Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be099a9b-bbf6-3664-b387-c178be9ee1f7.roa
File:                     be099a9b-bbf6-3664-b387-c178be9ee1f7.roa (raw, json)
Hash identifier:          Mnr8TT+9aUOuFAMD9On5LJEodJ62mIHYRhqFpvvC0Qk=
Subject key identifier:   7E:47:03:74:06:C2:A9:CA:CC:CC:A6:56:E6:1A:42:9D:DF:F3:06:24
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B609CB4B69BDE880295479E40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be099a9b-bbf6-3664-b387-c178be9ee1f7.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        2001:579:b885::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:b4:b6:9b:de:88:02:95:47:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=069666c1-83e8-4b5d-b4bc-25872e8422d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:80:78:44:2b:df:11:48:cc:5d:d8:40:56:04:
                    9e:a9:5e:1d:e7:45:da:9a:88:36:6a:e6:df:e8:59:
                    be:9a:15:13:d4:a6:27:f8:15:c5:f7:f9:17:15:f3:
                    63:ec:e7:84:34:7b:be:50:2f:61:aa:00:42:69:6e:
                    40:ea:6c:e7:ae:12:2a:a9:3d:06:95:05:7d:02:57:
                    5f:11:cc:9e:d9:98:c4:d8:a0:f8:4a:23:df:c8:fd:
                    a4:ec:72:4e:c6:b0:99:1a:da:39:b5:24:54:ea:92:
                    81:17:eb:02:e0:58:3a:47:62:ac:d9:e6:45:51:d8:
                    ca:28:f2:d3:e3:18:bf:30:4c:61:05:ee:5d:41:63:
                    ab:6e:10:e9:33:86:d4:3d:a9:6c:f1:71:c9:f8:e3:
                    46:07:95:78:fe:3e:3e:61:50:7d:14:32:cb:fa:33:
                    fa:7e:ab:82:0b:60:36:e5:81:4e:76:31:96:74:8e:
                    64:39:ea:7a:b3:47:d1:74:ff:c1:73:5b:22:9e:58:
                    74:f7:dd:f8:bf:54:f7:b0:17:ac:26:99:cd:d8:bf:
                    99:44:dd:6d:77:7b:e2:5d:d4:41:97:6f:f4:47:0f:
                    bd:34:fc:12:87:8e:56:e9:25:68:be:27:51:0a:41:
                    d6:67:82:81:4e:fc:40:f9:10:25:45:e0:f2:9e:4b:
                    42:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:47:03:74:06:C2:A9:CA:CC:CC:A6:56:E6:1A:42:9D:DF:F3:06:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be099a9b-bbf6-3664-b387-c178be9ee1f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:b885::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:12:47:69:47:b8:ca:3d:21:1b:b0:77:80:51:4e:bb:4f:65:
         1f:1a:1e:bc:f7:ae:43:a9:2f:4a:d7:85:00:c9:2a:53:60:83:
         af:4f:dd:12:03:b3:28:65:8b:1c:25:96:e1:08:5e:45:12:48:
         4a:2e:a7:ea:da:a5:18:4c:73:10:43:bc:06:12:85:3c:76:70:
         7d:a9:df:1f:74:1c:72:e4:2e:01:7e:b1:d7:43:18:53:58:68:
         ee:1a:54:de:2a:c9:4e:fb:7d:f6:66:79:df:0d:7f:6d:33:97:
         29:6e:e8:b3:d8:aa:40:a7:79:ef:55:26:a6:df:98:5a:fb:71:
         21:84:50:96:09:3a:da:76:af:d1:f6:21:38:82:9a:33:cd:3c:
         3c:13:6c:04:bd:de:a6:ea:77:58:e0:d5:7b:13:8c:76:ee:ef:
         08:c4:82:3b:c9:7e:af:87:a7:96:22:15:af:d1:a7:74:37:c2:
         fd:b4:32:56:31:ee:5a:46:2c:3a:5a:80:59:c2:ab:35:43:40:
         d9:4c:e9:bb:e3:4b:55:fb:49:76:13:e7:f8:4d:e4:8b:13:6a:
         95:c7:09:94:ef:51:69:b3:17:4c:34:d8:c6:82:67:fd:01:f5:
         e8:3b:a8:64:3b:5f:52:f7:db:5c:b1:5b:77:26:10:f1:51:3b:
         e0:8f:3e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:35:58 2025 by rpki-client