Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ca4ecdf-2851-3ab4-a081-8321d0a959aa.roa
File:                     4ca4ecdf-2851-3ab4-a081-8321d0a959aa.roa (raw, json)
Hash identifier:          ZmATcjO/12hnQjTuyDvEKMj9FGvtvZN9QI+Je++dpCY=
Subject key identifier:   67:2C:69:CC:C7:10:49:ED:43:3A:1C:B0:6E:C1:DC:E8:6E:E3:F7:F7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E7A06AFFB08A531B56DB100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ca4ecdf-2851-3ab4-a081-8321d0a959aa.roa
Signing time:             Thu 19 Jun 2025 14:46:45 +0000
ROA not before:           Thu 19 Jun 2025 14:46:45 +0000
ROA not after:            Wed 17 Sep 2025 14:46:45 +0000
asID:                     22773
IP address blocks:        2600:8800:5690::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:7a:06:af:fb:08:a5:31:b5:6d:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:46:45 2025 GMT
            Not After : Sep 17 14:46:45 2025 GMT
        Subject: CN=087b2167-166b-4f75-a479-78e7c764b241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ba:65:85:4c:34:7e:8d:97:29:f1:d4:59:10:
                    23:ef:fc:a1:70:c3:75:b8:73:4c:6a:e5:24:87:40:
                    7d:fb:25:75:45:52:c2:7a:53:33:88:49:5c:e9:dc:
                    7a:f8:7b:cc:f3:99:e6:aa:75:bb:d9:41:dc:5a:42:
                    8a:52:87:c1:96:01:1a:87:5e:5f:d3:dd:64:8c:98:
                    e0:65:4a:da:63:45:3e:02:87:08:e7:5e:18:5d:db:
                    4e:3a:04:82:7b:5d:a8:95:06:8b:3a:17:ee:d5:1c:
                    d6:a7:de:d2:1a:6a:51:fd:0f:5e:85:18:d8:cd:ab:
                    78:ab:48:d0:54:22:6d:0e:0a:36:64:a2:08:d0:b5:
                    79:cc:d4:58:0a:28:6d:5a:cc:c2:f3:af:30:49:11:
                    36:4a:d0:31:6d:e6:ec:18:f9:5d:c3:ed:5a:29:28:
                    ec:06:84:68:c5:f3:f9:4e:40:eb:94:10:38:48:70:
                    2c:b0:71:71:8e:db:0e:eb:e0:6e:00:7b:a3:02:36:
                    ae:18:7d:b0:37:3c:44:a1:22:f6:14:8b:b0:ad:a8:
                    a3:e7:e5:e2:02:bb:6f:a3:39:af:e0:2e:e0:76:3a:
                    f3:9d:8a:e5:c5:56:7e:18:92:34:ae:ee:d7:36:8a:
                    41:9f:49:e2:14:7f:55:81:b2:4a:a4:8c:cb:d9:66:
                    10:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2C:69:CC:C7:10:49:ED:43:3A:1C:B0:6E:C1:DC:E8:6E:E3:F7:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ca4ecdf-2851-3ab4-a081-8321d0a959aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:5690::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:16:6b:84:8f:ce:f0:08:80:fa:31:30:1e:4c:c8:4a:2d:01:
         9f:b0:bf:3f:57:7c:b7:0e:4e:d9:f4:fc:3d:6a:af:a4:de:dd:
         7d:b6:5c:8b:14:24:91:89:91:71:74:9a:22:ad:bf:68:29:3f:
         d2:6c:67:a4:8d:44:75:d8:f2:11:63:7f:2c:2c:0b:08:58:e9:
         05:49:81:b4:10:b8:b5:09:f0:0b:dd:94:da:c5:04:83:20:7f:
         28:c3:03:52:3a:db:43:2f:da:7f:76:48:a5:10:6c:bb:55:78:
         7b:90:13:46:ff:ee:7e:08:f5:aa:ed:23:d0:9f:cb:3b:6c:fb:
         2b:fb:17:a8:b7:0e:26:39:42:08:2f:f0:5e:ae:ac:58:63:60:
         e1:6c:62:28:a3:f0:64:5f:7d:67:2c:0c:e2:93:d5:ed:18:f5:
         1f:ea:fb:58:2a:3f:d9:06:05:5c:f9:4f:d1:d1:7c:8e:5a:a7:
         11:ef:06:2a:57:4f:c4:18:7d:31:cb:de:18:01:66:6e:e9:5a:
         b6:30:c6:d7:98:23:3a:bc:e6:89:f6:94:c4:4c:d9:12:c6:2b:
         44:9e:a9:34:4a:91:be:af:5f:fb:f3:96:cc:07:bd:db:ef:4c:
         42:0c:83:a0:43:40:15:df:ca:9e:49:29:4b:8a:8e:d1:cc:c4:
         8f:2f:46:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:19:15 2025 by rpki-client