Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7bb0ac07-6080-310f-8b9e-31259771e205.roa
File:                     7bb0ac07-6080-310f-8b9e-31259771e205.roa (raw, json)
Hash identifier:          gvpmibZ0XXkuj2iJ8O14sjz8BYKk0m7erEUjFt30fEg=
Subject key identifier:   8C:5B:64:7F:BC:94:37:50:32:C9:0A:A0:AB:34:D1:34:78:0B:A7:2F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01DABD228F347FA7C10C40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7bb0ac07-6080-310f-8b9e-31259771e205.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2001:579:821c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:da:bd:22:8f:34:7f:a7:c1:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=dff1a4e1-cdc9-4e3f-8d8d-e6d66369639d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:20:a4:bf:3c:b4:ef:e3:8c:cd:4c:5d:2f:d8:
                    e7:b1:a9:f2:67:d7:dd:5f:0b:b1:c8:75:6c:d6:96:
                    2f:e1:7f:d1:c2:d8:e2:1c:be:90:77:cc:aa:20:68:
                    e7:52:75:58:79:49:bc:79:31:50:ee:1b:ef:3f:58:
                    75:c0:16:46:16:2c:7b:33:d3:ed:7c:50:46:94:af:
                    73:a0:e5:67:3f:42:52:ca:02:d2:aa:cd:83:b4:b7:
                    1c:4c:02:fd:d9:ae:73:2c:ca:26:db:82:b7:8d:13:
                    ad:4a:99:1a:74:ec:b9:0d:ce:17:46:29:f1:a5:b1:
                    6c:e9:a8:8b:53:df:b3:74:fd:6f:d1:bd:f0:92:a9:
                    4d:1c:2a:79:d1:dc:6b:78:ef:92:2f:1d:e1:34:54:
                    ef:64:41:76:b3:50:7f:17:e7:57:98:53:c4:33:52:
                    cb:95:54:2e:7f:75:6d:f7:1c:b1:d7:2f:72:23:d0:
                    f4:54:3c:97:fe:73:f4:b1:aa:62:a7:1b:49:a4:a1:
                    c1:16:96:42:7d:15:6d:c9:14:f5:50:6e:72:14:b0:
                    60:3b:cd:9d:ff:87:98:83:de:a1:3b:a8:0a:7a:38:
                    ae:43:6d:8a:d2:8b:f0:11:e9:df:b5:9c:ed:fc:fe:
                    e0:7e:ad:60:0c:ac:49:4b:6d:31:2d:0e:0c:3e:f3:
                    d9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5B:64:7F:BC:94:37:50:32:C9:0A:A0:AB:34:D1:34:78:0B:A7:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7bb0ac07-6080-310f-8b9e-31259771e205.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:821c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:7d:91:61:3f:a0:3d:64:b7:e2:bc:5c:c1:8a:34:c6:2c:94:
         74:15:9b:28:a4:52:60:ca:b5:9f:0d:3a:c2:6f:dd:14:dd:b5:
         4a:b1:fc:7c:8d:04:2d:1c:b1:2e:a8:46:28:34:97:c7:aa:08:
         7a:87:1e:17:8b:ae:7b:3f:e4:55:43:6f:95:f4:38:74:e1:dd:
         58:a2:f5:83:b1:d4:71:29:ec:6d:c5:11:a1:31:e3:69:be:c5:
         8a:1b:40:56:aa:3b:8d:4a:40:bd:81:15:8a:9a:a1:bb:c6:96:
         24:fb:53:80:9d:86:7f:3f:4a:18:88:a6:88:22:b0:a7:d6:ab:
         04:7b:15:46:8c:91:23:42:4a:a4:ae:a6:6f:38:5a:d4:f4:e7:
         ad:6a:31:7f:24:36:fc:fc:83:f0:85:f1:dc:5c:05:d9:c2:4f:
         31:94:ba:60:67:5a:53:c6:cb:5e:6e:73:bc:5d:59:8c:b5:42:
         28:92:8c:72:17:a4:c8:45:29:f7:11:84:42:90:e4:52:ba:df:
         05:3e:ef:ad:74:48:01:67:13:53:fe:c6:c5:61:1d:42:af:60:
         de:b7:aa:7c:04:82:b2:85:d1:5b:29:7e:a8:6e:9d:55:4c:1f:
         a4:ae:97:f2:37:3d:fe:ee:79:89:0b:d8:fa:5c:0d:56:d1:81:
         9c:17:fa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:51:24 2025 by rpki-client