Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b00412f-8c0e-3bc3-aeef-fd3347e0b8a9.roa
File:                     9b00412f-8c0e-3bc3-aeef-fd3347e0b8a9.roa (raw, json)
Hash identifier:          mWDCvFfGRmpYlqSjhZ67htArU70vx/gVwQOVNI3ogz4=
Subject key identifier:   DD:83:BE:0E:AA:01:C7:CB:F7:EF:C5:39:8F:BF:76:7A:8A:00:18:D2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584ACCA6896CB7EB11FA397843A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b00412f-8c0e-3bc3-aeef-fd3347e0b8a9.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     15218
IP address blocks:        2001:578:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:89:6c:b7:eb:11:fa:39:78:43:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=425817b4-8624-4ad2-a21c-15875f06d110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:ee:c2:37:26:53:2e:b8:01:6b:a6:a5:c5:
                    84:6d:45:e7:f9:30:84:5e:3c:fb:d6:e0:df:f6:23:
                    9c:c8:b9:24:bb:d2:3f:92:5e:63:0b:ba:d4:d6:1a:
                    e0:fe:79:0b:36:7c:d5:69:3e:fa:aa:73:22:ba:7b:
                    e1:2c:e7:6f:3c:40:6a:8d:e7:9c:b6:8d:b9:e0:d3:
                    08:87:73:e1:b3:71:c1:f7:3c:e0:99:f6:3f:1c:98:
                    eb:a6:8b:d1:38:c1:5f:45:1c:71:7a:0e:56:60:fd:
                    12:e2:4e:91:30:91:47:82:bc:1a:7d:0f:84:ca:ed:
                    95:bf:83:09:4a:83:04:0c:dc:ea:6a:ac:86:19:76:
                    7c:a6:64:5c:bb:a8:fe:05:32:32:b4:3b:d3:70:f6:
                    2a:48:3d:f1:f5:7a:13:54:e2:9e:51:75:12:bd:d4:
                    1b:83:a3:d5:86:7b:03:64:54:4f:dd:ac:98:b8:41:
                    51:a3:80:c4:42:1b:b8:d3:ac:9a:7a:08:7b:2b:14:
                    30:8b:9f:74:54:1e:91:ec:d0:81:5b:28:07:82:c6:
                    91:62:bb:3d:22:bf:35:69:db:5f:93:64:3b:5a:f8:
                    ce:4d:f8:99:6f:46:34:e0:5d:8b:b2:ba:7e:aa:d5:
                    b6:41:e9:a5:9e:9a:03:40:cb:40:ed:cd:09:a5:53:
                    27:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:83:BE:0E:AA:01:C7:CB:F7:EF:C5:39:8F:BF:76:7A:8A:00:18:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b00412f-8c0e-3bc3-aeef-fd3347e0b8a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:578:8000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d2:d6:cf:1c:f0:a4:a2:a8:8f:7f:b0:41:4f:f4:ce:1c:11:
         50:e9:56:40:70:ed:20:d6:ee:7b:5d:86:32:b1:82:78:5a:fe:
         2e:41:87:a2:70:98:f6:09:25:b4:ef:0f:43:da:17:3f:eb:63:
         b5:33:5e:30:ce:a4:48:6b:d3:9a:8a:61:f1:05:13:48:aa:98:
         de:53:18:1b:d8:b9:a5:af:b0:50:08:3f:e6:c6:c8:c6:bd:a7:
         a8:2a:3b:f8:5b:04:2a:1d:f9:99:fd:c1:8b:d4:5e:6b:92:a5:
         4b:be:f3:5a:43:39:76:3b:c4:26:a7:1c:22:99:4b:50:52:16:
         db:cb:dd:1a:01:be:4e:db:26:bb:8f:9c:b5:38:b8:cd:20:13:
         dd:6d:fc:1e:29:de:84:80:43:2b:3c:c4:de:6b:30:97:87:d4:
         21:0a:39:b3:d9:42:15:a0:a8:38:64:2c:98:78:1e:8c:4c:96:
         dc:e6:cd:00:46:4c:cc:ed:6a:29:75:f2:e6:0e:82:5a:52:43:
         10:49:4e:25:23:5f:93:f1:f3:dc:ec:ae:6d:f7:eb:1c:7e:44:
         25:22:6a:3b:09:d9:d1:7e:46:28:34:54:07:9e:a0:98:98:78:
         51:e2:77:ce:7e:96:c6:33:66:2d:b2:8c:8c:33:cc:ea:62:ca:
         78:1e:b4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:27:14 2025 by rpki-client