Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ceef06ec-7750-3853-9f59-55e7f9fc2304.roa
File:                     ceef06ec-7750-3853-9f59-55e7f9fc2304.roa (raw, json)
Hash identifier:          jk1z8NxBKDsF0RJbjltvmqst6bHWQoIUEJCBdwZl7Go=
Subject key identifier:   48:66:0E:53:3C:73:A6:D7:0B:20:55:3C:2F:5B:01:20:7F:8A:20:5A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E7AB94DAD4868AEA6771840
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ceef06ec-7750-3853-9f59-55e7f9fc2304.roa
Signing time:             Thu 19 Jun 2025 14:48:09 +0000
ROA not before:           Thu 19 Jun 2025 14:48:09 +0000
ROA not after:            Wed 17 Sep 2025 14:48:09 +0000
asID:                     22773
IP address blocks:        2600:8800:8e0e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:7a:b9:4d:ad:48:68:ae:a6:77:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:48:09 2025 GMT
            Not After : Sep 17 14:48:09 2025 GMT
        Subject: CN=5287be9a-d402-4771-9f40-92381af040ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:39:37:27:64:5f:ec:6c:9d:35:f1:f9:72:
                    41:03:f6:28:86:7a:76:70:15:8f:77:1e:31:6f:94:
                    2c:a6:89:6b:49:68:0f:0c:c0:46:ca:89:de:9b:20:
                    19:ad:37:0a:f7:9f:d5:79:9b:27:6d:5e:48:61:4b:
                    9d:39:43:fa:61:95:6b:50:4d:a9:a2:a1:5d:46:b2:
                    b1:36:d6:c2:b1:47:c4:49:f1:b5:4f:ce:f1:b9:62:
                    44:64:ce:7b:c9:1e:c1:58:80:45:9f:30:a5:87:83:
                    09:0e:18:55:d1:18:6c:81:8d:32:a7:b0:18:c7:e6:
                    7a:86:5f:9b:11:c8:14:7a:24:f3:da:92:21:25:f8:
                    5d:37:f1:4e:0d:fb:2a:f6:2c:c5:92:df:4f:e6:0a:
                    0d:12:59:f3:f9:22:4a:af:55:ed:93:67:72:d6:04:
                    9c:b2:17:48:cb:f0:e0:87:7d:00:f8:fd:a3:cf:07:
                    39:9b:1e:81:83:38:f5:0f:dd:60:2e:02:60:4f:ac:
                    f6:f5:b8:5f:7f:2a:20:fa:93:d3:44:14:ba:d2:7a:
                    a4:8b:44:f0:ac:c2:1a:30:55:5e:0b:df:e7:56:66:
                    36:31:ba:7b:63:0f:58:13:ec:a1:95:30:2c:e1:f5:
                    53:d7:3c:24:6e:08:4d:fd:7e:92:1f:56:5e:5d:bd:
                    a5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:66:0E:53:3C:73:A6:D7:0B:20:55:3C:2F:5B:01:20:7F:8A:20:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ceef06ec-7750-3853-9f59-55e7f9fc2304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:8e0e::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d2:03:e3:f4:1b:f1:82:9b:65:c0:fa:72:6e:7a:79:23:f9:
         8b:78:29:05:c5:4a:dc:51:ad:0b:29:3b:1a:10:b7:f3:3c:8e:
         89:5a:d6:f3:5f:a7:c7:79:40:52:01:ca:8f:71:b0:77:b9:53:
         6c:ac:d3:a0:e4:2e:cb:9f:af:79:d2:cc:9b:a3:86:ac:ab:a3:
         a5:3e:c2:87:fb:e1:1d:8f:ac:e1:c6:7a:d0:0d:41:fa:86:4a:
         e3:29:0b:5f:86:f8:16:0a:76:b5:18:96:41:90:1d:8c:3f:74:
         d0:63:6f:aa:b1:40:e2:1e:af:46:96:e6:b2:ad:60:8d:ca:bc:
         9b:45:89:c8:c6:9b:99:77:ad:8b:91:79:79:76:91:c6:05:18:
         8f:4d:12:8b:dd:82:6f:2f:7e:31:f8:74:ee:32:dd:70:b4:c3:
         ec:f7:e4:b2:c9:d1:46:2a:0c:1f:c6:c0:58:ae:6e:0b:93:76:
         5c:0a:17:ca:26:04:d4:eb:a1:1e:13:23:ff:54:f9:7f:93:e3:
         f3:da:2f:b6:fa:85:8b:be:9e:67:10:03:b7:a9:a9:3c:71:b3:
         0e:e5:40:6b:b2:d8:45:ca:fe:b8:4d:33:17:1e:f2:bb:a2:7f:
         0a:8e:e5:6a:0f:4b:34:4d:ab:cf:39:ad:08:33:f3:69:08:8a:
         63:1b:de:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:41:24 2025 by rpki-client