Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e1385d5-c4e7-31a1-ae5b-9a32a3d6e5c1.roa
File:                     4e1385d5-c4e7-31a1-ae5b-9a32a3d6e5c1.roa (raw, json)
Hash identifier:          Exq8L8yADQE6RbbAHCB8cE1dc/yVcld2sphptcurzpQ=
Subject key identifier:   9A:19:57:AE:EB:93:BC:CA:22:91:29:FC:15:D8:3C:E8:E9:74:79:62
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E79E8EEF1CCC48135762280
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e1385d5-c4e7-31a1-ae5b-9a32a3d6e5c1.roa
Signing time:             Thu 19 Jun 2025 14:46:31 +0000
ROA not before:           Thu 19 Jun 2025 14:46:31 +0000
ROA not after:            Wed 17 Sep 2025 14:46:31 +0000
asID:                     22773
IP address blocks:        2600:8800:561c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:79:e8:ee:f1:cc:c4:81:35:76:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:46:31 2025 GMT
            Not After : Sep 17 14:46:31 2025 GMT
        Subject: CN=2c4c5ecf-f723-49b2-9a94-22f0223e3e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:9a:bd:e2:84:29:bc:b8:85:4a:b6:08:ed:
                    b3:19:4f:bb:37:97:5d:09:4d:91:47:fc:41:d1:8d:
                    f4:dc:a9:8d:e4:5e:25:64:da:05:d8:18:e4:72:0e:
                    2d:b1:48:5f:f7:a2:46:04:c2:8e:6e:2e:60:8e:ac:
                    20:68:51:08:68:cd:cb:5a:19:db:39:06:cf:84:4e:
                    8c:fa:fc:ce:74:ca:8b:cc:cb:a8:5a:3e:75:b3:7b:
                    49:dc:d2:56:cd:00:42:71:f1:20:1c:e5:97:4c:ad:
                    88:8a:66:ec:5e:32:51:2e:d6:dd:b2:56:a8:21:43:
                    84:45:24:ec:fa:21:5b:32:9f:86:30:f6:d7:61:34:
                    53:a1:11:a9:e3:76:1d:69:d9:9e:99:8f:3c:0a:26:
                    d7:a4:d1:47:62:b6:7e:35:f2:47:fd:2b:a9:b8:86:
                    26:71:55:d2:e6:71:42:1e:47:3b:2e:71:5b:52:4d:
                    cb:83:1b:8a:4b:20:d5:1f:91:b3:48:48:ae:08:5e:
                    ca:09:eb:98:16:5b:f6:24:be:88:b2:14:ab:b1:7d:
                    40:06:ca:65:71:07:ca:a3:83:8b:b3:a4:7a:85:a7:
                    f7:77:08:70:85:b8:91:8c:38:df:fc:20:db:e7:98:
                    d8:1d:c0:4f:76:2a:70:83:30:e4:5c:b9:2e:fc:c8:
                    21:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:19:57:AE:EB:93:BC:CA:22:91:29:FC:15:D8:3C:E8:E9:74:79:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e1385d5-c4e7-31a1-ae5b-9a32a3d6e5c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:561c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:89:63:18:a9:44:f2:5c:ba:7d:2e:65:55:2d:5a:d1:65:eb:
         1e:b8:a7:02:da:f5:d1:4a:45:bc:2b:02:22:bd:2b:e2:3e:40:
         3d:c4:4a:4f:15:35:13:e1:51:a9:15:f9:eb:8d:91:3c:89:a8:
         4a:d5:47:d9:b7:aa:93:af:73:f2:e0:6d:68:85:28:e6:d5:97:
         3c:32:5b:7d:fe:90:9d:10:86:16:32:2c:51:2f:e9:d2:7a:c7:
         8a:b2:e1:2e:29:9b:15:e1:21:51:07:14:52:b2:1c:17:3e:2b:
         b8:d5:a9:3c:d5:79:20:fb:b0:77:f5:bc:c5:70:f4:79:da:0b:
         42:fa:c1:28:63:10:49:4e:0a:34:fb:c9:d1:55:b9:71:52:51:
         76:99:f6:16:96:07:28:ad:8d:ae:0a:06:68:b0:5c:27:9a:be:
         e0:91:65:f6:99:6c:5d:2f:3a:0b:e6:18:d6:f4:91:a3:e3:59:
         28:47:64:b2:46:07:f1:eb:0f:1e:6e:18:0c:ba:f7:0a:00:27:
         d7:22:5a:e9:a6:15:b3:92:6d:98:18:96:03:c5:65:15:2e:db:
         f1:d3:f6:a0:5a:c9:54:01:b6:a8:d4:13:c6:39:a0:e1:bd:74:
         47:c1:97:c1:cb:8a:f1:2b:6d:35:42:4d:ea:a0:ff:0c:b7:9b:
         16:3e:1a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:40:31 2025 by rpki-client