Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af7a164d-09db-3962-b780-72b0547a05ec.roa
File:                     af7a164d-09db-3962-b780-72b0547a05ec.roa (raw, json)
Hash identifier:          sEF+n2RNyaKz6zylqMMQ7VKIKTm/lXg0iIw9vJWiSlg=
Subject key identifier:   58:09:40:62:E6:F2:16:F6:0B:D4:35:8B:8E:27:49:BC:D8:A0:47:0E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F022278D6D7242C07436280
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af7a164d-09db-3962-b780-72b0547a05ec.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:880a:830::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:22:78:d6:d7:24:2c:07:43:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=82c4e2c8-d4b8-46fb-a408-cf1ac0ac3884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:0b:2a:dd:b2:b3:f2:4a:cf:92:f8:b0:de:
                    2f:36:bf:fc:69:bb:13:a8:15:0d:57:c0:12:80:50:
                    ab:d8:13:1d:e9:4a:df:a6:48:a8:cb:8b:fe:45:50:
                    33:d0:af:3d:73:d9:38:3f:e3:94:1b:15:10:39:cc:
                    ab:f6:39:4d:16:00:f8:40:10:b7:05:49:c5:08:69:
                    20:b8:e8:39:4b:41:fe:e6:5c:de:f0:01:c8:68:6c:
                    d4:65:3b:65:d2:f3:15:d7:c5:a6:de:cc:38:b6:c6:
                    57:3d:b0:c1:19:6e:a2:a6:de:b7:4a:a2:8f:79:31:
                    6c:f6:1a:9d:01:ed:45:63:76:92:cb:ff:0a:9b:8f:
                    41:ea:95:62:01:95:d7:0e:8b:f6:16:56:4c:96:b2:
                    7b:c6:0b:ee:ad:3a:16:22:61:a5:11:82:22:8e:0a:
                    03:14:ea:be:71:56:cc:95:33:df:43:b8:d5:4a:c7:
                    1c:81:16:14:39:f7:a9:d0:02:0e:bd:1c:69:6e:cf:
                    53:ac:cf:9e:fb:78:b8:7a:0e:6b:82:8b:81:de:9e:
                    66:2e:86:16:87:c6:b2:f1:cb:17:97:36:06:8e:4a:
                    ac:8a:c8:e9:e9:47:d2:ba:89:f5:d6:3b:51:c2:c7:
                    c2:0e:74:cd:61:3e:db:d9:58:58:b8:37:56:17:97:
                    0a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:09:40:62:E6:F2:16:F6:0B:D4:35:8B:8E:27:49:BC:D8:A0:47:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af7a164d-09db-3962-b780-72b0547a05ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:830::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:85:ff:1b:c7:85:19:da:c3:00:d6:09:c1:73:94:6c:15:41:
         e0:c9:df:dc:38:3d:ac:3b:4b:87:1d:54:4a:33:20:dc:2d:96:
         64:31:cd:74:cb:95:67:95:e1:71:d9:89:1a:ce:b7:7a:90:82:
         f4:33:0f:b3:6e:1c:b0:e2:ff:4c:36:04:3e:87:d4:63:90:c1:
         31:aa:fb:ab:a4:f6:3e:1a:6f:37:bd:6b:ba:3f:81:13:d1:94:
         33:07:60:6a:bc:7a:3a:ef:68:7a:74:ea:fd:ae:ed:ba:3d:7f:
         8a:31:c2:42:d0:c7:4a:e7:3d:45:7f:b8:c8:eb:2b:4e:d0:66:
         7e:c8:55:28:08:0e:75:23:d8:41:43:85:a1:68:a7:10:71:73:
         4f:5a:ec:94:11:4a:01:17:58:64:c2:db:7e:b9:40:0e:de:25:
         76:b0:58:1a:4e:a4:fe:3b:5f:d8:a3:3a:b5:45:18:ff:9f:b3:
         84:d6:36:4f:75:58:41:22:da:01:ea:65:31:c9:21:91:7d:9e:
         5b:9d:f0:2d:1f:b3:96:1f:fd:8b:2a:81:6f:46:25:81:f5:1e:
         d6:1c:2a:59:e0:b7:73:8a:26:bb:29:ea:65:4d:44:cb:cd:da:
         a8:fc:01:aa:7c:af:80:ae:b9:be:3e:86:03:4b:a3:e5:1f:4b:
         43:88:b3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:20:20 2025 by rpki-client