Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9318009-f1ec-3c55-8fc3-845ffa5eb3e7.roa
File:                     d9318009-f1ec-3c55-8fc3-845ffa5eb3e7.roa (raw, json)
Hash identifier:          2jTng/m8G5azrg9uOdXhiVv+lmV6Ne+1oDbx74hizY8=
Subject key identifier:   F1:DF:D7:B6:85:6E:3A:AA:AC:B5:4A:C9:E4:C0:F6:8E:AD:88:DF:77
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584ACCA65BBA2FFE88CB85688040
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9318009-f1ec-3c55-8fc3-845ffa5eb3e7.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        2001:579:412c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:5b:ba:2f:fe:88:cb:85:68:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=72e7033a-f2e8-472a-9fec-99ed8ef71e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d2:4c:0a:30:6a:93:79:43:93:0f:8d:20:4d:
                    92:1f:19:e9:55:68:b4:52:d2:e4:fe:c1:8e:ca:48:
                    78:2a:bf:5f:84:8c:db:ed:8c:ea:09:40:6d:2c:a0:
                    15:da:92:53:cf:0a:e4:9c:d0:65:88:cb:e6:6e:55:
                    f5:e6:06:eb:27:3e:02:af:2d:ed:bf:17:d4:d7:c8:
                    6f:bb:37:63:a5:70:52:7c:c5:8e:cf:26:66:13:bb:
                    17:94:13:ec:04:d7:6d:ff:52:9a:79:22:f3:3d:b9:
                    89:56:1d:f0:6d:22:70:46:01:4c:5d:79:44:fa:eb:
                    aa:f8:0f:39:68:0d:48:85:76:63:40:0f:73:3e:c1:
                    1e:72:02:81:78:1a:16:a0:54:f3:0b:ac:80:32:c3:
                    fc:84:2d:aa:ee:0c:c4:b6:50:7a:a9:99:62:82:1d:
                    5d:34:31:27:44:47:ba:19:9e:4f:04:7e:b4:6a:80:
                    fa:e9:6d:76:25:06:be:2c:b7:64:b0:a8:78:86:8f:
                    88:05:c8:62:61:88:da:d6:cf:5c:93:15:cd:c0:d3:
                    70:c2:07:3b:c2:81:1a:3a:30:3f:54:35:f4:22:ca:
                    db:c2:cd:b0:0d:c7:80:64:04:50:ea:03:c7:0a:d4:
                    50:2f:ca:6a:f8:37:17:be:b3:bd:09:2f:74:c3:3c:
                    b7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DF:D7:B6:85:6E:3A:AA:AC:B5:4A:C9:E4:C0:F6:8E:AD:88:DF:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9318009-f1ec-3c55-8fc3-845ffa5eb3e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:412c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e7:71:bb:a8:42:ad:e7:31:6d:e7:66:39:a5:2a:cd:d0:7d:
         d8:fe:ee:7f:21:eb:e9:30:ff:31:68:db:8b:78:89:75:3d:05:
         31:eb:f1:d1:3a:74:94:28:f5:26:74:e6:62:e3:c0:22:35:f0:
         df:23:9d:90:3c:ef:64:aa:5b:9d:cb:18:4c:4d:e5:50:a6:53:
         dc:fd:ac:5d:b6:f7:13:5d:6c:bd:a1:cb:10:fd:d2:f1:f0:ea:
         ef:4c:d8:54:95:3a:b3:9b:92:04:27:6b:5c:e3:da:c9:53:1e:
         56:fd:df:f2:5a:0d:7a:12:f3:9a:70:f6:5a:35:49:6c:35:c6:
         6a:92:81:9c:59:83:5a:b1:c9:24:bd:d6:91:03:16:e3:8a:c8:
         13:71:1e:53:92:2f:ea:43:85:30:0a:8e:01:23:d5:5c:7a:b9:
         08:d5:b7:2b:3a:19:c8:41:b0:5a:fd:5e:8a:db:41:a3:ca:04:
         1c:fb:cd:19:47:05:5c:73:0b:98:ed:3d:5b:ff:8f:bc:5f:c6:
         46:0b:90:d2:a8:e5:97:2c:5d:57:a6:49:18:c5:ee:79:33:0e:
         c2:6d:48:ba:d8:80:23:a0:7c:a6:20:2f:8b:4e:5f:f3:27:01:
         38:2a:90:08:7f:c5:b4:6f:82:d1:54:58:36:3d:a9:70:60:7c:
         ca:7c:ca:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:16 2025 by rpki-client