Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6cb58c48-1dba-3f58-bac9-bb0c8407d744.roa
File:                     6cb58c48-1dba-3f58-bac9-bb0c8407d744.roa (raw, json)
Hash identifier:          DknUaHPOBRoI6stOwhsvzt6f9wYhV8UDyUh1XybP6e0=
Subject key identifier:   FA:03:1E:A6:75:EC:88:91:E6:08:C9:37:DA:DA:32:0D:FC:7A:36:D9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F02088A3B574FF07133C160
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6cb58c48-1dba-3f58-bac9-bb0c8407d744.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:86a6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:08:8a:3b:57:4f:f0:71:33:c1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=a5a5b45e-1be6-40a5-886e-50035e5850c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:64:c1:5b:68:2c:99:54:7a:d6:f0:05:35:0c:
                    ac:ee:7d:5b:c4:5a:05:3c:a2:ff:b3:96:07:01:24:
                    f9:b9:8f:f9:bc:87:aa:7b:ac:01:3a:eb:e5:d2:eb:
                    4b:f4:cc:ea:a0:98:4a:f6:76:4b:4a:55:0c:b2:09:
                    88:ff:48:a4:90:f2:c4:d6:2f:ba:4f:dc:bf:af:ca:
                    6c:15:00:07:15:79:f4:aa:89:17:39:6c:72:bc:d2:
                    ba:9b:71:75:a2:b9:eb:1a:e1:35:8e:d9:51:c5:00:
                    d6:d8:92:d5:98:ad:48:07:30:c4:be:a8:39:6e:de:
                    7f:95:0c:ec:5e:32:57:2c:0e:3a:74:c4:66:d6:8b:
                    67:e5:7a:d5:d2:28:6e:de:ef:72:30:8d:3d:6a:14:
                    79:de:6a:4c:8b:8b:3b:81:92:f6:7c:9d:39:3e:e1:
                    0b:a7:6b:dd:9c:96:1d:45:2b:08:96:97:cb:86:27:
                    84:42:ed:7a:c6:12:44:fc:06:bc:da:9e:7a:bb:2d:
                    41:60:b1:91:0f:6b:0b:0c:d5:5c:14:7a:b3:88:49:
                    5a:2f:66:ac:df:2b:10:d9:1d:5e:2f:9a:7c:47:72:
                    f6:ad:b0:13:dc:a7:fb:10:e2:ed:19:10:d3:75:89:
                    35:2a:be:c6:4d:cc:22:17:f0:6d:e0:b2:3b:16:c5:
                    0d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:03:1E:A6:75:EC:88:91:E6:08:C9:37:DA:DA:32:0D:FC:7A:36:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6cb58c48-1dba-3f58-bac9-bb0c8407d744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:86a6::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:4d:09:94:2e:bb:ae:51:36:10:d5:52:8f:07:34:ed:75:59:
         80:2c:df:1a:98:f9:6c:fd:d9:a7:9a:4e:0a:fd:5c:e1:19:9a:
         1e:87:49:f7:9c:0d:68:da:1f:e2:19:55:6b:3e:8a:9f:9a:85:
         0c:67:e6:cc:50:c5:7e:c6:ae:7a:0c:19:3d:9e:51:d8:16:5a:
         0e:00:2b:78:a5:76:05:a3:c1:46:d1:69:b0:6a:10:05:39:5e:
         5a:e4:04:5d:a4:03:d8:d9:c1:e2:01:73:19:4d:60:da:b7:f2:
         95:c7:f0:28:f5:a0:d4:89:04:87:b9:0a:3c:2f:2b:c9:7a:84:
         6f:ca:a6:35:54:b6:82:6c:c9:f1:1e:b4:2a:1e:ff:ad:30:ee:
         13:7c:28:d6:a9:4e:cc:a8:a3:52:fb:16:ff:50:15:37:a3:4c:
         10:6b:47:8c:c5:36:c7:0e:d3:90:f9:5b:e2:4d:fb:26:4d:be:
         36:05:1d:2e:68:f8:3d:84:0c:51:78:62:dd:96:ff:4c:59:00:
         f0:6a:51:fd:bc:cd:35:61:eb:48:55:46:43:fc:56:5f:19:69:
         3d:be:48:b2:2a:7e:4f:fd:86:ba:30:c8:fb:c2:17:c8:61:1c:
         59:40:80:b5:44:0c:5f:71:70:06:12:84:54:9e:84:b7:15:11:
         60:37:ec:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:19:47 2025 by rpki-client