:d3:c6:5a:51:08:9a:
                    e7:8b:69:a0:d6:64:c2:a6:97:84:23:f5:0e:cc:c2:
                    46:7a:1b:4a:9d:d9:3c:95:be:e3:9f:7a:22:33:da:
                    47:8f:51:45:be:34:24:81:8e:98:98:7c:d7:41:ff:
                    a3:12:81:f1:62:6b:f7:0f:8b:d1:14:85:07:42:68:
                    df:90:2d:1f:2a:70:0e:10:4f:7f:d9:6f:7c:dd:34:
                    7a:58:73:73:1b:b9:5b:ea:ab:3c:0e:26:dd:76:36:
                    e3:8b:9f:dc:5e:ab:67:7b:29:7a:2c:a1:7f:ab:8a:
                    da:99:3f:ae:ac:cf:70:75:97:2c:62:cd:2f:8f:3c:
                    42:60:98:85:a5:47:cf:7c:a8:61:c1:e1:58:78:9b:
                    a8:0c:4d:03:84:c8:94:69:a1:d7:59:56:8f:da:b1:
                    7c:96:be:d4:c5:7d:7e:2d:cc:5b:a9:23:af:48:7e:
                    0e:f0:94:f7:61:23:a4:28:d0:74:9b:a5:a1:96:5b:
                    2c:c0:11:55:01:9b:1d:8b:22:1a:01:74:96:5d:34:
                    12:88:d0:30:4d:e2:5f:a0:1a:7d:1a:10:04:4f:1e:
                    af:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:59:A5:0F:92:77:67:D4:8B:75:12:88:BD:3E:7D:84:0F:B5:7E:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5fcde5d5-96ed-395d-a9ae-9ff32db6f487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:9e80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:12:1e:98:41:57:bd:1b:ea:06:07:37:f6:ff:dc:d0:41:02:
         3d:25:62:48:bd:4c:b8:26:c4:61:77:77:c4:cc:13:59:ed:77:
         16:60:ef:be:10:90:b6:b0:40:bc:9d:e1:8e:47:04:98:3c:34:
         94:08:e1:f7:88:9e:cd:90:22:da:15:91:01:e6:3b:17:0d:74:
         c9:b2:ed:82:be:44:93:d0:c9:11:d1:d1:b6:34:04:e5:8d:c7:
         6c:15:02:1d:aa:e4:e6:d7:2e:d2:2d:24:df:ba:2a:f7:1b:8d:
         0a:72:4f:39:1b:f9:a9:0c:24:e8:42:05:b1:be:1e:1b:a1:e3:
         f2:af:a7:18:1c:0a:bd:cb:6c:19:4a:b0:09:93:e1:fd:ed:30:
         5a:39:4a:94:57:aa:58:f7:8e:5e:c2:1b:d3:42:bd:dd:f4:00:
         c6:27:bd:cd:d9:54:47:fb:da:2c:64:b9:ca:61:27:72:5a:28:
         50:11:ca:bb:e8:be:6c:32:bb:cb:12:04:4d:67:6f:30:3c:83:
         58:86:08:c6:4c:a1:8d:67:90:f2:d7:76:b3:c0:f6:d9:b7:10:
         2c:38:97:70:a1:36:9f:03:60:94:98:e0:d3:43:ec:28:1d:99:
         ec:7c:55:77:f5:88:22:e5:1f:80:07:23:39:0d:95:c3:ed:61:
         af:ff:69:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:25:37 2025 by rpki-client