Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78a53c97-a03f-3978-9ea1-113ba52e645e.roa
File:                     78a53c97-a03f-3978-9ea1-113ba52e645e.roa (raw, json)
Hash identifier:          QjDxappInaRleTugf4nQ67bWnHlmbupMioo8ZtmgBVg=
Subject key identifier:   0A:7E:C3:BD:49:4D:3B:D3:E9:08:93:E7:91:3E:F7:DE:22:33:0B:37
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01F7DC20D99E2347FD6080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78a53c97-a03f-3978-9ea1-113ba52e645e.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:5416::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:f7:dc:20:d9:9e:23:47:fd:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=bb76ded0-2ad1-44a7-85a6-db26d5aa51c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f8:26:9f:95:eb:6c:26:7e:0c:60:52:c3:f1:
                    8c:c6:fc:fe:17:f9:34:af:01:01:aa:38:fb:16:fb:
                    18:1c:f9:e3:e2:33:79:b7:e2:64:d2:11:ca:b1:de:
                    50:c1:02:2f:31:43:e5:7c:2c:49:de:19:01:e4:a8:
                    47:89:cd:b3:20:d2:f0:6d:de:6d:4d:13:8d:c4:aa:
                    a5:fa:83:27:41:29:b5:92:45:e4:6e:08:73:d5:2b:
                    2e:8f:d0:a9:49:22:17:ba:cc:f3:e8:d5:8e:56:2a:
                    71:93:75:99:a8:7f:84:5a:c7:85:64:59:1b:28:99:
                    d3:5f:37:f0:50:5e:99:8c:64:d5:9f:d1:1a:6f:2c:
                    fe:68:6d:1c:49:b7:23:7f:20:61:9c:97:58:f8:99:
                    5a:fe:eb:ca:5c:c0:90:e2:0e:01:54:6f:fd:f0:9d:
                    1f:6d:00:34:83:d2:c4:1d:b2:0f:38:d3:44:da:46:
                    a7:cc:85:b6:af:56:4c:b0:f8:26:6b:35:a8:55:91:
                    6a:f8:1b:cc:2a:ab:b9:f7:d6:5f:e6:f3:f9:1e:75:
                    af:25:39:9f:60:8d:cf:aa:6b:f8:f7:3c:da:fa:91:
                    81:1f:55:4d:d6:f7:8a:c1:bf:c7:4c:53:e4:40:28:
                    ed:0c:cc:48:6d:29:3c:b4:52:56:86:7c:da:90:aa:
                    18:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7E:C3:BD:49:4D:3B:D3:E9:08:93:E7:91:3E:F7:DE:22:33:0B:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78a53c97-a03f-3978-9ea1-113ba52e645e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:5416::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:41:af:b0:80:ce:b7:dd:cb:42:91:3b:3c:2b:7e:0b:c5:76:
         2b:da:de:e2:f0:ec:31:1e:8f:27:40:2c:cc:39:13:33:ff:71:
         85:c6:86:40:bb:a7:4b:35:54:c2:02:a2:df:52:44:11:20:1e:
         1f:46:e0:7c:0c:76:d7:0c:40:9b:87:b3:1b:d9:1b:54:86:47:
         14:6e:e3:d1:6e:35:35:93:35:d5:92:ef:73:e9:b4:09:0f:25:
         5a:1d:c0:bd:23:20:11:05:5a:68:32:44:c8:d9:8a:e0:4a:be:
         39:0b:ff:59:b3:80:7c:84:3b:30:42:c3:82:11:70:f9:3d:8e:
         a2:25:62:85:91:28:7a:e0:d4:a0:b9:d0:35:69:27:d4:7c:6f:
         80:4a:f1:cd:77:36:90:24:c8:9b:53:c4:37:29:64:0c:d8:75:
         2b:f2:ef:03:d8:49:c7:64:85:ac:9c:c3:b1:0f:43:a1:47:1c:
         da:29:b4:fc:a6:f2:54:b9:da:4a:a7:05:71:e3:54:52:1f:5a:
         62:5d:6e:79:ba:30:eb:04:a3:c8:3f:e5:26:72:a9:6c:cb:e6:
         e0:1b:07:a3:1c:40:35:75:21:a1:50:a9:51:c8:bf:18:92:67:
         b9:23:cc:11:c4:3f:d1:60:fd:bd:e5:35:6e:80:80:ef:42:83:
         29:7e:31:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:31:33 2025 by rpki-client