Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7337d8c6-2fda-36c0-8881-e464e94790c6.roa
File:                     7337d8c6-2fda-36c0-8881-e464e94790c6.roa (raw, json)
Hash identifier:          TrxT2ClXu6VOeq1a8jz4kLg5E+VEjbc8x02baFuxXxM=
Subject key identifier:   31:E8:4D:A3:76:6D:14:75:9D:FB:91:F2:7A:CE:30:DC:59:96:BF:FE
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F021F8CB385338C612E8C60
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7337d8c6-2fda-36c0-8881-e464e94790c6.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:880a:210::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:1f:8c:b3:85:33:8c:61:2e:8c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=c8f74914-6337-4afe-afaf-997b3199bdaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0a:1f:97:bf:74:cf:44:a9:e9:de:7c:aa:03:
                    57:00:d9:85:17:92:f0:c8:25:e2:be:39:49:76:a6:
                    77:42:9f:05:8f:05:d8:50:87:7a:df:3b:09:87:50:
                    49:62:38:21:d1:45:ac:57:38:39:0e:f7:14:bd:69:
                    df:db:40:48:61:2a:1a:1d:0a:92:2e:55:0b:1c:44:
                    c1:59:23:ee:ec:c0:a6:3c:e6:07:d9:36:04:1d:4d:
                    9b:90:15:62:30:5a:85:c4:64:f6:48:da:aa:3c:4d:
                    03:94:f7:ec:55:4d:48:b0:a1:32:83:78:91:ea:01:
                    dd:98:ae:3b:7e:02:e1:51:20:3a:1f:27:4d:62:31:
                    23:b5:ed:f7:71:60:eb:93:e6:eb:43:d6:81:f3:0e:
                    b9:8a:42:d1:db:2f:85:52:3e:31:d7:02:10:e8:ff:
                    84:49:94:e4:36:d6:d3:60:12:ed:98:35:8a:55:27:
                    37:65:5b:b0:a3:75:bb:d0:e5:8e:40:c3:71:33:a0:
                    c8:1d:53:bc:dd:a2:ee:6e:29:9d:d5:aa:03:03:cd:
                    fd:e2:c8:ca:f5:7b:b5:2a:23:3d:24:3b:e3:00:22:
                    fc:f2:48:dc:20:95:26:8a:4d:0d:98:0d:0a:d1:8b:
                    e4:1e:e6:bf:56:d9:27:b4:ca:fe:2a:a2:46:9d:b9:
                    9a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E8:4D:A3:76:6D:14:75:9D:FB:91:F2:7A:CE:30:DC:59:96:BF:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7337d8c6-2fda-36c0-8881-e464e94790c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:210::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:c5:5a:7f:ae:c9:1f:93:36:9f:54:7d:20:8b:ee:2c:8c:a6:
         28:3f:64:6e:2b:ff:11:4c:97:3c:24:a2:f2:2c:69:84:a9:bc:
         82:45:1f:f6:d0:de:b0:61:cd:7b:19:86:e5:b0:39:eb:58:8e:
         13:1a:fa:52:24:a6:e2:0c:0d:5a:a0:e1:30:7b:3e:5c:ec:3f:
         ad:72:08:f3:0a:09:b0:9d:7c:2a:ca:ee:fd:11:ae:3e:89:7e:
         16:f8:fe:e6:3a:6e:0a:bd:2d:ae:77:be:94:40:4c:da:dc:ec:
         02:07:38:0b:ff:15:94:62:fc:ec:ad:b0:21:91:78:46:66:fd:
         df:d2:1a:d9:fd:91:e2:c8:e8:ad:18:f0:7d:5d:94:3b:41:32:
         4e:08:14:a1:94:5d:27:53:a9:1d:a1:c9:f5:30:8c:ee:e6:88:
         0b:5a:5c:c5:ab:79:92:f3:19:64:fb:c1:af:56:f0:c2:3d:3a:
         71:d4:37:e6:ee:0f:3b:20:87:a0:ab:65:19:ff:bf:d9:b0:e9:
         2a:c6:e8:ca:97:76:3c:5b:88:f3:25:5f:3a:5b:a7:6a:fa:2e:
         8d:6c:c7:7b:21:8a:3e:80:51:19:8b:c9:e6:1e:7d:b2:e1:26:
         7a:c5:5c:cf:1b:e0:08:b3:51:30:87:10:1d:e4:2b:31:71:1d:
         6a:a9:3c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:47:54 2025 by rpki-client