Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7e0b670-14c0-3340-bd6b-68f1f6cd0b5e.roa
File:                     a7e0b670-14c0-3340-bd6b-68f1f6cd0b5e.roa (raw, json)
Hash identifier:          LghE/z5269ZLP1tJltffLg6JClLpQ9mbv4THpe/55w0=
Subject key identifier:   9B:D3:63:1A:1A:B0:3D:9F:42:84:14:11:8E:8B:57:08:CB:56:E3:B8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01F58F6600542A4FB70D40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7e0b670-14c0-3340-bd6b-68f1f6cd0b5e.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:4c80::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:f5:8f:66:00:54:2a:4f:b7:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=f89892c7-897d-4c69-8829-31082479f9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:66:fb:6e:0a:92:1f:f2:3b:b5:92:72:66:36:
                    c2:bf:34:9f:cb:1f:44:e6:cf:b6:3b:8f:1b:b6:5c:
                    a7:62:f8:16:e2:2a:47:03:5d:1a:59:1b:18:d3:db:
                    b3:d6:55:5a:e6:1f:59:90:d9:bf:2e:dd:22:80:56:
                    d5:b7:37:66:5b:64:8e:61:f2:c3:d8:b5:14:1e:23:
                    58:b6:01:7d:8b:05:96:9d:9a:26:b6:36:7d:92:0e:
                    d4:d6:95:ae:de:10:95:3a:36:9b:d6:88:4f:f2:f5:
                    d0:de:8d:74:d1:57:3a:ff:e6:83:ce:7f:04:06:aa:
                    59:a1:27:af:6b:ff:eb:01:69:34:0a:27:da:2c:17:
                    91:47:d6:cf:49:35:39:d6:9d:ba:1a:d5:9b:e1:48:
                    ee:eb:52:99:ac:dc:6d:bb:55:31:32:58:87:76:82:
                    30:92:97:45:c3:5f:14:cf:11:f8:4a:c6:fd:57:f1:
                    5f:af:c5:f1:cb:dd:8d:48:2c:40:34:de:07:c4:7b:
                    db:b3:49:d9:55:fe:07:de:61:b2:68:5a:5a:0f:88:
                    db:7c:48:8c:70:71:87:57:a9:de:41:1d:f3:fa:9b:
                    03:b5:2b:a6:4e:34:f9:fb:30:d9:98:98:b8:89:6a:
                    b9:98:03:79:9c:8f:76:c9:7f:06:17:7a:e2:c6:2f:
                    76:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D3:63:1A:1A:B0:3D:9F:42:84:14:11:8E:8B:57:08:CB:56:E3:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7e0b670-14c0-3340-bd6b-68f1f6cd0b5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:4c80::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ca:04:e0:45:95:ab:ed:85:98:1b:e7:9f:fb:8c:65:80:72:
         ce:d2:50:88:ed:ef:cd:b1:ed:fd:1a:60:20:6d:2f:2b:db:ad:
         3f:3e:60:49:67:e5:9a:73:d3:69:38:ae:00:11:24:35:10:86:
         ad:d0:72:c6:df:d0:45:8b:a3:67:60:9b:b2:86:8a:c7:bc:8b:
         53:25:da:45:c0:65:51:7b:0f:ce:e8:b3:e9:91:73:45:70:26:
         ff:c3:cf:d9:e1:1f:6e:03:75:09:28:5e:87:d9:96:07:81:21:
         c7:57:08:75:06:92:4e:73:e6:9c:6e:ed:fd:cf:d1:71:03:e4:
         e8:96:88:17:aa:16:f9:fe:62:40:0c:a5:e7:56:3f:b0:6f:62:
         b9:8a:9d:d3:9c:33:93:bd:c6:83:2c:ae:2c:e3:11:9a:2c:e6:
         fb:3b:58:0f:97:e7:68:27:a4:be:7c:15:78:37:33:06:ac:cc:
         ca:f9:43:3a:05:80:0f:2b:fe:55:47:e5:93:da:73:7c:29:83:
         0c:f2:99:e5:cc:62:4d:48:14:f1:c2:27:72:31:ee:25:62:a9:
         fb:e6:2b:38:e4:c0:7c:e7:14:90:88:41:4b:87:47:a7:92:31:
         72:95:aa:81:67:5e:3f:34:36:a0:10:24:14:2b:5a:c9:c5:97:
         03:2f:9c:a7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAfWPZgBUKk+3DUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
Zjg5ODkyYzctODk3ZC00YzY5LTg4MjktMzEwODI0NzlmOWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmb7bgqSH/I7tZJyZjbCvzSfyx9E5s+2O48b
tlynYvgW4ipHA10aWRsY09uz1lVa5h9ZkNm/Lt0igFbVtzdmW2SOYfLD2LUUHiNY
tgF9iwWWnZomtjZ9kg7U1pWu3hCVOjab1ohP8vXQ3o100Vc6/+aDzn8EBqpZoSev
a//rAWk0CifaLBeRR9bPSTU51p26GtWb4Uju61KZrNxtu1UxMliHdoIwkpdFw18U
zxH4Ssb9V/Ffr8Xxy92NSCxANN4HxHvbs0nZVf4H3mGyaFpaD4jbfEiMcHGHV6ne
QR3z+psDtSumTjT5+zDZmJi4iWq5mAN5nI92yX8GF3rixi92/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJvTYxoasD2fQoQUEY6LVwjLVuO4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTdlMGI2NzAtMTRjMC0z
MzQwLWJkNmItNjhmMWY2Y2QwYjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIAEyA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHzKBOBFlavthZgb55/7jGWAcs7SUIjt782x7f0aYCBtLyvbrT8+
YEln5Zpz02k4rgARJDUQhq3Qcsbf0EWLo2dgm7KGise8i1Ml2kXAZVF7D87os+mR
c0VwJv/Dz9nhH24DdQkoXofZlgeBIcdXCHUGkk5z5pxu7f3P0XED5OiWiBeqFvn+
YkAMpedWP7BvYrmKndOcM5O9xoMsrizjEZos5vs7WA+X52gnpL58FXg3MwaszMr5
QzoFgA8r/lVH5ZPac3wpgwzymeXMYk1IFPHCJ3Ix7iViqfvmKzjkwHznFJCIQUuH
R6eSMXKVqoFnXj80NqAQJBQrWsnFlwMvnKc=
-----END CERTIFICATE-----
Generated at Wed Oct 15 21:22:27 2025 by rpki-client