Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1a17c7c-6a53-3972-9c07-2536f96d49cf.roa
File:                     d1a17c7c-6a53-3972-9c07-2536f96d49cf.roa (raw, json)
Hash identifier:          Q663GjKkjKZ7CkJKFmh8nAp4iF9pjZ4X27cj9ALCQZw=
Subject key identifier:   48:1D:8D:2C:47:FA:CD:36:9F:56:81:15:69:1E:2A:27:6B:AC:E4:AB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E7A6E5B1201909D23200E40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1a17c7c-6a53-3972-9c07-2536f96d49cf.roa
Signing time:             Thu 19 Jun 2025 14:47:34 +0000
ROA not before:           Thu 19 Jun 2025 14:47:34 +0000
ROA not after:            Wed 17 Sep 2025 14:47:34 +0000
asID:                     22773
IP address blocks:        2600:8800:7f9a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:7a:6e:5b:12:01:90:9d:23:20:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:47:34 2025 GMT
            Not After : Sep 17 14:47:34 2025 GMT
        Subject: CN=40578532-a6f9-4bc6-838e-15c697d91236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:c6:46:00:44:82:06:53:9a:2f:67:4a:ab:
                    45:f3:5d:2d:f0:89:14:b3:66:80:5d:4d:18:ce:34:
                    b6:c0:95:4f:f0:4d:a6:1d:b9:cd:55:63:06:f5:dd:
                    13:d5:0b:31:f1:d5:b5:8c:3f:b2:d7:63:f0:7b:ac:
                    78:71:e5:4b:1a:0c:ac:de:1d:35:47:05:25:af:11:
                    ba:f9:93:29:0c:c7:cd:6d:5f:b4:f2:2c:69:16:8a:
                    77:a9:8e:f7:d5:c7:0c:4b:54:3a:20:9d:77:8e:df:
                    f0:cd:28:ef:4f:e6:a6:51:29:25:f0:c2:62:5d:c8:
                    b6:d7:57:3b:95:dc:62:c6:71:26:3f:11:bb:c3:91:
                    f4:28:f0:b1:aa:e3:c9:73:fb:e7:b9:e4:44:1c:f6:
                    a1:1f:06:d8:a0:76:46:d2:b1:3c:97:82:6c:00:b4:
                    8d:38:3e:1f:33:f5:b2:c2:35:53:81:d5:d5:48:55:
                    a3:22:14:89:97:61:6f:ac:8f:53:54:55:d8:46:7d:
                    6d:db:ae:5b:d7:22:3b:11:9e:a6:b3:2d:f0:14:60:
                    25:b8:ff:bf:f4:cc:8b:76:2f:71:67:e9:41:a6:8b:
                    e0:b8:db:4b:ac:6a:61:67:2e:a3:f8:78:57:07:16:
                    76:e8:fa:71:e9:ef:86:78:0d:4c:41:4b:57:80:4c:
                    41:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1D:8D:2C:47:FA:CD:36:9F:56:81:15:69:1E:2A:27:6B:AC:E4:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1a17c7c-6a53-3972-9c07-2536f96d49cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:7f9a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ce:9e:d1:46:0c:95:e8:1f:69:2c:60:23:cc:57:bf:1e:dc:
         dc:04:c5:ba:68:f7:c5:8d:89:7d:e6:25:16:73:c7:53:90:c0:
         be:b9:bc:08:67:24:2f:69:f2:34:0f:b9:ed:fb:aa:4b:30:db:
         9f:82:90:4c:44:bb:b0:5e:b6:0a:05:ad:d4:38:bb:4b:9a:68:
         4b:37:80:4d:ea:a1:87:88:0e:eb:bb:a1:7b:04:4f:6f:73:0b:
         03:c8:36:3c:af:eb:d4:53:70:97:15:a4:1c:21:a7:62:df:61:
         e5:96:9f:9b:12:07:87:b3:d7:77:81:12:5a:42:eb:85:62:d0:
         56:70:c8:b6:eb:02:ec:e4:75:fb:d0:53:ac:f8:86:e5:61:57:
         a1:40:d7:1e:a5:41:b9:04:3d:05:cf:49:14:ae:d2:d9:2e:56:
         df:1d:ca:3c:0d:4c:e6:67:65:e9:83:56:da:ca:28:48:4b:4f:
         fa:12:28:60:07:50:4a:1b:46:1e:e2:f2:50:f0:2f:04:16:af:
         47:91:eb:75:f8:b9:f3:f1:75:a4:96:80:61:fc:f0:90:58:21:
         48:7a:17:33:d9:84:f8:fe:7d:f4:6d:5d:44:e7:5e:ef:8b:20:
         04:8e:39:f2:48:d7:22:9d:b5:9f:32:83:43:50:47:3e:f2:aa:
         d0:87:9f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:09:43 2025 by rpki-client