Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0528a7ec-3f74-38d4-80b5-2469633f74a5.roa
File:                     0528a7ec-3f74-38d4-80b5-2469633f74a5.roa (raw, json)
Hash identifier:          awfzl4rU/WJ2fsPfeowOXIUZrQhpyNmx2HvOj3hsFgY=
Subject key identifier:   87:0F:95:FA:AF:EB:F7:DB:30:E5:A4:7F:FB:53:57:0D:2E:0C:2D:89
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E781FFAEF502899542F89C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0528a7ec-3f74-38d4-80b5-2469633f74a5.roa
Signing time:             Thu 19 Jun 2025 14:42:55 +0000
ROA not before:           Thu 19 Jun 2025 14:42:55 +0000
ROA not after:            Wed 17 Sep 2025 14:42:55 +0000
asID:                     22773
IP address blocks:        2001:578:8ab::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:78:1f:fa:ef:50:28:99:54:2f:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:42:55 2025 GMT
            Not After : Sep 17 14:42:55 2025 GMT
        Subject: CN=67e8da83-2cb9-4c85-8c99-19ba53cec818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:ef:8b:bc:65:79:c7:46:b0:fa:31:e0:73:
                    d0:8a:c9:f4:d9:06:68:a1:6d:30:0d:00:bd:dc:73:
                    9b:33:5f:1c:e4:b0:25:76:ec:c0:92:ae:bb:96:67:
                    45:ff:26:0e:78:d8:8b:0a:20:3d:51:ec:12:62:15:
                    76:00:72:97:95:4f:16:cc:bf:56:dc:85:fb:c7:af:
                    2c:ae:84:bc:5c:03:31:b0:5b:b5:5d:ae:f8:7d:09:
                    17:9f:61:f4:e5:55:e7:9c:7c:d1:63:2b:2e:4a:b5:
                    f0:78:ad:01:f8:9a:6c:b6:fe:cd:a2:20:1f:7f:96:
                    d3:74:66:f4:ca:a7:97:6f:8e:a8:39:95:30:5c:b5:
                    da:58:57:98:cd:44:4f:bf:ff:32:e2:f3:9b:1b:95:
                    df:0b:7e:12:c6:fb:fa:c5:34:db:5b:14:60:1a:33:
                    0a:44:e4:ff:d2:0a:77:4d:31:40:ba:03:77:5d:89:
                    b7:f1:eb:82:1c:78:be:9b:70:bf:5b:66:a0:ed:60:
                    ee:18:88:15:02:da:79:96:ab:78:76:0e:38:49:5e:
                    d4:80:d9:1d:36:b6:55:ea:8a:f9:cb:93:19:77:a0:
                    38:27:e5:a8:68:3c:75:43:4d:a0:ea:d2:a5:24:86:
                    29:a4:02:06:f1:71:e8:06:c4:f7:1a:76:2f:1d:e6:
                    db:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0F:95:FA:AF:EB:F7:DB:30:E5:A4:7F:FB:53:57:0D:2E:0C:2D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0528a7ec-3f74-38d4-80b5-2469633f74a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:578:8ab::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:10:3f:a3:81:13:1a:26:02:2e:40:29:f1:e5:8d:2c:70:75:
         eb:98:6b:e2:d7:8a:86:2c:e5:b3:ed:1b:54:78:be:30:d1:91:
         cb:55:b8:9d:49:c4:55:be:a7:26:0e:56:cd:b9:30:74:8b:b1:
         01:9e:6a:bd:36:5c:3b:93:8e:60:5f:cb:0a:bf:dc:c7:54:f6:
         95:75:52:f9:8d:70:7c:37:e5:00:35:36:15:a8:57:3a:af:dd:
         e5:11:4c:4f:7b:df:60:92:38:51:bf:69:08:3c:a9:f3:40:dd:
         77:12:2f:27:51:96:b5:f1:3f:a8:34:5b:a4:8f:75:7b:a8:e8:
         d0:6e:06:4b:42:52:e0:a7:e8:3f:3a:25:e5:05:51:62:07:e3:
         7f:19:61:27:a4:7a:ca:11:28:ff:56:bc:f4:89:18:65:1f:d5:
         6e:55:31:67:5e:d0:47:00:10:ca:e3:45:58:95:57:04:ad:73:
         22:db:ad:57:4b:50:43:b2:45:9f:62:9c:41:61:46:4b:2b:87:
         0d:6e:4b:84:c8:e4:58:0e:ba:4b:b9:e0:e4:9a:58:01:73:2c:
         a1:52:a4:2d:aa:cb:3b:96:e2:76:ef:41:d5:50:90:de:eb:d3:
         f1:8e:c4:c4:dc:0e:38:fe:05:3f:a9:31:be:dd:d5:27:64:a6:
         7d:1b:8c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:30:32 2025 by rpki-client