Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d20ff7a-004c-3b4c-ab22-5578be1378ab.roa
File:                     8d20ff7a-004c-3b4c-ab22-5578be1378ab.roa (raw, json)
Hash identifier:          Q2NB1VRoE9H/4y9ErLqKmuNz4iEx9czYEwcvw8B9t1U=
Subject key identifier:   42:CA:C3:EF:B4:E8:C6:4B:21:1D:9A:20:63:25:D9:DB:41:A5:0B:56
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01F33F6B654011AF963500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d20ff7a-004c-3b4c-ab22-5578be1378ab.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:3f6a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:f3:3f:6b:65:40:11:af:96:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=76247ff1-5ab9-4cb1-8e49-66132a797838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:31:29:ca:73:fa:56:1c:6a:da:13:62:08:
                    ad:16:09:d8:a1:7f:cd:86:b1:55:49:0e:a2:cc:82:
                    9e:87:fc:92:29:1c:08:46:3e:df:17:4b:aa:09:d8:
                    c4:01:75:0e:a6:de:1b:29:20:d8:13:19:3b:cd:5b:
                    7d:7c:30:1f:22:9f:86:7c:37:0e:7a:21:3e:ed:85:
                    c9:a2:45:de:3e:a2:f3:8b:93:9a:31:e9:6e:9f:9c:
                    c2:3e:8a:cd:68:06:56:dd:24:7d:91:76:81:7a:8a:
                    7e:68:7c:b3:1c:94:d8:ae:ab:02:0d:4d:80:7c:86:
                    0e:86:8f:8c:c7:fe:e5:de:16:73:8f:b7:87:a4:38:
                    e5:a1:8f:48:28:63:7a:b5:47:5d:ea:11:fb:df:78:
                    56:49:7b:3f:c5:79:30:7b:7a:77:7b:95:ca:8a:2a:
                    20:45:fa:b6:0b:ca:8e:56:e9:7a:31:d4:58:e3:b0:
                    09:6a:9f:af:93:9c:b1:d9:92:ea:c5:9f:13:c5:f9:
                    4c:a9:c9:72:66:c2:58:49:19:84:67:b0:7b:24:c2:
                    d3:9e:61:0c:45:2e:34:bd:79:46:65:70:48:40:96:
                    d7:fe:d8:8b:b7:4c:e6:30:e4:12:02:87:6e:72:0d:
                    20:0a:63:03:fd:de:fd:39:5c:2c:e7:20:87:ef:e6:
                    67:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CA:C3:EF:B4:E8:C6:4B:21:1D:9A:20:63:25:D9:DB:41:A5:0B:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d20ff7a-004c-3b4c-ab22-5578be1378ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:3f6a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:94:31:e0:01:aa:90:ba:48:ce:a2:25:44:cb:aa:15:87:10:
         a6:99:5d:5d:78:1c:4f:7d:e5:3a:2a:4a:03:28:5a:ef:41:30:
         f9:19:34:d1:77:d2:83:8e:bd:62:42:44:b0:c7:bb:43:f8:15:
         82:6b:c7:fa:81:70:72:59:d9:69:f4:c4:d0:1e:cc:92:a0:35:
         c3:90:b4:32:c8:cb:6d:3d:5a:8c:56:4c:88:d7:79:83:99:90:
         60:ab:3f:d2:1b:66:d0:f4:b0:47:ae:c2:11:e0:4a:d6:47:36:
         4c:27:7e:da:5c:1f:4b:16:1d:a9:4c:6a:ff:9b:6c:cc:42:03:
         a4:78:09:8d:42:2a:cb:d1:81:70:f5:97:59:8b:b9:59:98:d5:
         6b:44:e6:bf:6d:fe:be:2f:48:6e:45:26:b7:f1:74:ae:39:f5:
         2d:1c:a0:00:06:e3:af:0a:32:7d:59:bb:d0:49:bb:50:bf:09:
         bb:ca:f2:64:8e:97:56:9c:6d:d8:62:e5:06:5d:e4:d6:b1:7d:
         97:f0:c7:b5:41:2c:06:59:96:22:7a:7a:f5:04:72:98:a8:89:
         5e:c5:8c:1e:5f:70:81:72:86:cf:3c:97:89:f7:45:03:64:59:
         6b:7a:ed:d3:47:e0:af:96:47:ab:68:ce:9e:a8:29:cc:f2:e2:
         57:9c:b2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:27:37 2025 by rpki-client