Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75728037-1a3d-3277-9a98-f6eb561f3bbf.roa
File:                     75728037-1a3d-3277-9a98-f6eb561f3bbf.roa (raw, json)
Hash identifier:          +2qg55jvyDgK5bGjWlkZ49DU3kv9YhGgg8pvE53Y8XI=
Subject key identifier:   35:FA:4A:02:FA:60:AA:22:52:4A:C8:EC:3F:F9:03:A5:9C:F7:84:36
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F02196A39E26C968312E023
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75728037-1a3d-3277-9a98-f6eb561f3bbf.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:b720::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:19:6a:39:e2:6c:96:83:12:e0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=77a8b76f-b33f-4834-8c66-4fe7e5c39589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:27:bc:94:f4:05:af:8d:e3:db:4c:8d:0e:4c:
                    2a:f8:d6:34:a7:f4:ba:1d:02:a4:3e:aa:1e:b5:ac:
                    6c:38:53:ef:91:3c:9a:91:22:89:84:da:c7:45:4f:
                    0a:f7:30:0c:ce:a9:f1:79:18:ac:06:d5:be:b9:82:
                    36:b9:2b:bb:67:25:26:c0:da:8c:5b:e9:e3:d8:17:
                    ef:63:23:77:ef:97:15:69:5a:3e:1d:91:cb:b1:22:
                    59:d1:d9:70:aa:ca:28:a5:ee:8e:7b:b0:be:03:4c:
                    2f:6b:b6:42:b4:c9:34:57:9e:3b:72:e1:6e:7c:e6:
                    26:23:2e:3a:05:e4:bd:da:4b:af:e9:d1:7b:96:8b:
                    9d:29:dc:c3:30:e8:3a:77:c5:0d:2b:70:81:96:a5:
                    f8:86:ca:ab:ca:63:5a:c5:3e:9a:f2:bb:01:b9:a6:
                    52:4a:83:65:62:94:fb:06:99:c3:76:0e:d9:6d:3b:
                    a6:68:93:88:8a:bf:2c:85:82:0f:bd:c4:cb:6e:0a:
                    18:5b:27:e4:6f:1c:56:5e:0e:cb:24:9f:e9:0b:0a:
                    60:d6:ed:78:1a:42:e6:73:4b:3c:12:3f:83:b5:34:
                    23:c2:de:ec:2e:e2:fd:86:91:56:52:9c:9a:27:1f:
                    fd:7e:b8:48:73:3f:52:8f:d8:4d:be:52:61:ec:0e:
                    d1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FA:4A:02:FA:60:AA:22:52:4A:C8:EC:3F:F9:03:A5:9C:F7:84:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75728037-1a3d-3277-9a98-f6eb561f3bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:b720::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:10:28:2f:48:d4:40:0b:f1:59:73:77:fc:83:33:c9:33:13:
         f3:bf:f5:a6:61:1f:bc:cb:57:34:d3:39:1f:54:05:6e:7a:e2:
         96:88:19:50:4d:c0:7a:07:31:4b:ad:4c:6c:05:3f:8a:f8:26:
         f6:a2:62:db:e7:1c:cd:a6:c6:5a:df:56:c3:98:ff:41:36:8b:
         1e:f3:07:0f:2b:fc:29:40:28:bb:05:10:d5:8f:1c:ca:8b:e4:
         d3:17:e5:1a:ce:4b:80:83:dd:99:a7:57:25:8d:af:db:34:28:
         5a:4c:c0:21:96:f9:b2:ee:7f:4c:cf:cd:0b:6c:01:59:89:82:
         0d:a4:94:31:70:f9:4c:a5:b3:66:59:1a:88:fd:0d:d6:2a:69:
         9f:e7:da:e3:93:f5:f3:09:d4:93:90:63:de:03:fc:7d:65:00:
         7e:cd:0a:74:93:28:b6:98:08:23:d4:53:6f:49:ba:e9:ed:7e:
         5e:7c:28:bc:ce:14:61:c4:cb:17:94:d8:03:46:eb:13:d9:be:
         1d:e0:9c:17:b9:6e:a6:45:b1:04:53:2e:0e:13:76:be:ef:61:
         25:39:8b:0b:99:06:67:1f:87:75:6d:5d:ed:8f:0b:fa:97:0e:
         0c:ab:fb:c7:31:ad:65:4d:a2:90:55:da:f4:d0:2a:22:42:97:
         e3:6a:eb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:52:42 2025 by rpki-client