Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/abeaecd1-d02a-3f85-b3b2-b13c30dba0ea.roa
File:                     abeaecd1-d02a-3f85-b3b2-b13c30dba0ea.roa (raw, json)
Hash identifier:          6ykqKdBl5vrPrWAwmgwJMSgKERqW07wAyhhkC2pZhoA=
Subject key identifier:   E4:87:47:C7:C6:E3:23:D4:15:CE:42:74:A7:5E:F6:91:66:B8:44:AE
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01E1BA0FEE27D41CC4E000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/abeaecd1-d02a-3f85-b3b2-b13c30dba0ea.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:400::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:e1:ba:0f:ee:27:d4:1c:c4:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=5583ecb4-20c4-4e46-8b8b-beb527bc3d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3c:17:b3:09:ad:ec:a9:71:7e:5c:9b:cb:cf:
                    54:4d:a4:b8:ca:6e:71:64:cb:51:f0:ee:49:d1:fc:
                    a5:da:e6:3a:57:3b:75:b5:18:24:bb:c1:6d:41:17:
                    99:03:ea:9d:66:ae:52:ab:1f:f2:d1:24:7d:46:c5:
                    49:24:b7:3c:ae:e2:c8:2b:2b:f3:b9:4d:97:9d:8e:
                    2a:ac:72:c4:05:5c:fe:cb:3d:84:37:b6:4d:85:0e:
                    51:58:b4:99:47:e1:76:d0:76:3c:78:5d:6a:96:0e:
                    ce:ba:a3:96:e7:93:55:42:47:01:fb:a1:0a:9d:7e:
                    8b:89:10:a4:c7:8a:de:74:70:37:4a:f9:42:eb:04:
                    e4:3b:7f:7c:7e:e9:36:c0:aa:91:ba:5c:20:e2:22:
                    01:da:15:69:05:2a:b0:24:a7:0b:47:d2:73:82:24:
                    76:59:f1:0b:93:2d:78:85:9d:7f:ec:4d:7f:34:d0:
                    a9:86:dd:f9:d2:84:c9:26:13:71:29:b0:bd:71:60:
                    38:f8:b4:c2:c6:c6:59:3b:e6:e2:e1:00:0d:c2:94:
                    69:38:c3:ba:8d:ef:f6:9d:1e:ea:51:c0:6d:73:b0:
                    3c:90:85:a7:5d:46:39:dc:17:e0:90:85:e4:cb:5a:
                    95:4f:b7:29:e2:a9:d3:21:9d:3e:52:36:5a:7a:16:
                    ac:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:87:47:C7:C6:E3:23:D4:15:CE:42:74:A7:5E:F6:91:66:B8:44:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/abeaecd1-d02a-3f85-b3b2-b13c30dba0ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:400::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8d:cc:f5:ac:56:46:97:a2:3a:e3:e4:d4:d5:e2:ec:2d:c6:
         d7:6a:4c:14:59:2f:23:d5:78:87:f9:57:57:77:61:75:77:c7:
         de:f4:20:e2:c1:d5:33:84:ff:bf:73:4a:dc:66:09:9b:4f:7d:
         08:6d:cc:55:38:d1:09:a0:ae:c9:80:67:12:a5:97:b6:7f:93:
         63:90:40:5a:14:5f:92:98:ac:b2:4a:5f:3d:bc:ac:0c:ea:6d:
         07:f8:54:8d:1f:38:be:2f:88:06:91:f1:4d:f0:42:58:cc:b9:
         3c:a6:51:e3:e8:49:b1:bf:61:1a:f6:be:bc:59:fb:59:40:2c:
         87:93:91:94:f6:ab:a0:4d:3a:57:61:70:40:84:02:95:6b:9c:
         f1:61:dd:b7:3a:60:5f:15:09:12:0b:e8:e4:32:40:7a:4a:b9:
         9f:47:90:b3:4e:d9:c3:47:a1:9f:54:ab:08:d0:71:79:b3:38:
         a6:75:15:94:53:72:5b:7f:ea:74:32:ac:0f:40:30:a5:4a:30:
         ac:8c:ec:57:49:1c:19:3e:95:55:cf:0b:6a:eb:fc:d6:a5:95:
         9f:d8:e7:fa:35:55:4a:16:b6:a9:49:2b:af:70:52:7e:cf:32:
         c2:59:6e:56:18:73:0d:b7:34:16:73:3a:c2:86:a6:00:c2:b0:
         ba:17:33:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 01:54:14 2025 by rpki-client