Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0681f2e-28b1-368b-b414-c89f2efeee32.roa
File:                     a0681f2e-28b1-368b-b414-c89f2efeee32.roa (raw, json)
Hash identifier:          Sv5A283ZAhm4aMf9cY+2UE7jh17OCQHS3caf4gALyhY=
Subject key identifier:   D4:FA:96:7D:A7:44:A2:F7:78:AE:34:2D:A9:4B:44:E3:BC:43:F7:48
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01FDD1067EFEE7BC547F30
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0681f2e-28b1-368b-b414-c89f2efeee32.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:5b80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:fd:d1:06:7e:fe:e7:bc:54:7f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=c1327add-dbcb-4c74-ab5a-0cc707ae1e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:2e:32:77:23:13:87:d9:33:bc:f5:59:33:
                    26:5b:fd:56:4d:a9:30:05:53:f2:68:97:a3:1a:b2:
                    90:e7:92:b5:82:28:98:43:b2:90:a6:66:fc:d3:69:
                    96:8c:a3:a4:ed:7d:ed:ff:d1:79:4c:88:9d:2f:63:
                    21:80:93:ef:9b:21:66:0c:76:43:c0:3f:39:a1:8d:
                    54:d7:97:95:ec:18:ab:36:85:e6:fa:6e:a1:84:01:
                    df:4e:0b:d8:c8:5e:f7:f9:58:a5:5e:34:cf:9c:5f:
                    72:e0:47:0f:cb:c1:3b:2c:1b:a2:16:b9:4f:66:2c:
                    c6:fe:89:f2:11:51:ac:d7:57:49:c2:f1:ed:5b:51:
                    78:6d:b2:97:51:f0:48:12:d8:a8:fe:74:98:af:6d:
                    13:e9:f0:fc:bc:79:58:f5:4d:ba:51:c7:b4:ec:8f:
                    06:52:c0:de:4b:20:41:14:a6:84:3e:69:ce:9a:41:
                    64:80:1c:2d:88:b7:c1:c5:be:97:f7:2e:74:f0:1a:
                    7a:a4:f7:ea:16:06:5e:7f:40:bb:30:e0:8b:da:77:
                    8a:29:4e:03:c8:e7:d0:f4:ad:65:9a:a4:ea:d6:af:
                    97:4f:c6:21:57:bd:21:a7:a0:e3:5b:a4:57:0a:03:
                    9b:ad:b5:c0:8a:6b:ca:bf:e9:8d:51:0c:b0:9b:7a:
                    66:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FA:96:7D:A7:44:A2:F7:78:AE:34:2D:A9:4B:44:E3:BC:43:F7:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0681f2e-28b1-368b-b414-c89f2efeee32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:5b80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:7e:ef:ae:f7:d8:5e:3e:52:ae:73:52:35:cb:9d:77:a1:63:
         c6:9a:b9:9c:10:7a:55:1c:21:c2:63:cd:26:db:48:25:a3:c2:
         5e:6a:86:2d:bd:0f:1d:b9:93:f5:45:e6:a6:ca:b4:25:08:8a:
         eb:ce:ff:65:8d:91:0b:78:e2:ef:b1:8c:96:f5:35:2d:e5:58:
         c4:9d:39:c8:53:95:22:b0:e9:3a:8b:9b:57:19:c2:41:53:ed:
         6a:b4:1f:86:03:e8:bf:85:f0:b7:ad:e3:38:da:f3:59:c1:5f:
         eb:41:30:15:8d:89:d1:7a:dc:5b:a0:a8:4a:45:2d:31:b8:a9:
         0c:f8:12:88:35:8f:f0:a8:f3:58:38:3d:21:15:8b:c1:75:e0:
         94:33:21:83:50:6f:0c:a9:34:d3:b8:a4:9a:2c:26:56:a5:a9:
         a9:17:c2:18:13:f0:92:17:90:41:02:b0:48:db:1f:db:11:ef:
         d3:31:31:e3:03:6a:53:33:15:6f:0c:9b:98:82:b7:54:49:00:
         50:61:8e:6c:e8:4f:7f:88:9d:2a:55:2e:b4:f4:07:8c:23:c3:
         cc:50:68:6f:35:99:ba:51:39:72:63:f7:99:af:b1:c2:74:13:
         ad:6a:ba:4b:f6:77:b1:8d:4b:91:5b:5e:80:61:7d:74:95:c4:
         e3:0f:9b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:22:31 2025 by rpki-client