Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d35157f8-ed8c-3eca-afb7-fb6be063eae2.roa
File:                     d35157f8-ed8c-3eca-afb7-fb6be063eae2.roa (raw, json)
Hash identifier:          ZEZ/k6bX9U1V1gZy/BYQGwaImrHmlbA1EFXLUYviqmw=
Subject key identifier:   72:B9:54:42:66:98:B4:0C:AE:25:60:C7:06:05:74:5D:44:96:BE:50
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B609CB4C6DA6D3464B15D83C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d35157f8-ed8c-3eca-afb7-fb6be063eae2.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        2001:579:b9c5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:b4:c6:da:6d:34:64:b1:5d:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=dcb60233-744e-488a-8c93-f3d125e38705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:47:ae:1d:97:65:32:ee:42:b7:32:86:85:
                    6e:c7:2a:68:94:aa:aa:b3:b6:73:45:bb:c0:d7:6b:
                    25:89:62:f0:f8:26:ca:62:f3:0d:e3:9d:97:49:0a:
                    3e:33:02:1a:be:bd:4b:b0:97:e5:a8:b0:f7:ea:d9:
                    64:e7:0a:d8:26:77:02:2e:55:3f:9e:da:ff:bc:9b:
                    70:ea:4a:bc:34:c4:29:b3:c4:be:ee:ec:28:22:50:
                    f4:98:5a:04:b1:eb:73:25:6d:86:7e:67:a9:d1:56:
                    89:11:c3:9b:52:03:eb:af:a4:5d:48:f7:12:7b:40:
                    99:08:99:d5:68:c9:bb:a3:81:2f:07:88:28:b6:95:
                    27:e2:95:9d:0a:ef:32:15:0e:28:e8:32:e7:26:09:
                    be:5b:70:73:65:2a:34:7f:b0:98:45:ef:3e:55:75:
                    7d:fd:4b:9e:4a:b2:78:e8:26:b9:12:9c:ff:8c:a5:
                    23:cc:0f:ee:57:69:fa:1e:34:58:cd:f5:61:44:c2:
                    f2:f3:f6:ce:b6:80:8e:af:18:5c:dc:fd:22:05:b9:
                    14:3f:2d:8b:4a:e4:79:1c:81:85:7e:aa:7d:d3:89:
                    6c:37:41:ce:6f:b7:16:fb:03:92:02:38:5d:71:ea:
                    5a:61:04:82:84:61:b3:6f:c8:a8:ce:04:86:bf:d6:
                    e3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B9:54:42:66:98:B4:0C:AE:25:60:C7:06:05:74:5D:44:96:BE:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d35157f8-ed8c-3eca-afb7-fb6be063eae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:b9c5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:01:ca:96:0f:b8:36:07:7f:14:90:7a:b9:d5:30:be:bd:7d:
         2a:d5:41:7a:91:7d:d6:93:cf:03:d1:45:12:ae:99:38:98:9f:
         9a:cd:68:a6:15:5e:3d:8c:81:bc:6e:8b:6e:0c:2b:39:07:6b:
         bc:09:06:9c:41:1f:f0:98:aa:f9:32:d7:38:ca:f8:1e:bd:9e:
         23:68:e4:d7:cf:26:2f:5b:34:8e:b2:ff:7e:e2:4a:16:a9:2e:
         e7:83:4d:14:31:4b:5b:5d:98:98:79:9f:b5:22:11:db:65:ba:
         48:00:bd:47:d4:3b:a8:02:1f:8b:2d:7a:e7:8c:43:01:68:9a:
         82:19:62:e8:1a:08:13:45:3d:1d:41:cf:83:3e:0f:ae:90:58:
         04:1d:61:18:e3:17:1b:63:ea:3f:1d:f1:22:2a:c7:84:da:4e:
         6a:85:cd:72:4f:ee:c4:c3:46:b8:3d:e0:f8:78:7d:4d:4c:5a:
         bd:5f:0f:4b:fa:70:16:ec:4d:26:b2:09:ae:17:27:c5:ed:04:
         f7:97:9c:29:49:07:15:f6:c1:e6:26:89:8a:a4:fb:6b:92:43:
         73:38:2f:a0:19:3f:cf:3b:5d:d7:98:52:86:5b:5d:bc:93:91:
         16:6b:2c:a3:df:1e:1e:9a:ec:b1:ae:a5:7c:bb:90:63:e3:49:
         00:f6:c3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 01:40:03 2025 by rpki-client