Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20cab820-a395-3af6-b15d-43cd7f719682.roa
File:                     20cab820-a395-3af6-b15d-43cd7f719682.roa (raw, json)
Hash identifier:          Qq3OOU2UBaab+ZcL5uN7Uk692pSf2Svhcna+KIS4XcI=
Subject key identifier:   3A:9A:F0:D9:E0:B6:43:C0:30:5B:74:19:24:F8:61:BD:4D:7A:D3:9C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584ADA9BCFD224903B8E248B98C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20cab820-a395-3af6-b15d-43cd7f719682.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        2001:579:6188::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:cf:d2:24:90:3b:8e:24:8b:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=6e8d0058-169e-4ca4-974b-c81cc9313bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e9:95:56:ca:e8:23:89:ae:f2:e8:0b:71:4d:
                    bb:c1:c8:a0:c5:2c:c9:22:c6:f8:2a:be:07:c5:36:
                    e6:30:ed:a1:bf:03:f5:ac:bb:92:e1:f4:93:37:f5:
                    b0:30:d9:28:8a:7b:ab:97:ac:0f:50:49:b5:bb:e8:
                    21:ef:88:f6:61:50:36:b8:b3:45:5d:39:4c:ce:0d:
                    20:41:18:5f:48:37:27:74:a0:6e:25:44:db:1a:b5:
                    11:f3:34:39:aa:25:3f:0d:2b:f9:a3:b0:e8:da:d1:
                    32:92:c4:63:bd:db:44:f4:e2:37:95:6b:3c:25:4a:
                    31:84:13:b4:ee:91:60:96:ee:6a:83:ec:63:fc:1e:
                    48:56:67:83:d3:05:a1:c3:6d:e9:04:98:81:bd:da:
                    82:c8:07:8f:63:48:60:66:88:99:07:34:2f:b1:f6:
                    ee:6f:fd:68:74:18:11:dc:8a:b9:46:26:f4:82:df:
                    9e:f5:be:c2:ee:9c:fd:cc:57:8c:73:ff:3e:01:e2:
                    dc:9d:11:12:e9:13:61:2c:61:79:0f:99:ee:9f:15:
                    3f:15:0b:01:ff:35:a3:95:04:be:bd:86:95:f3:0c:
                    3d:f6:5a:6c:25:31:86:a8:57:84:33:ce:fe:5f:fc:
                    6b:fd:04:75:06:1b:10:ab:fb:9e:69:a3:fc:49:00:
                    19:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9A:F0:D9:E0:B6:43:C0:30:5B:74:19:24:F8:61:BD:4D:7A:D3:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20cab820-a395-3af6-b15d-43cd7f719682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:6188::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:db:cf:49:40:ca:ee:3e:36:45:be:b0:ff:9f:55:86:f7:4d:
         f4:f5:ef:07:13:65:29:e7:d7:e3:32:c3:d9:22:f2:51:02:75:
         4a:12:56:e2:ad:54:28:db:52:fe:c8:f7:f7:9d:e4:d3:99:70:
         b8:a9:b4:c8:6c:ed:ca:49:e4:d2:74:ff:64:52:44:cb:d6:ed:
         55:38:15:66:32:ba:ea:7a:1d:8f:04:db:75:3a:46:3c:e8:ec:
         ee:87:39:7f:30:43:dc:e5:fb:d2:ad:da:6d:82:38:30:60:fa:
         e7:2b:d3:ba:e1:cb:9a:12:86:d7:60:02:ac:0b:36:07:d1:88:
         f0:38:4c:3d:56:9f:0a:b0:ea:e8:a1:d4:e3:69:e8:77:08:23:
         bc:ed:66:3c:9c:6b:92:00:0f:9f:93:98:27:25:d9:93:6b:77:
         de:71:7e:1c:81:11:28:a8:36:ea:e3:09:22:f2:9e:70:1f:00:
         9a:34:b9:c5:b8:eb:0d:be:a7:b1:a8:5d:0a:9d:67:79:2c:05:
         38:86:04:3b:96:9c:19:84:fe:11:e3:3f:d2:14:ed:75:6b:ff:
         23:56:fc:be:e3:80:dc:76:e8:e7:5d:f4:26:b0:1e:e5:c2:8e:
         bd:cb:6c:26:e5:a6:6a:37:b5:0e:20:df:47:e8:45:eb:c2:dd:
         b7:84:22:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:34:44 2025 by rpki-client