Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d53b40c-55db-338b-9e8b-573988083731.roa
File:                     7d53b40c-55db-338b-9e8b-573988083731.roa (raw, json)
Hash identifier:          HFPhJfN49dW/kMQ3eEbGMyeEkwK+nA0gAGcP2pGvit0=
Subject key identifier:   6C:D8:90:1B:FC:E6:10:70:0E:E9:3F:F0:C8:ED:43:F5:3B:B5:B5:5B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F0220824ED36D8BA7968B00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d53b40c-55db-338b-9e8b-573988083731.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:880a:33c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:20:82:4e:d3:6d:8b:a7:96:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=a3054a7a-d2fe-4922-af79-5a82b731556b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:24:1f:2e:5b:f0:33:f5:48:c9:82:41:f0:50:
                    78:2a:2b:ec:7b:0e:92:32:1b:d6:9f:e3:62:c1:c6:
                    89:69:5d:93:db:db:2a:2e:da:d5:6d:54:b3:d9:ff:
                    8b:a2:c0:1a:1a:51:2b:ac:28:21:95:c7:7c:50:25:
                    5a:6d:0c:4f:dd:06:94:23:1b:d6:65:05:99:9a:93:
                    4a:9f:cf:1e:85:10:1a:d9:3b:ce:12:a6:f4:c3:a1:
                    6e:d0:3f:ee:89:f5:6d:bb:4c:1c:3e:f5:9d:f1:ee:
                    e2:a1:fa:9f:8d:28:67:ca:ab:0c:4c:40:7d:51:87:
                    da:aa:ba:17:b6:e8:2b:4c:b8:b6:42:df:15:6d:7f:
                    e9:75:dc:0c:f2:bf:02:d5:d4:76:ff:6f:66:46:45:
                    37:b4:c0:97:1c:48:1e:cd:ea:17:ce:77:29:52:67:
                    80:26:f0:77:23:ab:85:68:9c:1e:f9:72:91:69:f2:
                    d1:cc:6b:be:fe:09:f3:6b:d6:ea:aa:a2:46:eb:d3:
                    e8:5a:69:82:b6:1a:cc:2f:07:21:29:cb:ea:26:89:
                    71:a6:5f:f0:fd:5a:6d:48:75:cf:63:05:e9:37:6a:
                    d9:66:ee:de:2d:76:16:aa:97:b6:bf:0b:83:6f:2e:
                    2a:a7:c2:b2:24:c8:66:e3:6d:7a:55:5c:dd:1e:42:
                    50:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D8:90:1B:FC:E6:10:70:0E:E9:3F:F0:C8:ED:43:F5:3B:B5:B5:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d53b40c-55db-338b-9e8b-573988083731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:33c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:7b:df:ba:2f:24:2a:12:f0:aa:61:3f:75:a3:8c:f1:34:05:
         49:e8:74:f4:6e:10:e5:89:25:46:ac:1b:f9:a5:0d:90:ff:96:
         bb:ec:2e:67:b2:9b:15:26:5b:90:7a:58:69:a2:df:89:c3:30:
         5d:5f:3e:34:f0:a8:63:00:cd:61:91:4f:50:e8:6a:b2:3a:a5:
         25:0d:9f:93:f8:42:73:f3:ee:dc:1d:f4:9b:56:fb:72:d9:ba:
         26:63:0f:7a:5b:3c:dd:a0:55:e1:48:a8:0f:9b:7f:de:f6:d8:
         cd:f9:c7:ec:af:7b:79:33:05:b5:e8:4d:3b:52:73:e5:37:61:
         1b:16:d8:82:1f:87:32:b9:40:25:38:81:fe:39:23:52:a9:3b:
         84:b3:94:26:6b:7b:24:7f:20:8e:94:d4:62:cf:29:b8:35:65:
         f9:b9:9f:1a:3c:6f:c8:76:d7:53:22:aa:03:b9:18:88:9f:8b:
         6a:be:9f:f4:2a:2e:7f:33:18:f7:ca:3d:39:3e:dd:08:2a:ff:
         b1:92:21:b1:a9:e5:23:8b:7a:cd:77:f0:d1:4f:04:3b:7d:ad:
         1b:a9:1b:e1:5e:88:72:f0:5b:36:c3:d4:b1:28:44:5b:8b:56:
         35:dc:f6:c0:c3:9c:de:88:1c:df:ef:06:39:2f:e2:e0:43:b3:
         a4:2e:21:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:35:43 2025 by rpki-client