Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df7592a6-5efa-34ae-9ef2-c2bec8280364.roa
File:                     df7592a6-5efa-34ae-9ef2-c2bec8280364.roa (raw, json)
Hash identifier:          heNLJ1cTOZWnXfreIEMZTdjFQZWotG0z6bKt88aq8Q4=
Subject key identifier:   5E:95:37:5F:31:1C:EA:20:54:BC:A3:45:27:2E:F1:CE:D5:DC:A0:B2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E7A19786D01CF0CE67E3500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df7592a6-5efa-34ae-9ef2-c2bec8280364.roa
Signing time:             Thu 19 Jun 2025 14:46:54 +0000
ROA not before:           Thu 19 Jun 2025 14:46:54 +0000
ROA not after:            Wed 17 Sep 2025 14:46:54 +0000
asID:                     22773
IP address blocks:        2600:8800:5d00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:7a:19:78:6d:01:cf:0c:e6:7e:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:46:54 2025 GMT
            Not After : Sep 17 14:46:54 2025 GMT
        Subject: CN=aa030a9c-5cdb-414c-a686-af5d3b6711d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4a:f4:fd:0d:cc:cf:81:d3:0c:c7:96:1b:06:
                    9d:d5:f1:de:ef:e5:41:ad:f9:be:d0:ab:53:79:9e:
                    6b:c3:06:0a:4d:a1:9c:b3:76:e7:95:39:67:56:86:
                    67:20:b4:77:66:08:8d:b4:09:be:63:62:6d:7d:f5:
                    5f:c0:42:cd:72:03:55:e6:eb:ee:1b:23:f7:a2:5a:
                    ed:02:a3:4d:e5:be:43:58:dc:ac:43:31:54:66:d6:
                    cf:b7:1d:59:6e:8c:88:ad:24:12:4d:6d:81:78:df:
                    9e:11:7a:b5:c9:22:fc:9c:9f:82:64:21:2e:d5:2d:
                    5a:f8:be:02:28:19:c2:7e:78:69:b2:a2:58:d8:f1:
                    17:b4:46:e6:2d:c3:7a:0a:05:78:1f:03:a6:6a:97:
                    c0:35:bb:b9:e2:f6:63:f0:72:9c:8f:aa:9a:7a:ad:
                    08:fa:be:49:97:9f:da:3e:28:2b:5a:2f:b8:b3:a1:
                    74:0b:49:58:26:5b:fa:2e:21:7f:2c:58:6f:77:0d:
                    d3:0e:0e:83:5e:ad:14:12:97:57:61:9a:95:03:f1:
                    1a:77:85:07:87:16:90:84:c5:a0:18:63:47:c5:7d:
                    73:ca:5f:51:f3:ff:f2:2e:31:10:48:19:15:84:0c:
                    19:db:19:29:d1:76:7c:0b:4f:54:4b:08:e2:b5:5c:
                    ce:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:95:37:5F:31:1C:EA:20:54:BC:A3:45:27:2E:F1:CE:D5:DC:A0:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df7592a6-5efa-34ae-9ef2-c2bec8280364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:5d00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:50:6e:03:c7:73:1b:3e:27:71:d8:0e:f6:09:2d:40:61:a7:
         38:21:0b:fc:65:dc:34:93:e5:03:d2:c6:94:0e:57:96:47:25:
         77:91:6f:18:b6:86:ce:ee:a1:dd:9c:eb:cf:bb:61:19:cd:8d:
         6c:e7:74:15:3b:bd:65:f0:bd:e3:13:cb:45:47:d7:83:33:44:
         57:31:f5:6d:11:e2:3f:b3:d2:c6:49:9a:6a:90:3c:2e:2f:40:
         18:fb:c6:a3:64:4c:f0:de:34:92:9f:84:89:d9:01:98:dc:5e:
         40:91:4e:b6:2a:0b:40:59:ba:ef:63:2f:dd:92:2c:c8:c5:a8:
         d4:db:29:7f:08:83:3a:4c:f2:07:a4:5a:42:9a:23:9e:c1:8b:
         59:42:8d:3e:b7:b1:7e:c6:7e:0f:c4:18:18:fc:56:93:d8:af:
         a6:9e:ef:5f:6f:cd:4d:f1:06:3c:12:0b:34:f6:46:75:02:49:
         8e:be:65:c2:33:62:55:5a:e2:02:f3:58:28:1c:42:4d:6c:34:
         db:e6:65:83:32:d9:bb:a7:46:24:9b:89:5d:5e:16:53:50:e0:
         ab:5e:3c:ab:3d:86:cf:21:ea:ce:2b:ac:3f:a1:2b:28:c9:db:
         35:9b:7f:f2:ad:fe:eb:2a:d8:42:00:51:e7:a7:bd:b0:28:8d:
         4e:6c:d5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:09:58 2025 by rpki-client