Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7c7648a3-4823-350e-ad51-9fbac484ae5a.roa
File:                     7c7648a3-4823-350e-ad51-9fbac484ae5a.roa (raw, json)
Hash identifier:          r78QcMPx8jUawK1FY2L7lW8vGixsj3xxstIhttShquY=
Subject key identifier:   75:81:94:9C:22:5C:CB:FD:A0:7F:44:11:C3:55:6B:6D:B9:40:B8:A2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01E4182C46BEA81B3C2000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7c7648a3-4823-350e-ad51-9fbac484ae5a.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:1280::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:e4:18:2c:46:be:a8:1b:3c:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=6a1f6fff-10a1-4f3b-a126-3d3b92a13f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:c9:91:7a:38:9b:32:d2:35:d0:1e:4f:23:
                    be:04:9b:44:71:da:7c:28:87:60:66:63:06:17:09:
                    df:d8:68:bd:7a:36:67:58:38:db:dd:3e:6a:0d:c1:
                    bc:47:ea:cd:cf:97:c7:91:bf:00:9a:f2:27:32:a8:
                    75:99:a7:af:19:05:43:8a:5f:cc:f9:de:d2:fd:cd:
                    a1:0f:30:57:f7:e2:67:89:d1:d7:48:1a:a1:1a:52:
                    9a:f1:91:d7:bb:f3:d5:ca:60:5a:21:e8:a5:d7:9b:
                    ef:ac:0b:78:a9:ad:d0:4c:33:f0:49:1f:89:e4:9a:
                    42:d3:fe:94:ed:79:f3:d0:fc:c0:ce:08:24:7a:4f:
                    ba:84:ce:64:7e:b1:6f:c2:1e:90:15:69:b2:c0:3c:
                    f3:af:d7:2a:08:71:b0:5f:46:df:85:90:fb:ce:ba:
                    74:8c:b2:30:c2:73:3c:84:06:0f:08:f1:ff:5c:eb:
                    f8:15:7e:b3:9d:74:ca:af:63:7b:87:89:2f:f1:86:
                    7e:fe:cd:c0:60:ac:f1:93:d6:48:45:df:ec:e3:36:
                    5e:d7:aa:2e:de:75:74:c2:65:d6:34:5c:52:a3:0f:
                    4a:ca:c2:0e:a4:bb:c6:91:1a:ea:0b:28:63:14:b4:
                    4e:7e:63:42:48:9c:cd:50:95:b1:88:58:08:b7:85:
                    6d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:81:94:9C:22:5C:CB:FD:A0:7F:44:11:C3:55:6B:6D:B9:40:B8:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7c7648a3-4823-350e-ad51-9fbac484ae5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:1280::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b2:66:e9:16:cb:69:19:0d:be:d6:9f:59:3a:fb:88:1c:d9:
         3a:07:cd:a6:fe:da:5d:94:d6:7f:c2:03:b1:89:00:5f:d0:74:
         ce:c3:4e:c8:15:09:f4:3f:89:58:4c:e5:0e:98:ce:bf:b1:ba:
         7f:fb:39:97:2d:a4:e9:76:f7:fd:ad:d7:2d:e1:01:8a:ed:e2:
         d4:24:97:e2:30:4f:65:d7:ed:b3:db:96:5a:93:5f:60:9f:8b:
         db:ca:28:98:f8:88:14:6a:3b:24:c6:2e:a3:5d:c6:15:86:53:
         24:c0:4f:9e:eb:85:8b:c2:74:94:b4:69:29:d3:86:a2:63:c5:
         55:dc:70:e0:29:bf:1f:fc:04:6c:e9:e3:69:43:a2:7e:51:fc:
         65:b1:d5:60:67:c1:c8:66:8e:13:f0:ad:a8:15:67:87:97:97:
         24:43:a1:5f:08:ef:36:bc:e5:34:fa:fd:4e:75:7d:39:2d:9e:
         6b:a3:2b:d5:b0:7f:c2:04:e7:75:79:21:c2:8f:37:ea:7f:c1:
         d1:5f:f3:dc:f4:ff:fd:3b:c9:9a:d6:22:47:a2:33:82:1e:ef:
         59:2c:6d:60:95:2a:65:b0:c8:d4:a2:d6:02:ac:fc:42:11:35:
         da:15:01:aa:8f:9b:4b:81:a7:07:dc:4d:44:83:c7:5c:95:51:
         d9:c0:05:1a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAeQYLEa+qBs8IAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
NmExZjZmZmYtMTBhMS00ZjNiLWExMjYtM2QzYjkyYTEzZjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmerJkXo4mzLSNdAeTyO+BJtEcdp8KIdgZmMG
Fwnf2Gi9ejZnWDjb3T5qDcG8R+rNz5fHkb8AmvInMqh1maevGQVDil/M+d7S/c2h
DzBX9+JnidHXSBqhGlKa8ZHXu/PVymBaIeil15vvrAt4qa3QTDPwSR+J5JpC0/6U
7Xnz0PzAzggkek+6hM5kfrFvwh6QFWmywDzzr9cqCHGwX0bfhZD7zrp0jLIwwnM8
hAYPCPH/XOv4FX6znXTKr2N7h4kv8YZ+/s3AYKzxk9ZIRd/s4zZe16ou3nV0wmXW
NFxSow9KysIOpLvGkRrqCyhjFLROfmNCSJzNUJWxiFgIt4Vt/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHWBlJwiXMv9oH9EEcNVa225QLiiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2M3NjQ4YTMtNDgyMy0z
NTBlLWFkNTEtOWZiYWM0ODRhZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIABKA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABuyZukWy2kZDb7Wn1k6+4gc2ToHzab+2l2U1n/CA7GJAF/QdM7D
TsgVCfQ/iVhM5Q6Yzr+xun/7OZctpOl29/2t1y3hAYrt4tQkl+IwT2XX7bPbllqT
X2Cfi9vKKJj4iBRqOyTGLqNdxhWGUyTAT57rhYvCdJS0aSnThqJjxVXccOApvx/8
BGzp42lDon5R/GWx1WBnwchmjhPwragVZ4eXlyRDoV8I7za85TT6/U51fTktnmuj
K9Wwf8IE53V5IcKPN+p/wdFf89z0//07yZrWIkeiM4Ie71ksbWCVKmWwyNSi1gKs
/EIRNdoVAaqPm0uBpwfcTUSDx1yVUdnABRo=
-----END CERTIFICATE-----
Generated at Wed Oct 15 21:28:27 2025 by rpki-client