Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e21ca2c-ea02-397a-aaf9-f6c26b940a02.roa
File:                     7e21ca2c-ea02-397a-aaf9-f6c26b940a02.roa (raw, json)
Hash identifier:          yf6eXUyzk9swDiPofliFR0RfeqFawkeyu4Rjb9xdasU=
Subject key identifier:   00:88:83:C1:F6:24:81:CB:0B:CA:FD:81:B2:D3:CC:39:68:CB:2F:34
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01FA884226F3D5B9F7FE80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e21ca2c-ea02-397a-aaf9-f6c26b940a02.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:565a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:fa:88:42:26:f3:d5:b9:f7:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=ed1509eb-790a-4373-a84d-b27b1d7fc688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:a4:f0:7b:69:6d:f5:6d:d0:2a:6f:06:4c:
                    ac:e6:45:46:8c:ef:95:a1:79:3d:8e:62:a1:d5:ce:
                    5e:75:0d:c3:8e:18:9d:27:b0:dd:d7:ef:79:40:4e:
                    63:cb:f4:74:77:d3:f3:75:d1:37:47:5d:04:3c:38:
                    82:e2:a6:40:75:1d:ca:d7:1a:28:d2:3f:f4:8c:22:
                    64:e3:95:37:33:79:1f:60:07:c9:5d:28:d2:21:c4:
                    9a:a9:76:04:5e:a5:10:e5:9c:bf:50:4a:a9:db:41:
                    f0:4d:35:38:45:ed:30:df:a6:95:2f:64:3c:48:ca:
                    52:b6:1a:40:04:7b:8c:4f:eb:0f:9c:92:0d:62:4f:
                    85:a6:b6:a9:77:05:ad:93:3d:21:56:55:45:eb:6b:
                    f1:4d:b4:ce:c2:12:34:b9:bb:ea:d7:b5:60:8d:39:
                    d2:c7:fb:4c:0f:39:ad:27:3e:de:87:8b:f3:b8:e8:
                    e7:8b:0d:17:51:fc:9d:70:38:77:c4:f9:ce:8b:80:
                    65:63:0e:dd:84:ce:f1:51:6c:f9:33:f9:e5:18:87:
                    1e:dc:b2:58:79:38:81:03:3e:bf:f8:9a:26:68:8e:
                    00:e7:8d:a1:f2:8f:8c:10:aa:67:31:1f:81:d5:44:
                    95:59:49:4b:36:2f:e2:43:fc:24:e2:6f:d9:ce:90:
                    ac:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:88:83:C1:F6:24:81:CB:0B:CA:FD:81:B2:D3:CC:39:68:CB:2F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e21ca2c-ea02-397a-aaf9-f6c26b940a02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:565a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:7a:56:d2:f5:fc:4c:e4:27:62:bc:71:20:17:e3:52:37:f3:
         7a:dc:3f:24:d1:74:5d:fc:91:4b:39:02:8f:72:a5:e3:d3:bd:
         7f:ce:34:ed:e9:33:63:08:8f:5e:1d:99:64:9c:ba:ad:ff:a2:
         5f:d1:52:dc:1d:83:da:4d:51:7b:6c:51:56:4d:d4:3a:67:35:
         52:f5:f1:63:38:70:d8:7e:47:ae:ec:1b:08:42:60:af:70:a4:
         17:0a:a1:17:95:4e:1e:10:40:9c:6a:92:fa:4d:a0:30:6b:a6:
         d1:1c:a4:9a:ca:bf:63:be:87:ab:7a:56:9b:8d:ab:d0:8f:21:
         d2:50:03:f6:c7:14:58:ba:7c:64:56:ed:7d:33:10:ed:3d:1f:
         39:88:c4:b8:a4:db:a8:59:38:67:35:16:bd:fe:21:32:94:d0:
         ec:53:25:ab:c1:ed:9c:80:a5:02:7c:53:c3:92:c4:4c:0c:b4:
         1c:b8:44:df:8e:f4:27:aa:9b:6e:04:30:a1:10:fd:a0:6c:63:
         ac:2c:e4:32:b5:68:02:50:27:b4:6b:57:c8:bd:23:c1:f2:6a:
         e9:48:d5:1a:40:0a:01:64:3f:58:1e:40:92:ba:c9:7d:32:2f:
         4c:1b:99:6b:e7:63:0c:bf:1a:30:12:bb:03:a1:77:e9:6d:96:
         b0:f7:4e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:44:19 2025 by rpki-client