Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a6aa943-d964-30d5-adf5-b3a0c002af6f.roa
File:                     0a6aa943-d964-30d5-adf5-b3a0c002af6f.roa (raw, json)
Hash identifier:          APR7bbaiTuMvHJw4Fb3VD8xr77aDM1gEVJOojDXGS3k=
Subject key identifier:   78:3A:3E:35:B3:3A:8A:8D:27:6B:46:5C:CE:E0:31:3E:C5:1A:EE:2F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584ACCA68C8CDC4307B3C9FE1F60
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a6aa943-d964-30d5-adf5-b3a0c002af6f.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        2001:579:d264::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:8c:8c:dc:43:07:b3:c9:fe:1f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=6ae45a58-1223-4a58-85e0-300a9bbd3150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e0:0d:c2:09:b1:cb:21:50:39:93:d1:5b:a6:
                    2e:ae:b4:62:1e:76:3f:78:11:3d:48:43:1f:ea:ef:
                    3c:fc:98:2c:3d:73:eb:29:34:80:b3:8b:a7:ae:22:
                    16:7f:a9:fe:03:40:7a:86:6d:f5:98:b0:92:54:ba:
                    89:ea:8a:43:ef:5a:38:df:99:6f:90:59:a8:af:1d:
                    72:3e:2e:dc:a6:11:77:61:2a:49:13:7e:6e:5a:44:
                    d4:49:41:b6:9c:bd:f7:2b:65:ff:74:d8:05:ed:a5:
                    0c:6c:96:68:f4:de:7c:ef:ef:eb:77:5b:c9:d5:95:
                    b9:81:e1:fe:30:57:d7:ad:b6:3c:da:37:b1:fe:6c:
                    21:0d:1e:4b:93:be:43:ea:49:e3:7b:d1:ec:40:b1:
                    0a:0b:95:99:07:e4:de:6e:7d:74:0a:86:9d:05:72:
                    18:2f:af:c8:44:bd:b7:3a:e2:4e:e9:8f:1f:e3:ea:
                    40:ef:82:24:4a:79:bf:f0:ab:35:37:77:75:27:42:
                    11:6f:d9:91:00:66:2c:51:79:db:15:b2:0d:86:34:
                    0e:42:71:e2:9e:7a:f9:6f:ce:21:5c:33:e0:a2:37:
                    3e:25:ea:f8:d2:c6:b2:03:f1:70:83:2b:52:59:b1:
                    2f:dd:4d:a5:5c:d5:19:19:1d:e2:9c:d1:90:09:86:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3A:3E:35:B3:3A:8A:8D:27:6B:46:5C:CE:E0:31:3E:C5:1A:EE:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a6aa943-d964-30d5-adf5-b3a0c002af6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:d264::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:60:51:06:af:4f:6c:ef:a6:ba:73:b4:6d:fa:95:9e:e5:88:
         e7:4b:f8:a3:5d:e2:e2:1e:e6:2c:59:4e:3f:b8:59:e5:7a:6e:
         9d:a8:14:4c:05:ad:9b:10:ad:b5:09:6e:51:0c:1f:34:db:ef:
         f4:b6:03:bf:0a:0c:d3:41:03:80:64:2e:22:5d:ed:ac:76:2c:
         3d:5c:0a:58:ce:d9:17:c8:db:14:82:ea:76:59:49:32:89:1c:
         f3:c0:d3:68:4f:38:e6:73:c1:8d:26:d8:4b:d2:47:82:97:a3:
         04:43:d7:cb:95:af:c8:ed:6d:98:48:76:6a:db:99:f1:da:e7:
         cb:24:cb:e0:04:64:16:ff:54:ec:6f:31:88:d2:58:33:4e:e6:
         c6:5f:3c:4d:c5:8f:72:0e:f3:96:87:4b:dd:1c:49:1b:d5:4c:
         35:cb:d7:d7:fa:21:c5:3c:1c:e0:cc:eb:bd:77:c8:bd:4f:81:
         87:e0:63:82:20:40:d0:3e:33:d2:a1:07:c7:9e:4c:9d:ca:c4:
         7d:9a:15:d2:e3:ae:63:7e:7a:c9:93:82:74:26:38:f3:94:14:
         75:02:4c:6c:30:30:3c:58:cb:b0:33:33:91:55:10:27:f7:9b:
         4a:b7:5c:7b:65:9b:e2:cc:38:fd:89:2e:71:f9:9a:14:83:90:
         17:0f:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:19:06 2025 by rpki-client