Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7eab5bf5-439e-3a7f-94ed-a8c38f964555.roa
File:                     7eab5bf5-439e-3a7f-94ed-a8c38f964555.roa (raw, json)
Hash identifier:          SDQnpqqbc1kdcswMeq+Z0WbplkEcKy3xYtZcDQHvqyE=
Subject key identifier:   43:AB:ED:53:78:EF:55:E2:DA:57:FD:E4:EB:5A:9C:DC:DC:5D:33:17
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B3DBA23057C3D93AAEF639D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7eab5bf5-439e-3a7f-94ed-a8c38f964555.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2001:579:a154::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:23:05:7c:3d:93:aa:ef:63:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=cc3a4627-2e00-49de-8243-92cf23ba0d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2d:e1:e2:fc:dc:54:c2:88:4a:1f:c8:87:14:
                    7a:8a:f8:12:0c:28:bb:fb:47:21:04:14:bb:4e:57:
                    a8:fc:03:b0:a6:28:bd:11:5e:53:1b:44:b9:4d:27:
                    19:28:df:4a:30:ab:18:c8:7a:66:25:89:ea:77:e0:
                    21:f2:53:78:39:f3:08:55:7e:b5:55:89:19:8c:1a:
                    44:20:9d:5d:e3:4a:b9:ab:cc:7a:99:92:69:9c:2c:
                    39:1b:0f:a0:0d:74:01:76:30:03:e7:ef:7a:1d:84:
                    89:00:1c:47:2e:31:ed:aa:6b:d8:7d:85:73:da:34:
                    03:ff:88:10:ef:21:f9:0b:ca:6b:46:9e:ec:c4:6c:
                    17:6c:9f:e1:73:3d:54:2e:a0:28:0a:26:28:10:9a:
                    9a:43:23:26:15:70:8a:3a:08:a7:c0:94:6f:0e:76:
                    71:42:b2:37:6b:37:61:e6:1c:22:85:87:70:e3:e4:
                    67:ce:3b:90:2f:f0:45:ea:1b:1a:e7:0d:c2:1f:85:
                    16:f2:cd:5e:ee:4b:db:87:db:e0:a6:75:39:49:8a:
                    47:b0:c8:4c:72:b6:9b:aa:73:5f:26:bc:e0:dc:98:
                    20:90:b4:ee:b8:47:a8:79:c4:e6:fc:c2:20:f6:40:
                    60:ca:0a:37:2c:9a:f8:18:02:a3:c1:42:ac:c0:0c:
                    20:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AB:ED:53:78:EF:55:E2:DA:57:FD:E4:EB:5A:9C:DC:DC:5D:33:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7eab5bf5-439e-3a7f-94ed-a8c38f964555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:a154::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ac:47:ea:e5:d3:3f:f9:52:cc:a0:1f:84:39:65:60:88:f3:
         e4:8b:a2:bb:40:5e:8e:6a:ec:74:b2:9c:4a:20:6c:be:84:25:
         3f:37:e6:bc:31:ed:2d:09:ac:1d:07:86:fb:29:75:1d:17:22:
         2d:cf:4b:c1:fe:77:f6:47:be:ed:de:50:b4:b9:c4:78:d8:6d:
         47:83:1e:1d:47:3d:dc:20:6a:e9:76:27:e3:28:f7:92:71:e7:
         bb:2c:03:1f:72:f3:54:fc:bc:6b:b1:63:49:24:de:5c:e9:cf:
         94:24:dd:dd:77:8e:54:ab:ea:01:bb:e4:03:de:4e:ba:ca:df:
         79:56:79:50:4e:e7:d4:12:a1:5b:a9:e9:88:d5:6f:c7:8f:27:
         94:38:4e:ff:d5:41:d2:16:44:2b:13:7c:3a:aa:4f:e6:a9:45:
         e1:df:ad:16:5e:40:ef:fe:d7:60:5e:1f:ef:8f:7f:12:18:65:
         f3:32:69:a6:7a:3b:3c:09:3b:e9:6d:e8:93:4a:82:ed:be:45:
         2f:ed:d8:b4:9e:23:2a:09:b7:00:34:85:01:12:3a:5b:c5:96:
         1b:59:ad:b4:54:b5:64:3c:9a:dc:8e:58:60:43:4b:52:e5:2f:
         ea:d2:30:56:87:b8:eb:8c:64:ba:fa:1a:87:60:7b:94:b2:31:
         b0:40:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:44:26 2025 by rpki-client