Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca0a9005-c0be-3a2d-859b-91a8216b11c3.roa
File:                     ca0a9005-c0be-3a2d-859b-91a8216b11c3.roa (raw, json)
Hash identifier:          XqFOjsi0Fiv3JmhHxwLD1Xdt7ph9ESmGnzKDD2sx/Nk=
Subject key identifier:   4A:A0:E8:88:03:53:A4:E4:C3:39:31:FA:C9:45:5D:B9:D6:0A:C5:34
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E7B51377A968974946F5580
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca0a9005-c0be-3a2d-859b-91a8216b11c3.roa
Signing time:             Thu 19 Jun 2025 14:49:21 +0000
ROA not before:           Thu 19 Jun 2025 14:49:21 +0000
ROA not after:            Wed 17 Sep 2025 14:49:21 +0000
asID:                     22773
IP address blocks:        2600:8800:b704::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:7b:51:37:7a:96:89:74:94:6f:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:49:21 2025 GMT
            Not After : Sep 17 14:49:21 2025 GMT
        Subject: CN=56fe35a7-1747-4465-a8ad-a7750e17cba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6a:87:d6:58:7a:45:62:3c:c9:98:7f:b4:64:
                    9b:8d:58:d7:f1:ba:1d:90:f7:3a:94:d8:c8:be:b7:
                    af:a0:58:c7:2a:e5:d4:8d:93:d0:26:02:5f:e3:3f:
                    9f:ca:4e:d1:a8:ac:df:b5:c2:8d:fd:a2:ff:6d:78:
                    ce:2f:1c:29:b0:89:cc:96:c8:8e:39:c7:42:d5:1c:
                    02:9d:a6:51:6b:0d:b4:6e:24:ee:b8:71:f8:3d:5b:
                    7b:d2:7c:86:77:45:c9:e0:de:f8:84:39:1c:4b:90:
                    6d:c8:9c:42:85:5b:95:84:e4:b8:45:5c:81:f4:3b:
                    cc:f1:84:24:c9:c4:12:a3:23:ee:e3:d4:98:36:23:
                    5b:f1:30:3a:03:d8:ab:99:d4:2a:5f:6d:b3:7d:b7:
                    c1:eb:35:dc:df:d9:dc:57:ca:18:f1:07:f1:84:2b:
                    10:6f:95:c2:35:cc:6b:1c:f1:6b:cd:34:47:60:26:
                    89:52:cc:8b:ae:ac:7b:06:93:91:3a:5d:10:15:09:
                    be:c7:4d:43:db:cf:fd:1e:81:a4:9f:7d:0b:ee:eb:
                    46:ad:78:6c:2c:07:8f:45:10:23:30:c4:e4:78:21:
                    7d:7c:fa:fd:10:3f:c9:20:85:64:88:a9:68:68:52:
                    02:89:96:60:08:b4:84:39:e9:6f:26:f5:ea:1a:38:
                    56:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A0:E8:88:03:53:A4:E4:C3:39:31:FA:C9:45:5D:B9:D6:0A:C5:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca0a9005-c0be-3a2d-859b-91a8216b11c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:b704::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:cd:4f:e0:e5:26:c8:3e:aa:30:e2:a8:0d:dc:c9:ce:fe:08:
         1d:0e:fe:45:1c:2f:c4:f0:a3:16:95:69:b0:97:45:dd:9a:94:
         07:d0:24:33:f2:9d:2c:63:17:6d:0e:c2:f6:9d:7a:46:49:a4:
         0f:91:7e:fe:04:f2:89:ee:58:00:ca:ed:1d:44:59:1e:9c:6c:
         5d:d8:ab:ef:7c:e7:83:20:e8:f4:cd:37:38:92:23:3c:c2:68:
         e8:17:2b:bd:b7:ae:d3:3c:f0:9f:80:d6:47:69:82:8f:cf:42:
         1c:18:76:0e:bf:7d:4f:dc:71:e2:73:29:b5:56:4a:8d:d6:fb:
         6f:59:7d:f5:1d:a0:c3:9b:af:c1:1d:0e:27:f3:33:7e:8b:c3:
         e8:4f:04:76:79:7a:2c:3b:4d:6f:07:28:76:a6:82:20:f6:c6:
         d3:98:cc:69:90:1f:4e:c9:5c:6c:7f:2a:78:84:8e:81:39:12:
         2b:45:c4:99:98:d5:08:3b:54:73:e2:8e:55:18:9b:26:df:45:
         55:95:49:be:23:2b:9d:c1:50:ce:d4:48:29:00:57:1a:bf:d6:
         fa:75:1d:1d:68:7e:67:cb:5a:ab:bf:fb:06:d1:38:3e:db:74:
         72:04:17:88:2e:d4:f5:96:e5:b3:ad:82:58:c3:1b:61:c3:a4:
         68:5a:81:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:34:08 2025 by rpki-client