Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6de4019c-2a0e-3fb3-85b4-534c61dfc60d.roa
File:                     6de4019c-2a0e-3fb3-85b4-534c61dfc60d.roa (raw, json)
Hash identifier:          R5WZ3Rt/+3+ccVFV1+dBivFG3b333pad72eXlm8E5GU=
Subject key identifier:   39:25:76:A0:46:44:31:40:DB:77:85:D5:0A:5E:25:58:70:DE:2F:62
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01E4D0730C9BED6CE48020
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6de4019c-2a0e-3fb3-85b4-534c61dfc60d.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:1a00::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:e4:d0:73:0c:9b:ed:6c:e4:80:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=13c4cfdf-9d48-4f83-9eda-5f6cd9efc838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8b:93:2f:fb:ee:65:31:3f:5c:69:fa:7c:65:
                    0c:b8:5a:1f:f1:2c:0f:72:22:f9:6a:21:7f:28:51:
                    6f:c9:f2:26:5b:3e:4b:a5:9d:03:d5:09:eb:06:56:
                    13:59:84:cd:86:18:e4:d4:6f:31:50:65:7e:fb:5d:
                    e8:8c:2e:a5:f4:1d:32:64:9f:ef:ab:f3:01:2a:d1:
                    65:76:7f:a1:50:5d:d6:cb:aa:73:6b:8a:7b:c6:e0:
                    2f:7e:a0:6b:5a:c9:ec:b8:23:f3:10:c2:c3:87:35:
                    56:8a:c3:08:dc:ee:d9:01:62:9d:57:a7:f9:03:41:
                    29:e7:50:67:44:1f:10:42:9d:76:01:9b:ed:a4:0f:
                    92:2d:90:4b:39:dc:cb:d3:0b:93:db:2e:6e:7a:67:
                    0a:29:aa:e9:10:d1:50:81:8e:49:2c:71:2a:69:27:
                    6b:40:66:7d:d8:2e:7e:0f:47:da:78:9f:96:a8:3e:
                    8c:e7:5e:35:db:03:d0:c6:99:30:3d:78:50:45:94:
                    67:19:33:09:21:2d:6b:4b:99:ca:2e:4e:df:37:21:
                    74:82:4e:60:77:12:9b:2e:31:d3:7b:73:c1:b5:da:
                    20:9a:98:c5:66:4e:6c:fb:96:a9:b0:79:57:76:c1:
                    95:8e:94:b8:57:50:1d:89:6c:f4:75:33:48:3d:4d:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:25:76:A0:46:44:31:40:DB:77:85:D5:0A:5E:25:58:70:DE:2F:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6de4019c-2a0e-3fb3-85b4-534c61dfc60d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:1a00::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:fb:28:f6:6a:ae:a1:63:80:ba:49:40:a9:79:63:82:39:90:
         b7:87:d5:b8:90:ef:f4:7a:e2:76:7d:6d:34:d9:2e:bd:26:fd:
         b0:b3:c0:dd:fb:07:5b:4c:fb:dc:3a:0e:b5:87:5f:ad:e7:54:
         d1:9b:65:9e:bb:79:af:0c:34:31:ed:7a:f3:88:47:77:77:9d:
         66:e3:fa:b7:ed:bb:75:8b:2d:11:76:a6:f7:85:30:8f:8d:e0:
         e5:fc:63:3f:41:a8:32:bb:96:ad:76:2a:cf:c2:f0:d4:03:26:
         1b:29:eb:e4:5c:d3:4f:be:98:ed:76:0a:25:d2:b7:89:57:a3:
         d9:a2:bf:40:d8:2b:57:a1:11:a4:c9:ec:1e:d2:12:57:f1:ba:
         03:d4:91:ce:c6:af:a4:07:a6:91:34:28:f4:39:bf:19:c7:e7:
         d6:cc:59:7d:e2:18:93:54:88:84:81:e2:51:5b:02:6a:66:73:
         fe:b8:f9:a3:e1:53:c5:ac:b3:fa:b3:52:4a:49:aa:22:b8:59:
         6f:c5:ec:7f:80:73:8f:83:72:4b:ec:33:5a:1f:04:48:95:36:
         fc:dd:51:a4:30:a3:b2:c3:95:f4:bd:72:f7:af:b6:e0:eb:58:
         8c:e9:e1:76:4c:ab:b1:b0:a2:b4:37:70:26:89:73:97:8b:0c:
         ff:7c:0a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 01:33:27 2025 by rpki-client