Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbc70dba-0ebc-3695-93fd-08062de5e4ec.roa
File:                     cbc70dba-0ebc-3695-93fd-08062de5e4ec.roa (raw, json)
Hash identifier:          dl3VHxtM5bR72PUYy0J3kFFvBt+pKp8uVT0ZhDl7NpM=
Subject key identifier:   9C:6F:19:79:47:A8:9F:C6:C3:B9:60:02:DA:05:45:47:81:27:FE:F4
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01F5252625BB8636006F00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbc70dba-0ebc-3695-93fd-08062de5e4ec.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:4c1a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:f5:25:26:25:bb:86:36:00:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=be0f63fb-d980-4522-86f8-e15c7ad7fa66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:37:8a:e6:f5:c5:1c:f9:46:2c:1c:db:80:99:
                    c5:f3:23:29:7f:90:4b:91:ee:79:5d:79:6e:17:a2:
                    54:dd:1b:cc:2c:cf:1e:41:74:00:b4:d6:bd:30:e5:
                    47:40:ef:61:0e:56:fb:f0:16:35:1c:9c:fc:17:7a:
                    e9:e2:8b:85:9e:84:be:d3:63:71:47:1e:8a:b0:06:
                    55:a9:5e:f6:10:c3:4b:b1:e3:c4:d6:c1:aa:4d:11:
                    4c:16:ca:87:ef:65:89:8d:97:79:1f:6e:3f:2f:8b:
                    3a:5e:97:3b:05:2f:1d:cd:90:9a:f2:eb:0f:ed:6b:
                    4e:19:c3:3a:fc:ad:49:35:24:74:d0:7c:62:d8:42:
                    19:28:f3:3f:40:5a:20:d0:d5:13:8b:9f:72:df:0b:
                    d7:84:65:45:54:f3:4a:b5:b4:f3:d1:5a:8d:5d:ac:
                    4b:83:b9:cf:f2:6f:82:18:02:2f:6a:fe:ab:d2:9e:
                    24:e5:dc:64:0c:0f:e5:3d:89:6c:e8:bb:c8:e2:82:
                    00:21:a2:5d:3f:1e:92:e7:f3:1d:bb:4d:5b:83:b5:
                    99:7e:41:79:aa:e8:eb:95:3f:b3:15:e8:0a:c9:ec:
                    af:11:75:d2:bb:4a:a1:24:3a:b9:53:06:52:8c:5e:
                    bf:1d:84:a0:f0:4e:a0:ba:c2:22:31:ed:a2:d3:15:
                    f6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6F:19:79:47:A8:9F:C6:C3:B9:60:02:DA:05:45:47:81:27:FE:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbc70dba-0ebc-3695-93fd-08062de5e4ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:4c1a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ab:ff:71:92:74:b3:ec:88:13:48:1a:f9:da:48:d3:7a:b0:
         21:7e:b2:d7:2c:4c:07:1e:ae:cd:ee:38:23:ef:68:72:d6:7e:
         44:47:b4:ef:0c:08:64:f2:50:72:59:8d:bc:00:09:a0:5f:57:
         02:ea:99:f0:a8:8d:d9:39:07:d4:7d:8a:c8:a6:dd:92:4b:53:
         00:a9:a5:a8:b7:2d:d7:91:c0:ad:d7:70:e3:c2:ff:f9:29:8c:
         c4:f4:b4:00:63:84:57:9b:34:be:9e:53:45:19:67:6d:17:c7:
         77:56:29:b3:af:61:78:2d:09:4b:57:64:4c:1e:35:b7:7d:df:
         ed:b0:81:57:3d:09:40:f3:bc:82:78:13:af:50:2d:01:a8:8c:
         11:d7:f4:ca:37:21:be:d8:21:6d:a0:4c:d7:9c:de:b5:51:51:
         59:5a:20:eb:f7:20:9c:87:dd:40:53:91:ca:40:33:23:ec:b3:
         17:45:69:90:af:94:cb:85:f4:94:69:fc:f9:2e:c5:04:7a:49:
         09:8d:58:5d:0c:5b:70:f2:f6:69:63:d5:5c:15:91:17:46:3f:
         62:15:96:9e:d4:4c:e5:2c:99:ef:6b:68:67:2b:8c:8c:a6:d1:
         50:9b:7c:a7:a1:d9:be:cc:df:10:df:62:2f:b9:0e:1d:3a:58:
         c8:67:11:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:44:02 2025 by rpki-client