Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ca55b56-f3d7-3d7d-a186-51501a594ce8.roa
File:                     4ca55b56-f3d7-3d7d-a186-51501a594ce8.roa (raw, json)
Hash identifier:          caGmcbHNiupNPpysrq3FgCXhVDbjD29wICV0p+HBjWY=
Subject key identifier:   B3:10:32:A0:35:C5:10:52:29:2C:75:40:84:CC:5F:C7:64:64:D2:39
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E7AAF4D5137915046981120
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ca55b56-f3d7-3d7d-a186-51501a594ce8.roa
Signing time:             Thu 19 Jun 2025 14:48:04 +0000
ROA not before:           Thu 19 Jun 2025 14:48:04 +0000
ROA not after:            Wed 17 Sep 2025 14:48:04 +0000
asID:                     22773
IP address blocks:        2600:8800:8900::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:7a:af:4d:51:37:91:50:46:98:11:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:48:04 2025 GMT
            Not After : Sep 17 14:48:04 2025 GMT
        Subject: CN=ed967f10-8473-404f-a136-a0383d353d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:d4:7c:83:18:42:ef:e9:87:7a:cd:07:37:
                    0b:f8:d8:49:97:e8:b6:e4:e4:c1:4f:47:a9:4b:54:
                    b1:27:a4:13:6a:ee:41:66:89:06:93:3d:f6:88:03:
                    27:42:b2:41:a3:8f:58:e9:21:21:07:dd:34:a7:e3:
                    2c:a3:c4:c4:b2:10:3f:d0:2d:a1:a5:4e:f4:26:bd:
                    bf:c7:c2:60:95:fa:b7:7b:b7:a7:12:86:28:d7:34:
                    2e:07:1e:df:3b:50:7f:c1:ec:b4:14:c4:fa:61:cb:
                    06:f8:48:1a:90:5f:ae:81:60:ea:a8:71:1c:df:10:
                    1c:06:55:b0:bb:ba:76:59:74:ad:5f:06:7a:ce:51:
                    df:56:f7:23:bd:b1:81:d0:34:e4:84:62:d3:ec:60:
                    81:18:c7:ea:5c:ac:d6:e6:2f:3d:6c:94:1c:7d:c9:
                    30:ed:1a:6f:da:18:a2:02:58:1d:35:a1:9c:b6:88:
                    6a:42:1a:e3:16:0f:f5:d5:b3:57:77:0e:48:f5:ee:
                    21:0c:8d:b3:a1:e1:ab:26:51:e7:c2:62:67:88:67:
                    42:5e:f7:7c:ff:c9:27:61:dd:05:0d:59:8e:17:8f:
                    d0:a8:1f:14:9f:9b:1b:b3:3d:8a:be:a9:6f:1a:7e:
                    a6:65:7c:6c:f5:b7:b8:ae:fc:d2:a2:4a:b8:d1:38:
                    f2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:10:32:A0:35:C5:10:52:29:2C:75:40:84:CC:5F:C7:64:64:D2:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ca55b56-f3d7-3d7d-a186-51501a594ce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:8900::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c4:81:aa:d2:99:81:de:05:f6:06:88:70:70:2e:db:34:20:
         69:8c:65:7b:0d:dc:b2:80:6c:83:6e:ca:5a:3d:2d:07:18:5a:
         11:90:fa:c5:40:af:a8:e3:7b:a6:6f:36:52:1d:c2:e3:01:e7:
         cb:ab:ac:71:37:15:bb:14:2b:72:05:92:ba:a7:b2:e2:d4:2d:
         fd:19:78:a0:94:4b:33:79:64:fb:0e:fb:65:f2:b9:69:35:04:
         3a:a4:f6:a0:a3:b3:7a:c4:b6:16:19:ae:e4:f6:1d:8f:8a:d5:
         76:4a:3b:71:be:fd:82:c3:c2:cb:b2:01:2e:83:84:c7:48:3f:
         85:e8:4d:58:a6:7c:50:f2:ca:84:b9:ff:a1:e9:94:ba:18:24:
         9f:c5:ae:fe:82:a4:f0:af:eb:89:8b:52:0b:9c:3a:52:7d:46:
         6d:4d:a7:61:90:93:47:0e:53:86:7f:e8:2a:ff:88:6f:d2:c4:
         a3:8b:4d:96:2c:cc:58:cc:22:2d:b1:ca:7c:2e:a0:44:dd:1f:
         b1:08:63:da:14:c0:17:d1:b6:b6:ad:6c:d6:a0:1e:84:a2:3d:
         f0:a2:db:0f:7b:fa:da:80:35:42:81:a1:67:6f:38:b8:a3:44:
         19:22:86:ca:6b:d8:32:df:06:28:b3:19:46:3f:0c:26:26:99:
         35:b4:c2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:18:04 2025 by rpki-client