Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d3d09d3-8939-313d-a385-f1a1043b0c3b.roa
File:                     7d3d09d3-8939-313d-a385-f1a1043b0c3b.roa (raw, json)
Hash identifier:          xvRFn9ImpqSG6KkZXU5B7MvpI5CgPKV4DqOykOJpeNY=
Subject key identifier:   31:CB:4F:3A:1F:12:8A:50:BB:C1:C4:B4:1B:0C:EE:72:61:1A:D6:A9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F02234EEF44C4404B91B060
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d3d09d3-8939-313d-a385-f1a1043b0c3b.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:880a:b00::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:23:4e:ef:44:c4:40:4b:91:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=c4a24c0b-e63c-4740-85e3-b69941727394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:9f:ee:13:5e:35:77:22:3e:c5:a5:9f:70:
                    e5:6b:29:37:90:b8:22:65:4d:f3:5b:46:2e:f2:6c:
                    2b:1b:27:9e:39:64:67:c4:10:e9:09:87:72:56:39:
                    1c:2c:2f:31:a8:f4:53:a8:44:5c:9a:2d:d7:af:23:
                    c1:61:89:ef:0c:2c:c6:b6:aa:19:c3:f8:7c:e0:b7:
                    c8:08:71:32:39:bf:de:70:35:1e:de:fd:2f:90:b8:
                    25:2a:c0:0c:44:ac:fc:14:1f:49:bd:80:48:47:e0:
                    9f:58:85:9f:cd:f0:85:dc:41:04:40:e6:03:f2:9c:
                    c5:f6:17:18:39:7a:24:cd:e1:cf:ab:55:1d:8e:e6:
                    a5:b7:84:e9:b4:14:7b:f9:cd:52:f7:b0:d6:ba:dd:
                    ae:11:07:2f:07:e5:47:ac:71:71:b8:7f:ec:18:38:
                    43:9b:22:5e:cf:19:ff:f3:7f:2c:c5:6a:19:11:74:
                    e1:b6:98:8e:a6:0d:51:aa:5e:cc:e4:c9:76:1f:71:
                    80:11:aa:af:f7:27:79:02:c4:68:4b:d7:5a:ad:4c:
                    4d:b1:87:7b:d2:bd:12:b6:ca:19:df:bb:6c:e3:cb:
                    5d:c5:13:9e:74:cf:12:7b:db:62:5c:02:6e:70:e2:
                    4d:62:33:7f:ff:94:52:a2:08:77:5c:9e:18:42:6b:
                    ea:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CB:4F:3A:1F:12:8A:50:BB:C1:C4:B4:1B:0C:EE:72:61:1A:D6:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d3d09d3-8939-313d-a385-f1a1043b0c3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:b00::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:10:89:f5:b4:42:a2:70:da:31:4e:f9:a5:54:70:db:c4:8e:
         80:3a:5f:ff:f6:7b:57:01:c0:34:f5:10:b2:b8:1a:15:55:08:
         38:76:0f:cc:d7:66:ba:cd:56:41:fc:65:9e:f7:f7:83:b6:17:
         07:d0:ba:a7:55:64:ea:04:dc:0f:af:47:2a:84:23:39:f4:0b:
         87:95:f4:f8:a7:54:36:43:a4:86:68:0f:22:19:76:eb:7b:a0:
         3b:b4:62:20:ae:07:73:fa:7b:af:82:d3:32:0a:9d:5f:eb:20:
         df:15:44:1d:cd:02:32:53:db:4f:70:1d:54:25:35:56:75:08:
         51:6c:e0:01:be:4b:32:db:70:9d:6c:0c:d9:0e:55:2b:1c:ca:
         83:16:15:5b:89:1e:95:33:3a:ab:eb:92:14:a9:aa:56:17:ee:
         b7:e6:5c:06:2a:54:ac:6c:7c:45:d9:fe:1a:7d:83:3e:cc:bf:
         ec:4a:da:68:bd:1e:63:32:b1:0f:b1:93:6e:0f:ef:44:80:52:
         a7:1d:a1:bf:0b:c1:cd:ae:c7:2f:11:0f:0b:cb:c8:5c:d2:a3:
         98:c4:6f:7c:20:12:3b:16:6d:e5:92:aa:ca:23:84:c6:94:d3:
         3b:30:31:d3:00:61:de:96:ae:b3:ee:98:07:4c:7d:f1:21:08:
         7a:56:b6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:30:07 2025 by rpki-client