Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8383e8e-534b-3442-8a2c-2007f08e3d58.roa
File:                     e8383e8e-534b-3442-8a2c-2007f08e3d58.roa (raw, json)
Hash identifier:          h0Ss3/En1eT5SlA5WB5llAufEQtZhuvcx9CUEA6Enc4=
Subject key identifier:   09:8D:8B:67:79:BF:BD:E5:1F:DC:3D:9B:C1:88:5F:A7:90:D1:20:29
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01D717A06A87E8B9782590
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8383e8e-534b-3442-8a2c-2007f08e3d58.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2001:579:8098::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:d7:17:a0:6a:87:e8:b9:78:25:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=27ecda7c-4af4-4c88-aa1e-35bd2d651eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:9e:b2:b2:c4:e2:6d:2f:01:a3:c7:30:b7:
                    33:d0:7a:29:05:4f:33:27:fb:4b:a5:e5:a1:96:ca:
                    6c:1e:7e:1f:d4:bc:47:1f:15:c4:1b:c6:5e:0c:60:
                    e6:6e:a4:96:8d:cd:5b:91:4f:b9:9e:03:a0:f8:5b:
                    70:6e:6d:d6:79:79:23:62:74:87:61:c9:8c:ec:b5:
                    e0:2b:45:6f:1b:e1:0e:cb:db:c7:dc:68:8f:7f:b4:
                    3e:37:62:4c:32:76:45:96:8c:7e:0e:ee:ff:94:78:
                    5d:46:18:8a:8f:b8:d3:4e:f7:ad:2f:89:83:47:ee:
                    92:a2:4c:12:b2:f9:59:64:16:02:db:90:bb:d0:4c:
                    cb:8a:9c:75:32:a0:d5:35:3c:5e:e6:64:ee:43:52:
                    68:1c:6f:ca:bf:9f:a3:28:c2:2c:91:33:7a:f9:68:
                    13:d2:1b:ed:3a:da:6d:d8:f5:9f:88:1b:d4:30:3e:
                    ce:10:b6:7d:89:f8:78:27:cf:c5:a8:57:d3:8a:d6:
                    50:35:03:29:cf:a6:98:e1:f8:af:6a:c6:4d:42:ab:
                    72:5d:5b:c5:b0:06:1a:3f:1a:26:92:95:6b:3f:89:
                    d9:6d:04:d9:f9:22:0a:35:92:1d:1a:3c:30:b5:2f:
                    a9:ec:31:c3:d7:4e:9c:1c:65:29:e2:6a:0f:67:49:
                    f4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8D:8B:67:79:BF:BD:E5:1F:DC:3D:9B:C1:88:5F:A7:90:D1:20:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8383e8e-534b-3442-8a2c-2007f08e3d58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:8098::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:96:c9:6d:8f:a9:1e:69:d3:e8:f5:a9:a0:49:59:41:91:8e:
         7e:eb:f7:20:1d:09:e4:06:a5:31:27:63:4b:33:12:a3:f9:a4:
         cb:3b:ac:65:9c:08:db:82:dc:76:3d:7f:c9:33:4f:69:b7:dc:
         3c:d4:ce:5c:ed:61:36:cf:31:5f:bc:1d:d1:ea:ca:4e:a7:05:
         21:3b:60:fc:42:f7:be:7b:cc:33:bf:fc:cc:51:ef:c1:07:ed:
         85:81:19:a3:cd:3a:bf:e5:ba:61:2e:88:a2:b3:cf:65:06:6e:
         86:75:8c:06:e0:62:f6:62:5e:ef:4d:96:7c:58:cc:65:1b:2e:
         94:75:1c:9f:86:d3:20:ab:be:3a:81:34:ff:2b:a7:fd:17:52:
         59:f4:25:a5:d3:83:80:ed:0a:1a:28:f3:c2:98:a7:52:af:1d:
         67:35:83:25:7b:63:cd:e6:f1:bb:b2:37:20:0b:72:89:b8:3c:
         a7:cb:16:73:00:27:0d:3c:14:b2:4d:c1:15:53:01:77:e1:2e:
         13:a1:f1:67:a4:fe:0d:6f:b0:14:35:e8:59:ec:09:6a:46:8e:
         66:c8:3a:35:aa:20:f2:60:4c:e2:75:76:3c:d1:cf:fd:0e:f4:
         d3:b0:97:5c:98:35:bf:ed:a6:f7:17:cd:91:9e:7a:7e:e8:98:
         e7:dd:a0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 01:31:15 2025 by rpki-client