Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e39b644-8f32-3427-bf65-d92d20a33ee5.roa
File:                     8e39b644-8f32-3427-bf65-d92d20a33ee5.roa (raw, json)
Hash identifier:          sPZw2AP2Xb88n6N5rwz0h+V3YdzeRkypRnWidMnd7oA=
Subject key identifier:   2D:B3:41:67:8E:4F:AD:81:31:60:2F:74:D7:F0:46:27:BE:8B:62:B4
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F021FDC6ED5A1509BF1FB00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e39b644-8f32-3427-bf65-d92d20a33ee5.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:880a:30c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:1f:dc:6e:d5:a1:50:9b:f1:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=6037079d-c112-4d18-bf2d-827d64b81735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:44:e6:15:2b:c4:69:61:d0:be:46:17:5c:6e:
                    a3:32:40:f9:50:a4:a6:4e:30:aa:65:7f:1a:79:ff:
                    2e:f6:62:a6:cd:21:07:c2:76:ec:80:31:19:ce:43:
                    45:98:2e:3b:b8:7d:30:13:f5:c9:a7:83:b7:5e:e6:
                    51:18:6c:94:d3:4a:2f:85:f2:ba:23:78:f2:cf:37:
                    c2:d5:3f:85:01:ba:a0:11:b4:c9:85:16:e4:11:b2:
                    a6:ad:a0:b6:5e:31:7b:33:dc:56:94:2a:16:86:0f:
                    62:03:4f:74:06:f6:10:65:db:32:51:15:1a:c2:11:
                    f6:9e:13:e7:5f:b5:fa:67:0a:54:02:2e:af:66:d2:
                    af:99:3c:af:4c:80:84:0a:d1:1a:39:1b:2a:ca:70:
                    fc:95:58:9f:b2:11:81:e3:a1:02:84:ea:13:ec:d8:
                    d9:5f:45:69:5d:fd:8d:88:0f:39:5d:62:79:81:60:
                    6a:f1:ef:13:38:25:61:42:36:c3:a6:0f:2d:08:54:
                    67:10:ce:35:41:64:11:fb:49:12:b2:b4:06:5b:0f:
                    f5:ab:3e:4c:81:c3:22:8d:03:a9:a8:79:05:71:77:
                    36:7d:5b:83:06:b5:e5:2e:19:24:4d:d5:b8:6f:75:
                    63:f6:d7:6d:49:7d:77:3c:bf:d8:bb:d1:03:9e:28:
                    78:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B3:41:67:8E:4F:AD:81:31:60:2F:74:D7:F0:46:27:BE:8B:62:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e39b644-8f32-3427-bf65-d92d20a33ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:30c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:87:dd:d6:8d:68:00:6a:63:25:81:b6:f4:21:58:e4:c9:a2:
         52:aa:c5:8a:6d:fe:28:f9:58:ee:00:96:d1:f3:c8:b9:ed:44:
         da:d1:b7:f5:de:cd:54:90:09:4c:e8:07:b4:4f:c8:64:37:47:
         6c:75:73:bd:70:97:c1:89:d6:44:7f:aa:99:e6:6d:3b:f1:36:
         b7:d6:6c:21:b9:57:c8:f1:d1:b0:b5:4a:9d:82:f4:8e:b7:49:
         a2:1a:fd:1f:d4:8d:86:10:9e:ee:b9:7f:b7:f4:4c:c1:0f:cc:
         62:76:95:cb:3a:bc:a1:f7:f9:5e:47:8f:19:dc:f3:1c:68:0e:
         c4:c7:4e:bb:6f:c9:9d:45:23:6c:05:cf:46:74:f7:38:d7:a4:
         0b:c4:87:29:52:c9:ba:2f:12:da:35:99:4c:12:59:2c:f1:c1:
         e1:b0:59:5a:84:40:5d:dc:b6:d6:d6:dd:2d:32:04:1c:3c:b1:
         fc:78:64:b3:20:58:53:ed:d8:ca:a1:bf:fe:74:b0:ad:f9:d1:
         86:a8:ed:7b:52:1e:8d:c4:fb:8a:e1:f5:68:66:7f:af:49:63:
         55:74:3e:92:ce:32:bb:92:99:ba:46:9c:95:ea:78:61:60:ef:
         29:d1:d8:a8:b2:a1:5a:29:4c:51:5c:88:fe:40:50:e7:48:5f:
         76:d0:02:83
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAh/cbtWhUJvx+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
NjAzNzA3OWQtYzExMi00ZDE4LWJmMmQtODI3ZDY0YjgxNzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUTmFSvEaWHQvkYXXG6jMkD5UKSmTjCqZX8a
ef8u9mKmzSEHwnbsgDEZzkNFmC47uH0wE/XJp4O3XuZRGGyU00ovhfK6I3jyzzfC
1T+FAbqgEbTJhRbkEbKmraC2XjF7M9xWlCoWhg9iA090BvYQZdsyURUawhH2nhPn
X7X6ZwpUAi6vZtKvmTyvTICECtEaORsqynD8lVifshGB46EChOoT7NjZX0VpXf2N
iA85XWJ5gWBq8e8TOCVhQjbDpg8tCFRnEM41QWQR+0kSsrQGWw/1qz5MgcMijQOp
qHkFcXc2fVuDBrXlLhkkTdW4b3Vj9tdtSX13PL/Yu9EDnih47QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC2zQWeOT62BMWAvdNfwRie+i2K0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGUzOWI2NDQtOGYzMi0z
NDI3LWJmNjUtZDkyZDIwYTMzZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCICgMM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE2H3daNaABqYyWBtvQhWOTJolKqxYpt/ij5WO4AltHzyLntRNrR
t/XezVSQCUzoB7RPyGQ3R2x1c71wl8GJ1kR/qpnmbTvxNrfWbCG5V8jx0bC1Sp2C
9I63SaIa/R/UjYYQnu65f7f0TMEPzGJ2lcs6vKH3+V5Hjxnc8xxoDsTHTrtvyZ1F
I2wFz0Z09zjXpAvEhylSybovEto1mUwSWSzxweGwWVqEQF3cttbW3S0yBBw8sfx4
ZLMgWFPt2Mqhv/50sK350Yao7XtSHo3E+4rh9Whmf69JY1V0PpLOMruSmbpGnJXq
eGFg7ynR2KiyoVopTFFciP5AUOdIX3bQAoM=
-----END CERTIFICATE-----
Generated at Wed Oct 15 21:27:25 2025 by rpki-client