Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/551db109-1393-38a4-b53d-5c0350291fe7.roa
File:                     551db109-1393-38a4-b53d-5c0350291fe7.roa (raw, json)
Hash identifier:          KgiWwW0pLY7GpGrOlLvmwec2A923yTjLd7uMf8yohVw=
Subject key identifier:   2C:7B:76:03:39:7A:ED:CB:4F:1F:D7:A0:80:0A:E6:A6:11:29:C0:2A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584ACCA65C74A70BE36AC55ABAE0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/551db109-1393-38a4-b53d-5c0350291fe7.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        2001:579:524c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:5c:74:a7:0b:e3:6a:c5:5a:ba:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=181700df-80bb-4c2b-8fdb-bd12148a9291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7e:ca:be:22:41:1a:f3:17:20:31:10:a4:e0:
                    bc:35:f8:c0:56:1b:7e:21:b8:4c:4a:d9:3e:ac:47:
                    35:3a:ef:e4:d6:ba:a9:6a:19:5e:d0:57:fb:d7:e5:
                    4b:da:c7:78:30:6e:42:a2:6a:b1:98:a2:44:3f:08:
                    14:d1:75:64:2b:4f:96:a7:07:81:e0:d5:7a:79:2f:
                    64:1d:b3:86:ef:1c:df:03:04:77:ec:e3:8b:9f:64:
                    99:dd:bf:42:61:b4:ff:00:54:5d:b0:32:ff:63:65:
                    2b:1d:95:b5:fa:fa:fb:68:ab:f8:19:dc:82:eb:cf:
                    7c:45:61:34:60:44:16:59:bf:1c:42:63:c9:21:46:
                    dd:47:26:82:3e:51:8d:d8:58:19:45:bc:38:0e:6b:
                    a1:19:71:df:da:bf:75:3f:65:e4:55:2f:ec:39:3a:
                    3a:24:78:a7:c0:61:64:78:92:1b:02:18:a5:6a:7d:
                    6e:62:af:ff:01:e9:19:bc:49:ab:10:d6:19:7a:94:
                    36:9a:f2:f3:e5:b3:1e:1f:fb:f2:da:d7:08:c0:e9:
                    f7:d7:45:e2:60:b8:33:3c:09:ef:97:84:aa:7f:dc:
                    58:ff:45:39:4b:b3:37:35:a5:13:47:39:d0:3e:db:
                    ba:5b:5f:d5:e8:29:5c:98:82:d1:83:62:43:c7:85:
                    60:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7B:76:03:39:7A:ED:CB:4F:1F:D7:A0:80:0A:E6:A6:11:29:C0:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/551db109-1393-38a4-b53d-5c0350291fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:524c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:6a:f2:c0:35:0b:9e:0c:af:aa:07:d5:7b:07:a9:21:07:bd:
         3a:61:8d:ce:83:21:ba:f2:a0:aa:83:6b:aa:2b:6d:a2:e5:7d:
         12:c8:0d:63:31:5b:61:c9:2a:a4:8b:05:ad:fc:7b:1b:8c:45:
         7b:a4:53:fb:c3:1e:78:d5:73:17:db:37:12:01:13:47:29:f9:
         5e:48:6f:b0:90:f8:e7:42:da:1c:97:79:30:6e:d0:1c:1c:fc:
         d9:4b:38:36:82:5b:21:11:33:07:cc:00:ef:b9:55:6d:45:59:
         18:f3:90:10:55:fa:68:1c:81:33:75:e3:3d:66:7e:de:74:0a:
         d5:3c:37:14:c4:22:54:bb:ae:9d:21:61:2c:c9:d3:1e:04:af:
         fb:e8:3d:3b:27:26:09:76:16:11:2e:db:4c:5e:0f:16:06:9d:
         f9:c5:24:f2:95:c4:f5:65:d4:56:87:f3:87:fe:8e:76:9f:91:
         17:71:69:a7:a6:7e:29:e6:16:3d:d7:99:d2:cf:61:a1:fa:af:
         76:bb:07:fb:50:eb:91:e0:d5:84:5f:ce:2c:c4:c0:a1:42:07:
         1f:19:b2:f8:4f:a9:b7:3e:32:d9:d7:f7:bf:b1:b9:dc:cf:b0:
         3e:e7:67:3d:f7:2b:62:c1:6f:51:37:9d:08:7d:bc:e7:6f:e0:
         3a:ce:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:14:13 2025 by rpki-client