Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9c5eea6-05b3-3bf9-919a-abc9ee297970.roa
File:                     c9c5eea6-05b3-3bf9-919a-abc9ee297970.roa (raw, json)
Hash identifier:          WKXSspzHW8Xk4VEtDbLvIDWa6/bn8o6+GprEy2k7GEw=
Subject key identifier:   CB:BD:89:51:5F:16:CF:08:0A:38:84:EE:CE:58:CE:67:E3:D1:69:EC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01FFB753504FD9F57AC780
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9c5eea6-05b3-3bf9-919a-abc9ee297970.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:6c1e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:ff:b7:53:50:4f:d9:f5:7a:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=8180dab0-aea3-4148-bf7e-d84b1f72f85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2b:a2:34:5b:a5:de:a6:3f:1b:5a:53:f7:7e:
                    88:d3:e8:63:ed:c2:b7:e7:37:06:7c:08:e6:34:d1:
                    ca:ee:45:51:9c:25:3e:02:c3:d1:35:ae:19:00:49:
                    cb:06:11:0b:85:41:a0:1c:c2:6c:36:a5:7c:fc:e4:
                    eb:a3:dd:c3:e9:52:47:f6:bf:dd:60:97:ca:24:66:
                    cd:94:8f:c6:b5:6e:74:ff:09:f9:17:28:0f:cf:d2:
                    ea:8e:bc:60:44:1d:03:2e:f6:82:28:25:c2:cf:4a:
                    5d:2e:22:dd:97:6b:3d:34:bf:d9:37:3b:1a:61:94:
                    17:0b:bc:6e:11:e5:97:28:5e:41:d0:83:f3:0a:bf:
                    50:c2:3b:2a:6e:56:56:91:13:a8:00:dd:c9:ca:82:
                    3c:0b:69:fa:34:de:b1:9f:e5:ae:25:8d:ce:16:de:
                    33:db:64:72:fa:dd:45:5e:7a:ea:4a:2c:6b:76:f7:
                    08:4c:78:4d:9d:9a:78:d6:7b:b6:e6:29:cf:05:a1:
                    91:7e:8f:bb:52:b8:2a:0b:01:f4:2b:98:d5:f1:18:
                    22:ab:fe:26:ea:a0:da:06:d2:bd:d8:2a:0a:64:65:
                    38:e4:e0:bc:92:4a:8a:84:4b:e4:d2:df:ae:ac:c8:
                    9f:d0:d9:b7:44:c8:51:b9:c2:de:d6:2e:60:56:25:
                    cf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BD:89:51:5F:16:CF:08:0A:38:84:EE:CE:58:CE:67:E3:D1:69:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9c5eea6-05b3-3bf9-919a-abc9ee297970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:6c1e::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:52:5c:f4:6a:f8:44:8b:1b:1e:14:3f:15:71:e5:8d:e5:e9:
         e4:31:9b:38:f2:65:90:3b:c1:71:fb:fb:d3:b4:2f:6b:8a:36:
         57:e2:ed:37:b7:47:4b:d2:a1:75:a3:7d:a1:af:a0:f3:9f:0d:
         0b:84:82:7f:20:19:f1:b0:e9:d3:48:a0:24:0d:db:9f:69:8c:
         41:6c:36:f3:15:fe:d6:59:2f:40:ae:03:39:a9:57:30:06:d2:
         50:c3:11:79:8c:93:d7:24:f3:06:b5:69:aa:c8:f1:52:77:7f:
         b3:c0:69:62:2d:86:09:1d:9b:ea:bd:a5:65:60:80:f3:56:7d:
         c0:9c:a1:cf:96:ea:bf:6e:bd:d2:1b:97:f9:fe:68:83:75:c4:
         09:79:be:3e:d9:ec:eb:b4:da:c6:7e:92:e7:4d:96:76:c4:71:
         f3:ff:14:dd:3b:6a:27:03:36:dd:5c:c6:df:16:9d:6d:1c:b6:
         76:3a:48:40:0a:6c:12:1c:9f:fc:88:5f:45:55:b5:09:e2:f7:
         d2:ad:5f:8a:9f:ad:17:4a:73:69:f9:81:99:99:d7:3b:23:74:
         9c:04:12:fb:af:35:6c:2d:c7:a1:6e:78:95:d6:46:a5:35:ca:
         0c:94:70:fb:4f:38:ee:c6:f6:95:81:cf:b3:52:0e:66:c4:18:
         ac:1a:28:33
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAf+3U1BP2fV6x4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
ODE4MGRhYjAtYWVhMy00MTQ4LWJmN2UtZDg0YjFmNzJmODVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCuiNFul3qY/G1pT936I0+hj7cK35zcGfAjm
NNHK7kVRnCU+AsPRNa4ZAEnLBhELhUGgHMJsNqV8/OTro93D6VJH9r/dYJfKJGbN
lI/GtW50/wn5FygPz9LqjrxgRB0DLvaCKCXCz0pdLiLdl2s9NL/ZNzsaYZQXC7xu
EeWXKF5B0IPzCr9QwjsqblZWkROoAN3JyoI8C2n6NN6xn+WuJY3OFt4z22Ry+t1F
XnrqSixrdvcITHhNnZp41nu25inPBaGRfo+7UrgqCwH0K5jV8Rgiq/4m6qDaBtK9
2CoKZGU45OC8kkqKhEvk0t+urMif0Nm3RMhRucLe1i5gViXPEQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMu9iVFfFs8ICjiE7s5Yzmfj0WnsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzljNWVlYTYtMDViMy0z
YmY5LTkxOWEtYWJjOWVlMjk3OTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAGwe
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE5SXPRq+ESLGx4UPxVx5Y3l6eQxmzjyZZA7wXH7+9O0L2uKNlfi
7Te3R0vSoXWjfaGvoPOfDQuEgn8gGfGw6dNIoCQN259pjEFsNvMV/tZZL0CuAzmp
VzAG0lDDEXmMk9ck8wa1aarI8VJ3f7PAaWIthgkdm+q9pWVggPNWfcCcoc+W6r9u
vdIbl/n+aIN1xAl5vj7Z7Ou02sZ+kudNlnbEcfP/FN07aicDNt1cxt8WnW0ctnY6
SEAKbBIcn/yIX0VVtQni99KtX4qfrRdKc2n5gZmZ1zsjdJwEEvuvNWwtx6FueJXW
RqU1ygyUcPtPOO7G9pWBz7NSDmbEGKwaKDM=
-----END CERTIFICATE-----
Generated at Wed Oct 15 21:21:54 2025 by rpki-client