Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa349786-4cbd-3bcd-8ce0-6d117a44f1f2.roa
File:                     fa349786-4cbd-3bcd-8ce0-6d117a44f1f2.roa (raw, json)
Hash identifier:          WSbad4wZ2VGVChJ8goJ+TQRrDdEokdyVdLGcVqmHrC0=
Subject key identifier:   9D:FA:79:30:62:A0:6C:D7:05:EC:3C:80:44:C9:C5:59:A8:45:B2:F7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01F47836AEC6CE12CDF200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa349786-4cbd-3bcd-8ce0-6d117a44f1f2.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:4c06::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:f4:78:36:ae:c6:ce:12:cd:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=0a192b53-5547-4467-9768-ad30f5f247e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cb:50:ab:d5:fe:ea:ae:46:d1:77:a5:7b:39:
                    9d:bb:03:38:6a:44:99:0c:f2:18:94:52:c8:83:84:
                    81:28:98:45:ea:ba:88:1a:aa:74:5d:1e:16:1e:9f:
                    f9:2d:a1:4d:86:0e:dc:17:f2:26:a9:39:ba:ea:5c:
                    3f:69:60:67:00:a9:82:13:26:67:20:1e:55:23:1c:
                    4d:f9:b5:ae:99:63:20:d4:59:a7:e0:77:f1:7b:39:
                    46:95:3d:e2:c8:a6:7c:12:cd:c7:05:af:f5:1d:cf:
                    b9:6a:11:c3:f6:80:e6:9a:f1:79:df:23:ca:ae:d1:
                    04:09:df:c0:54:2e:d5:4f:a2:5e:49:5a:17:d1:4f:
                    1e:f2:74:f0:b1:90:76:65:5f:be:83:00:4a:4d:b5:
                    cd:1a:fb:c5:24:6c:65:40:ea:c4:48:f5:de:41:d9:
                    e2:9f:3b:17:38:93:45:c3:b5:f7:73:43:e3:dc:74:
                    bc:f9:2e:1f:52:58:7e:91:b1:ae:10:ec:35:3d:8a:
                    48:f1:57:de:b1:1a:c5:cc:94:0d:c1:e8:97:60:70:
                    33:1e:5e:ca:7f:6f:05:51:a3:eb:cf:14:59:4e:76:
                    20:da:5f:36:5d:b5:4f:ad:b7:f6:e3:52:cd:ca:db:
                    a4:07:2b:06:e3:4b:e5:f4:dd:80:7c:90:fc:8d:b4:
                    9e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FA:79:30:62:A0:6C:D7:05:EC:3C:80:44:C9:C5:59:A8:45:B2:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa349786-4cbd-3bcd-8ce0-6d117a44f1f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:4c06::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:56:1a:8a:eb:70:8d:ec:b8:4d:b9:12:c1:d2:8c:61:3e:39:
         85:77:6b:ab:7c:ad:a5:31:1a:9c:0c:4e:38:d2:92:9e:34:d0:
         73:e9:80:9b:93:3c:f5:e6:e1:4a:b8:a6:89:55:89:b2:64:5e:
         0f:1d:e0:de:98:d8:49:0b:98:6e:a9:52:5c:49:28:06:1b:dc:
         ec:36:00:de:65:06:28:98:68:38:b2:48:af:d8:d6:67:7a:cd:
         f8:12:14:99:12:16:bd:fc:73:8d:74:5e:59:6e:d3:10:e5:9a:
         0f:e5:3a:fa:e2:8b:c1:50:28:9c:ad:27:eb:f5:03:6a:f8:1e:
         e4:d6:fd:97:e1:e0:06:23:dc:f7:f8:7f:51:80:11:fd:7e:08:
         e1:3f:c3:10:c2:26:3e:01:af:51:2b:85:25:aa:f9:6f:fd:23:
         08:4b:b7:ff:3d:b2:f5:db:bc:52:07:bd:07:27:d0:2c:63:ed:
         51:67:1e:87:d0:e9:79:d7:64:45:36:40:8f:35:90:13:b2:21:
         48:d4:3d:fe:90:10:1c:6c:ff:32:16:d6:36:78:82:19:81:fc:
         c3:f3:69:27:98:d4:53:a3:8a:17:73:03:4d:b7:e5:a4:8c:42:
         c6:d2:ab:1a:87:5b:ad:cd:ad:83:9e:36:34:c1:2f:ce:63:d9:
         99:ab:d9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 02:06:46 2025 by rpki-client