Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ef899cb-5246-3ee7-9d0b-81bc3d01084b.roa
File:                     1ef899cb-5246-3ee7-9d0b-81bc3d01084b.roa (raw, json)
Hash identifier:          3mGr5tov8bhdPyBysx54jrgazBpK0HuSix2s2NrTUkU=
Subject key identifier:   08:F2:08:AF:97:64:D8:ED:40:BD:4E:16:EC:BD:EC:5F:E9:0B:92:6F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E78DCD7499EE6DA21626440
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ef899cb-5246-3ee7-9d0b-81bc3d01084b.roa
Signing time:             Thu 19 Jun 2025 14:44:24 +0000
ROA not before:           Thu 19 Jun 2025 14:44:24 +0000
ROA not after:            Wed 17 Sep 2025 14:44:24 +0000
asID:                     22773
IP address blocks:        2600:8800:1142::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:78:dc:d7:49:9e:e6:da:21:62:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:44:24 2025 GMT
            Not After : Sep 17 14:44:24 2025 GMT
        Subject: CN=3f453588-5eba-4883-97b9-30dafcf948e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:98:02:05:d1:a6:d0:fb:0f:a4:e9:88:7d:63:
                    89:48:89:3e:02:05:eb:a4:95:7b:18:be:69:97:e7:
                    09:d8:bc:24:db:4a:28:28:79:19:fc:9b:15:4e:c7:
                    3c:bd:50:86:a0:3f:4e:35:c1:56:c1:4b:4d:da:69:
                    ce:e8:47:9a:94:c6:8b:5b:ef:a8:73:e1:44:7c:e6:
                    4e:8d:32:df:f0:82:7d:a6:e4:7b:f0:fe:2d:9e:14:
                    15:97:88:aa:95:d4:20:c1:18:1a:61:88:d6:f2:33:
                    12:63:46:f7:b3:f6:cd:f5:5d:a8:02:2c:b2:2e:56:
                    a7:56:5b:05:f3:6e:8d:4a:b4:1c:62:69:34:36:6d:
                    51:34:45:16:03:bf:fe:02:ad:d8:36:3b:b9:61:a6:
                    0c:fa:a5:15:0c:98:ac:2f:2a:71:2b:74:38:27:8c:
                    8e:dc:69:2e:90:73:d6:75:7a:d6:5c:bc:fa:de:cc:
                    d8:fc:36:a7:ec:5b:6c:a6:9d:80:91:35:53:53:1a:
                    d2:7c:6c:6f:a2:19:ac:2a:2d:f4:b3:5d:c8:5c:b2:
                    77:35:07:a5:63:b0:24:2f:be:67:84:c0:cf:d7:9c:
                    98:0a:c4:da:bc:19:cd:a7:fa:71:1a:72:6d:fd:21:
                    ec:c5:ce:2c:64:09:c3:c0:3d:10:0b:1b:4e:cc:50:
                    4d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F2:08:AF:97:64:D8:ED:40:BD:4E:16:EC:BD:EC:5F:E9:0B:92:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ef899cb-5246-3ee7-9d0b-81bc3d01084b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:1142::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:26:87:e3:ca:2c:71:10:1e:50:ba:ad:95:72:1c:d8:55:cb:
         c6:ad:1a:60:bb:3f:77:d2:01:e2:ba:c5:30:ad:9f:d7:e9:16:
         13:db:82:32:2f:23:0f:17:c4:e0:8b:4f:4c:1e:6b:bc:eb:1b:
         6a:47:ae:ef:df:c6:6a:21:99:36:11:e2:21:57:8c:9e:ea:5b:
         9e:b6:f1:dd:f4:84:40:c8:ca:9a:0c:68:b2:b8:51:12:09:2d:
         98:2e:0f:a3:84:fc:03:b6:a1:31:99:b6:b3:60:53:21:0b:10:
         e4:a2:8c:b7:f7:4b:69:9b:c4:1d:c8:b2:3f:11:db:16:d6:fb:
         6e:a3:a8:91:ef:5b:da:eb:24:af:52:51:05:8e:bb:9f:65:7d:
         ca:e7:35:8d:8e:5f:a2:3e:9b:04:c9:ee:13:e4:cd:b2:96:f0:
         9d:62:ac:ea:e7:95:49:f0:9c:ec:a3:f1:27:26:a1:1a:5a:1b:
         ac:76:b1:0a:f4:46:eb:c6:db:4f:68:5a:8f:f9:a4:fc:1a:2a:
         50:4e:0a:07:56:25:2f:a7:22:f4:d3:ec:fb:23:47:5d:ba:59:
         13:ca:e8:38:63:89:aa:93:5c:4a:64:c2:6c:4a:bd:01:92:d3:
         c9:76:46:73:b0:df:35:d6:f0:49:34:b4:bb:1a:45:5b:9b:48:
         77:53:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:23:36 2025 by rpki-client