Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f92d52cc-b1f3-30e7-b2f9-8209d6eae7e2.roa
File:                     f92d52cc-b1f3-30e7-b2f9-8209d6eae7e2.roa (raw, json)
Hash identifier:          gXF46KCj5o0udnmeT7s2dBbPxof97Z0PlwCMEFtqvsc=
Subject key identifier:   60:89:3C:BC:3F:9F:E7:BF:E4:2D:0F:8C:4C:BF:92:5F:D4:90:71:6A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E7ABC8FF2062EEE012CB220
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f92d52cc-b1f3-30e7-b2f9-8209d6eae7e2.roa
Signing time:             Thu 19 Jun 2025 14:48:11 +0000
ROA not before:           Thu 19 Jun 2025 14:48:11 +0000
ROA not after:            Wed 17 Sep 2025 14:48:11 +0000
asID:                     22773
IP address blocks:        2600:8800:8e16::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:7a:bc:8f:f2:06:2e:ee:01:2c:b2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:48:11 2025 GMT
            Not After : Sep 17 14:48:11 2025 GMT
        Subject: CN=306c134b-aa0a-49f7-bfa0-f204b7365bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f6:09:1d:01:96:86:ac:1e:3a:1d:d1:43:1f:
                    9b:01:57:92:48:6a:2b:ae:75:3a:a3:66:ef:fc:b5:
                    be:7a:f3:1b:77:2f:ee:bf:01:b6:e2:1e:12:7d:66:
                    d7:b2:d0:37:c4:e7:a1:fb:7a:fa:0b:be:66:a1:40:
                    ef:59:dd:23:76:cb:67:6f:68:52:fb:80:44:c2:dd:
                    da:ff:62:28:b3:53:a5:21:88:42:19:c4:57:7c:d5:
                    aa:b4:85:7d:84:28:3d:02:1f:71:9b:50:72:4a:4f:
                    de:9f:a4:06:a4:6b:81:92:44:bb:98:e0:5d:0f:e2:
                    3d:0f:12:f8:08:9e:f0:40:07:a9:47:6b:e8:d4:c9:
                    95:0d:77:e8:c2:f7:06:d5:d3:d9:65:1b:8c:7f:78:
                    95:39:9e:bd:90:7a:a2:a6:3c:8e:b2:91:38:02:bd:
                    05:83:48:9a:84:91:b1:b8:c4:1e:a5:73:13:61:3d:
                    20:28:11:c4:8f:e1:2d:36:24:95:1b:e2:83:67:f9:
                    b9:12:62:ca:f8:8d:97:86:5e:2a:2e:a5:18:53:a7:
                    d5:52:2e:d5:1a:b6:cb:96:48:f8:1a:29:5e:8a:23:
                    6c:f8:b9:71:f0:a3:6c:0c:49:b1:ee:e5:73:41:41:
                    8b:6d:b4:bf:c3:ef:2b:2a:e5:d4:fd:fa:30:0b:13:
                    dc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:89:3C:BC:3F:9F:E7:BF:E4:2D:0F:8C:4C:BF:92:5F:D4:90:71:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f92d52cc-b1f3-30e7-b2f9-8209d6eae7e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:8e16::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a3:e5:db:59:cb:6c:10:0f:51:0e:7e:40:3a:4b:bc:fe:d8:
         a8:92:11:2f:ec:23:ef:07:17:c9:f2:1f:17:dc:6c:53:88:33:
         a8:49:06:5f:99:4c:db:10:bc:bb:64:0a:18:d4:70:c7:d9:87:
         b2:74:fd:b3:4f:3d:94:70:64:90:48:01:a6:28:96:1a:eb:44:
         70:a9:5b:22:71:9b:2d:66:77:a0:c8:1a:20:d3:1b:d3:5b:07:
         41:2b:78:23:47:f7:31:04:c6:85:0a:b4:63:f1:d3:73:79:2e:
         62:b4:fd:f8:30:13:35:a5:b2:b0:c0:dc:ef:18:3e:5e:c5:3c:
         29:b6:fc:64:18:88:e0:b2:85:7a:43:93:7d:90:f8:32:cc:ec:
         e8:1e:19:8e:46:da:4c:3f:e8:0c:37:51:b9:87:c3:ef:14:f1:
         bf:68:f5:d9:ee:80:61:42:30:3d:e0:f8:0c:0a:97:4a:35:13:
         92:15:56:49:c1:ae:ee:6d:08:f1:1b:ef:80:01:fa:42:1e:e4:
         76:b1:f7:2d:4d:95:eb:8f:ba:76:8a:32:a8:42:5b:42:44:0d:
         ce:a7:f0:e3:8a:9b:36:e1:c6:a9:bd:93:e8:88:50:7b:89:fa:
         75:e5:d1:46:96:be:63:46:c1:85:68:7d:e8:3c:a1:a1:2b:e0:
         55:7b:03:15
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+eryP8gYu7gEssiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDYxOTE0NDgxMVoXDTI1MDkxNzE0NDgxMVowLzEtMCsGA1UEAxMk
MzA2YzEzNGItYWEwYS00OWY3LWJmYTAtZjIwNGI3MzY1YmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvYJHQGWhqweOh3RQx+bAVeSSGorrnU6o2bv
/LW+evMbdy/uvwG24h4SfWbXstA3xOeh+3r6C75moUDvWd0jdstnb2hS+4BEwt3a
/2Ios1OlIYhCGcRXfNWqtIV9hCg9Ah9xm1BySk/en6QGpGuBkkS7mOBdD+I9DxL4
CJ7wQAepR2vo1MmVDXfowvcG1dPZZRuMf3iVOZ69kHqipjyOspE4Ar0Fg0iahJGx
uMQepXMTYT0gKBHEj+EtNiSVG+KDZ/m5EmLK+I2Xhl4qLqUYU6fVUi7VGrbLlkj4
GileiiNs+Llx8KNsDEmx7uVzQUGLbbS/w+8rKuXU/fowCxPcewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGCJPLw/n+e/5C0PjEy/kl/UkHFqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjkyZDUyY2MtYjFmMy0z
MGU3LWIyZjktODIwOWQ2ZWFlN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAI4W
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHmj5dtZy2wQD1EOfkA6S7z+2KiSES/sI+8HF8nyHxfcbFOIM6hJ
Bl+ZTNsQvLtkChjUcMfZh7J0/bNPPZRwZJBIAaYolhrrRHCpWyJxmy1md6DIGiDT
G9NbB0EreCNH9zEExoUKtGPx03N5LmK0/fgwEzWlsrDA3O8YPl7FPCm2/GQYiOCy
hXpDk32Q+DLM7OgeGY5G2kw/6Aw3UbmHw+8U8b9o9dnugGFCMD3g+AwKl0o1E5IV
VknBru5tCPEb74AB+kIe5Hax9y1NleuPunaKMqhCW0JEDc6n8OOKmzbhxqm9k+iI
UHuJ+nXl0UaWvmNGwYVofeg8oaEr4FV7AxU=
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:06:27 2025 by rpki-client