Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3d616b8-9cac-3ba7-9d42-139eb39935a2.roa
File:                     a3d616b8-9cac-3ba7-9d42-139eb39935a2.roa (raw, json)
Hash identifier:          7XaGT7E1LheCF+YGFRk+4lry6PR1P7wetgMR4NhuAMk=
Subject key identifier:   1E:8E:CF:58:62:2C:11:BB:32:C1:E0:7D:6B:72:23:6A:26:9A:ED:6C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E7B81EBC8377F02D01E3000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3d616b8-9cac-3ba7-9d42-139eb39935a2.roa
Signing time:             Thu 19 Jun 2025 14:49:44 +0000
ROA not before:           Thu 19 Jun 2025 14:49:44 +0000
ROA not after:            Wed 17 Sep 2025 14:49:44 +0000
asID:                     22773
IP address blocks:        2600:8800:e08e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:7b:81:eb:c8:37:7f:02:d0:1e:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:49:44 2025 GMT
            Not After : Sep 17 14:49:44 2025 GMT
        Subject: CN=0de41fe0-192f-478b-a030-aa16f2873735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:82:b4:e7:c6:fc:bd:ce:1e:cb:ab:1e:00:
                    05:de:ad:bd:90:4d:a0:61:81:73:c1:28:4b:03:af:
                    1d:8d:ae:fb:f6:50:d8:f3:b1:4b:98:fd:1e:63:13:
                    03:57:2f:d2:e9:02:52:a9:c8:1d:ff:29:7c:63:0f:
                    eb:62:3f:ab:b3:58:4c:30:e8:1b:71:9e:6a:db:65:
                    65:82:6f:db:40:a7:8e:ac:67:34:80:70:af:bf:78:
                    18:a5:11:5d:65:9b:79:f3:fa:15:76:4e:99:94:21:
                    06:a3:4c:c4:6b:d1:4e:bd:48:7a:5e:4e:e5:4e:0a:
                    c5:92:ef:5b:60:c9:c7:d7:89:08:2a:3e:4b:b6:57:
                    83:c1:8f:34:b3:38:be:96:14:46:b1:6f:17:ee:21:
                    d9:8a:4a:6e:a3:56:87:f7:e2:a1:7e:8f:da:c4:7f:
                    9e:5d:37:cc:07:5f:cd:9f:0f:b4:d4:f6:7b:20:bf:
                    08:f3:87:b4:13:4c:45:02:2a:05:ce:8f:8a:4f:6d:
                    0a:a4:08:7f:a9:02:82:09:b8:39:7a:79:83:69:dc:
                    d2:76:51:a5:99:71:44:a9:02:e2:a6:99:83:79:5c:
                    a2:08:82:db:27:1c:b2:1b:1e:45:ee:cf:68:e4:e9:
                    46:f5:13:06:d1:bd:b3:3a:4b:16:ab:12:fe:96:b1:
                    ed:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8E:CF:58:62:2C:11:BB:32:C1:E0:7D:6B:72:23:6A:26:9A:ED:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3d616b8-9cac-3ba7-9d42-139eb39935a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:e08e::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:9f:69:bf:1b:33:e6:ae:de:f3:ed:10:ba:28:f1:74:bf:76:
         b1:b7:1e:35:ae:6a:25:5c:ea:d1:7b:e1:50:55:05:ed:93:e2:
         cf:ed:96:55:f4:7a:67:2f:9d:0c:af:45:d8:28:d2:45:2b:73:
         fe:45:e6:d6:ef:11:f9:b2:dc:43:87:ab:de:10:98:de:6b:43:
         02:e6:d2:c0:b8:9a:d9:03:3b:cd:23:64:ef:c0:89:68:1a:dc:
         74:ca:c7:76:f3:d2:70:39:7c:33:9e:cb:01:ef:6d:26:7d:3b:
         bd:a1:2c:8c:89:8d:df:19:66:68:4d:90:23:0a:35:8f:c9:28:
         ae:95:5f:91:f3:fd:20:c0:d7:77:82:cd:2b:05:cd:60:13:66:
         1a:e2:b4:82:b3:8a:93:c0:32:af:fa:d4:12:29:6f:aa:f6:2b:
         d6:8b:84:9c:54:a5:20:76:13:28:16:ac:cb:a7:68:98:70:a8:
         2a:70:65:72:19:c7:07:b7:05:5d:a3:06:08:1c:7f:19:db:99:
         4b:e3:c2:a0:09:d0:3d:4b:58:8c:bb:f1:e4:06:8b:b6:11:85:
         d6:4e:43:a2:e4:89:ff:9d:86:96:e7:e0:4e:c6:7c:ea:3d:78:
         77:e4:85:7c:1a:56:b2:c6:1b:44:a9:3d:a0:1a:9c:e1:51:5a:
         35:ef:3d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:49:59 2025 by rpki-client