Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e4ba9ac0-6262-3e80-bd7e-8abd872a0429.roa
File:                     e4ba9ac0-6262-3e80-bd7e-8abd872a0429.roa (raw, json)
Hash identifier:          um1d2OwKlgD4brBcBWnT6JGtejx25HXuA0czNNDR2b8=
Subject key identifier:   9D:ED:2D:3B:90:EB:FD:BB:95:69:59:8C:7C:CF:F9:4E:20:C9:87:C9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01F1C3F0C0041440CAA660
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e4ba9ac0-6262-3e80-bd7e-8abd872a0429.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:3eae::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:f1:c3:f0:c0:04:14:40:ca:a6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=85bcd27a-720d-4eb7-adb1-2745c3194538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:18:a6:df:54:b5:c5:32:64:a3:ca:c8:4f:
                    78:46:ec:f7:b9:42:89:e1:bb:1a:aa:9b:32:9c:03:
                    cd:a3:cc:2e:4f:03:87:8f:b1:0e:64:8a:3d:fc:33:
                    db:bb:0c:fc:6d:46:38:ab:7a:8c:ae:52:99:7d:8c:
                    aa:16:92:75:08:88:57:45:bf:30:88:9e:9e:b5:27:
                    9d:02:47:3f:1b:21:c1:4b:a3:a2:01:7e:c2:b4:a7:
                    87:3c:f9:ef:ba:87:11:dd:1f:e9:a9:24:30:e4:a8:
                    ac:f0:f3:c0:cf:e8:27:c1:d3:ef:37:fd:47:dd:07:
                    ef:cd:1f:2c:46:19:84:4b:76:ef:ba:29:49:33:b8:
                    16:29:39:3b:8a:bb:a8:fd:19:0f:f8:b4:7e:c7:48:
                    63:bd:44:a9:b1:ee:af:2b:8b:1c:81:ea:a3:d9:b8:
                    1a:92:dd:25:e1:2e:cf:71:d1:6e:b5:51:16:c2:ea:
                    ca:90:7f:f9:fa:33:c2:cd:2e:97:4f:37:aa:1e:1a:
                    80:f2:62:0c:f4:79:22:a7:a5:32:ef:e0:6b:48:fe:
                    67:1c:01:7b:b2:b0:fb:94:2c:21:8a:b8:2a:2c:86:
                    48:63:a1:34:65:72:21:d9:75:da:a5:a4:58:d6:77:
                    60:7f:d1:27:55:81:d5:8c:1f:ad:a3:8f:5b:10:ca:
                    41:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:ED:2D:3B:90:EB:FD:BB:95:69:59:8C:7C:CF:F9:4E:20:C9:87:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e4ba9ac0-6262-3e80-bd7e-8abd872a0429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:3eae::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:b5:8a:e0:8a:5c:33:a3:f0:3f:58:9b:7c:72:f9:a0:46:34:
         6b:bd:53:b5:46:06:85:c8:3b:7b:80:26:c8:ef:ef:18:d5:51:
         93:b0:67:1f:9e:1c:ae:36:b4:a3:12:d4:8d:c9:f5:1e:f5:6f:
         6c:c2:a4:1e:37:21:44:71:ab:92:1e:03:42:64:7e:25:36:d9:
         48:ad:55:9b:79:85:5a:2b:9c:2d:88:58:e3:62:08:b2:59:07:
         f4:fe:8a:3f:27:9b:c8:a2:72:dc:16:dc:ca:b8:f0:a3:f3:6b:
         ee:fb:83:54:ee:c1:39:9c:ac:fb:b7:1d:a2:d2:c8:75:3f:ca:
         36:bb:f9:9f:b2:e8:28:ff:17:d5:2f:6a:7a:e9:4d:55:ef:7d:
         32:44:82:5b:f0:ec:fa:ce:33:c5:c6:ca:49:19:4c:ef:7d:6b:
         85:e9:6b:da:02:d9:df:cb:61:98:93:9b:f2:a2:80:fa:91:6e:
         5e:5a:7d:06:6a:31:87:3c:d2:cd:50:55:48:c4:ed:cf:8b:cb:
         49:b0:6f:ca:69:de:bf:e2:95:f1:72:a0:3a:d5:98:fd:9f:91:
         e6:f8:1b:49:d3:8d:9e:a7:31:85:9a:cd:94:99:0d:93:28:64:
         cd:51:30:44:98:eb:c4:02:2d:68:85:dd:25:d3:02:d4:64:80:
         26:75:2b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:28:26 2025 by rpki-client