Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa45168d-7605-344e-84e3-4065f7c96495.roa
File:                     fa45168d-7605-344e-84e3-4065f7c96495.roa (raw, json)
Hash identifier:          IffVxML52MZqfDzI4brB86Jy83FEhzVpQdxFwGNQg/8=
Subject key identifier:   92:4F:CD:4A:78:8C:D1:91:4E:86:E9:A9:6B:20:2A:82:B9:E1:A2:E2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E7A9ADFA8B652F49B5974A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa45168d-7605-344e-84e3-4065f7c96495.roa
Signing time:             Thu 19 Jun 2025 14:47:55 +0000
ROA not before:           Thu 19 Jun 2025 14:47:55 +0000
ROA not after:            Wed 17 Sep 2025 14:47:55 +0000
asID:                     22773
IP address blocks:        2600:8800:86bc::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:7a:9a:df:a8:b6:52:f4:9b:59:74:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:47:55 2025 GMT
            Not After : Sep 17 14:47:55 2025 GMT
        Subject: CN=fe3445bc-d0ab-4cf0-84dd-e1526da67e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:20:a5:4c:fb:79:d9:34:19:a9:8e:31:9b:
                    6f:7f:b1:ef:7e:f1:f8:06:fb:6a:82:e4:08:38:70:
                    3d:56:50:78:27:a7:ec:ce:6b:4f:51:41:b1:92:e1:
                    18:fd:1a:b4:36:0c:b2:63:7a:b6:a6:17:2e:eb:19:
                    11:13:8f:4b:12:ff:f2:c4:6c:1f:fd:e0:82:29:53:
                    9a:16:e0:24:7a:26:0c:b6:4d:a7:fd:56:85:0d:e4:
                    ea:56:9a:20:57:d5:e6:54:2c:99:98:c1:62:a1:f7:
                    be:ef:3b:3b:73:59:19:05:a7:b7:7f:6a:f3:44:59:
                    23:82:14:ce:97:51:7b:77:90:5d:a5:cd:9d:0f:ef:
                    92:e8:fc:69:60:62:f7:10:72:51:21:57:f2:bb:2b:
                    11:48:a5:2e:05:d7:69:3a:89:11:45:36:a4:c9:dd:
                    12:70:b8:84:ed:1a:40:70:6a:f8:91:2d:1d:dc:19:
                    92:c6:c7:1c:b9:2d:18:00:b7:d1:85:20:fc:e8:06:
                    41:7a:48:ae:51:e7:01:c0:3f:98:d8:54:3f:7b:88:
                    5f:8c:0f:ca:5c:3e:ec:07:6b:7c:e9:68:1b:4d:86:
                    1e:89:66:59:9d:51:27:9c:ef:2b:a9:78:6e:84:51:
                    6c:59:ca:ad:ad:d7:76:b7:b3:6e:7f:c1:f0:46:3a:
                    49:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4F:CD:4A:78:8C:D1:91:4E:86:E9:A9:6B:20:2A:82:B9:E1:A2:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa45168d-7605-344e-84e3-4065f7c96495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:86bc::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:31:9f:16:52:d3:09:2e:6b:ab:30:c9:8c:97:32:7f:b2:e4:
         c4:98:c7:db:95:ab:89:b2:a5:8e:db:58:c4:4f:c8:6f:2f:3a:
         e4:40:31:e6:4e:f4:6a:50:4e:96:da:62:54:26:0a:23:13:ca:
         38:71:46:fb:65:9a:e8:19:02:54:35:5d:bf:c2:18:7d:cc:c8:
         54:ce:5e:0d:4c:c8:2f:ab:ad:b5:46:3e:61:9e:40:51:85:bb:
         fc:59:e0:3f:d6:a8:c5:09:2e:2e:76:43:73:f8:b8:e0:c8:ba:
         bc:11:0a:d1:bc:45:60:1a:03:9b:9b:5e:8c:07:59:e3:8d:a3:
         f0:5f:a1:10:e1:f4:4b:81:eb:6d:40:3e:aa:02:81:f4:d1:3a:
         f8:d4:16:b0:5c:c9:7d:7b:2f:a5:97:36:9c:b7:19:9b:ca:c4:
         a0:67:f0:08:21:bb:b0:b2:ff:6d:7c:0c:a5:7b:93:b1:be:89:
         e7:c3:93:6f:f4:1a:b4:24:d1:e6:19:1f:43:87:52:e9:62:97:
         82:7e:70:d5:67:71:c2:cf:78:37:65:d2:b1:f2:51:3c:55:01:
         68:47:3e:f7:da:3e:5a:ab:35:da:8a:48:35:b3:4c:0b:a3:45:
         5a:65:a2:33:22:af:b5:a0:7c:d2:78:6c:53:06:10:c2:04:b7:
         76:a3:d2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:52:49 2025 by rpki-client