Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbed4ee9-4af0-313a-813e-1159b62e4955.roa
File:                     cbed4ee9-4af0-313a-813e-1159b62e4955.roa (raw, json)
Hash identifier:          aEHmxE+imLCci2fgb3igPCOQJ7bgYrcqgnDpivIjIMw=
Subject key identifier:   D3:1D:B3:B3:54:93:5C:11:36:D8:86:EA:79:19:A0:38:0A:77:57:6D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F0224F90501C8B06F5E8CB0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbed4ee9-4af0-313a-813e-1159b62e4955.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:880a:1004::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:24:f9:05:01:c8:b0:6f:5e:8c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=72142b78-43a1-4709-a3b9-eb5664c86f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:d6:9f:17:63:34:27:05:2c:e5:c6:1d:d1:
                    5a:49:7c:62:1c:f2:0b:eb:86:e0:7c:bd:1c:40:c4:
                    fb:47:e2:7d:80:11:ac:6e:cb:07:a8:ca:24:10:e6:
                    f3:13:a5:7d:de:c3:dd:43:e2:98:d6:57:3b:9f:0c:
                    37:70:cb:ef:a5:ab:be:ad:4c:88:58:ba:b3:65:55:
                    e5:3c:9a:e8:b9:9e:02:36:f1:e1:20:85:1a:f4:ab:
                    5d:01:8c:9b:24:96:68:7b:d3:85:0d:87:91:eb:4a:
                    d0:fb:7f:c5:01:7b:92:0f:a7:25:77:a5:ee:fb:f1:
                    d1:53:45:f8:8e:b1:28:90:4c:f9:1d:ce:00:a5:68:
                    e9:bd:b9:ea:7c:01:f2:3f:97:5d:34:0a:d7:19:27:
                    15:03:32:05:ab:b6:e1:74:22:2c:50:91:74:45:4b:
                    87:2c:11:1f:23:64:b6:68:77:70:a3:d6:bf:c5:f0:
                    67:fb:3a:db:a7:5f:fc:44:cd:37:a2:9a:44:06:64:
                    5f:ec:58:16:df:88:b8:6f:a3:80:02:40:75:e6:5a:
                    bd:73:e5:69:59:6d:83:f4:72:7a:e2:ee:e5:c6:43:
                    89:5e:3d:0d:5e:f0:69:bc:62:d2:fe:74:59:e3:cd:
                    c0:2f:4f:c8:2e:79:fe:40:9f:d9:ca:71:51:2c:60:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1D:B3:B3:54:93:5C:11:36:D8:86:EA:79:19:A0:38:0A:77:57:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cbed4ee9-4af0-313a-813e-1159b62e4955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:1004::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9a:4c:06:50:6c:7b:60:cf:00:a9:77:60:18:5f:65:1a:29:
         00:10:49:7e:e6:03:8f:17:71:4e:4d:52:3a:3d:0d:ba:2c:da:
         b2:ab:11:dd:dd:f5:c5:01:66:bf:b1:f4:d7:20:98:cf:08:2f:
         32:71:19:eb:7e:75:51:1a:78:4c:cb:75:ed:e2:b5:ee:d8:e0:
         eb:54:87:81:93:90:6a:52:5a:1e:c6:e8:09:aa:47:42:7c:8e:
         48:bb:8d:c5:a9:6f:1e:bc:c8:54:97:e7:7a:e9:a2:00:87:ee:
         ec:84:d0:25:dd:b7:d9:4d:61:be:9c:13:22:0e:a9:9d:91:34:
         0f:2c:47:d6:29:ab:0e:c1:32:be:86:4b:46:77:8b:6c:48:f4:
         49:a8:dc:ce:ea:81:af:96:71:de:c4:01:1b:96:39:e9:f1:4a:
         06:21:a8:93:b8:fb:31:70:4b:a9:49:6c:55:b9:9e:b0:f1:84:
         1f:4c:a9:df:e1:81:3f:99:70:02:ac:ca:b1:11:73:e1:ff:9b:
         9e:aa:b1:86:c4:dd:1a:cb:6e:83:2f:17:6b:5e:62:7b:b0:6f:
         16:8e:b6:d2:a0:ff:60:53:05:2a:d6:6f:c7:35:bf:f0:d3:bf:
         87:7e:e3:a8:be:48:95:f7:3f:ae:68:61:a1:14:86:dc:8f:67:
         45:27:20:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:44:33 2025 by rpki-client