Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d8afbf11-bf68-3ccf-8cae-b7cf0aa5320f.roa
File:                     d8afbf11-bf68-3ccf-8cae-b7cf0aa5320f.roa (raw, json)
Hash identifier:          SW63UQGS3/P3t0T78CEKq1PuvUQs9vTfvlEfE8m8k1s=
Subject key identifier:   70:21:59:0D:D1:FE:7B:C5:74:4D:9D:71:4E:F5:9A:6D:F3:71:1A:CD
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584ACCA68AD9060F3A6D4D7AC2C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d8afbf11-bf68-3ccf-8cae-b7cf0aa5320f.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        2001:579:7050::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:8a:d9:06:0f:3a:6d:4d:7a:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=6a19c6f1-357a-4645-bb08-ac8b915d2d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5d:1b:af:61:46:1f:6b:24:22:7a:29:fd:9e:
                    7c:4d:aa:43:3d:17:5e:b8:eb:45:ee:29:2a:f5:7b:
                    03:16:44:73:48:12:84:cc:36:4d:46:67:05:bf:8a:
                    53:c5:08:ef:b7:6d:72:13:4a:ab:e9:e9:73:34:6b:
                    64:2d:0d:8a:ad:ce:7f:2e:ed:0e:27:c7:6d:70:f7:
                    f2:e1:cf:65:2f:8e:fc:cb:b8:e3:14:be:b3:10:f9:
                    9c:77:a2:7c:7a:68:32:fd:b0:88:46:b7:ea:24:35:
                    d5:0e:06:51:47:87:b9:16:a9:82:6a:67:11:46:73:
                    8b:d4:30:26:6b:f7:da:44:15:d5:9a:c0:3c:a6:cd:
                    6e:82:c3:9b:a9:59:3d:70:38:da:10:02:f1:0f:59:
                    d6:36:a1:41:7e:02:94:8b:04:0e:7a:4f:ba:d8:6c:
                    d6:2e:99:7d:67:92:7e:cb:a5:80:ca:f1:d1:92:d8:
                    1c:db:04:37:ba:1d:1e:38:b7:6e:65:54:7c:9d:58:
                    b7:1c:98:a0:95:37:3e:d6:6c:ca:3c:6d:fc:b7:32:
                    92:57:7c:72:0a:59:66:e1:a4:66:2e:77:56:1f:4c:
                    14:63:45:81:a4:65:b5:7f:b9:89:5f:ab:7f:22:1f:
                    f8:1e:c0:e1:45:02:f7:01:bf:f2:6e:a5:8e:13:98:
                    f6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:21:59:0D:D1:FE:7B:C5:74:4D:9D:71:4E:F5:9A:6D:F3:71:1A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d8afbf11-bf68-3ccf-8cae-b7cf0aa5320f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:7050::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:3e:8f:f8:08:3c:83:c5:d3:dd:53:ea:7a:18:a9:53:90:72:
         67:c0:e1:aa:81:19:c2:ab:7a:a8:da:32:c5:52:2e:0c:23:02:
         4e:b8:e7:5e:50:52:d0:42:7a:40:5d:11:72:79:3a:2b:e8:06:
         99:ad:6e:59:e6:50:4e:30:ff:8c:3c:d8:bb:33:8f:83:74:79:
         85:63:19:f5:70:cc:36:00:9f:86:a3:53:14:b5:78:f0:7c:ad:
         bf:10:6d:e3:6c:e8:1b:3e:49:e0:de:94:45:88:33:5e:ff:75:
         23:01:bb:1f:ab:b3:55:cf:b3:ec:52:a9:0a:e2:45:c7:7a:b5:
         57:81:be:d3:be:bb:df:41:4b:4b:b6:15:b9:31:e8:1a:cd:bd:
         2a:16:80:83:d7:18:2a:68:c9:62:27:f8:f6:29:27:98:56:ca:
         63:ca:79:40:7e:b5:60:06:74:7a:a6:b6:23:50:0d:04:32:a6:
         57:21:1e:36:3f:91:90:60:69:46:13:2e:62:60:b9:f0:68:6f:
         85:d1:62:5b:87:e5:8c:37:fc:d1:3b:47:ec:e4:63:27:99:9d:
         0d:2e:4e:51:93:44:c4:8f:e6:0e:25:22:58:58:07:8b:1d:93:
         a8:2b:fb:83:5e:25:d7:b0:dc:99:12:9b:f7:29:1c:0d:0f:4a:
         9d:84:1b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:40:02 2025 by rpki-client