Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/604fe3bf-1a7a-3dee-bd49-459caecc2dce.roa
File:                     604fe3bf-1a7a-3dee-bd49-459caecc2dce.roa (raw, json)
Hash identifier:          bgVRG3b7hXgUp4i8u35Z2CFEuK2cejR8+WDjOBaG5zk=
Subject key identifier:   A8:D4:A4:5C:6C:E7:EC:2C:3D:ED:0E:42:CD:60:44:E8:9B:DE:FB:22
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584BAD6257751C1BD73E76962E80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/604fe3bf-1a7a-3dee-bd49-459caecc2dce.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     22773
IP address blocks:        2001:579:93c6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:57:75:1c:1b:d7:3e:76:96:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=2912cec4-537b-4487-bb62-d40bad877fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:05:88:8a:40:9d:96:60:df:10:34:49:c7:
                    4f:b6:25:47:c9:97:bb:26:07:70:0c:96:41:6f:ad:
                    d1:c0:2e:e7:99:64:97:89:8f:6d:d5:7f:4b:c3:10:
                    50:41:77:cd:52:20:fd:cf:7c:bc:d5:3c:64:cb:4a:
                    ae:01:8f:d9:3c:32:07:24:db:fc:ac:98:ba:2c:d0:
                    d5:ce:f3:11:23:db:5f:cd:b0:24:57:e8:d3:cc:d7:
                    87:20:f5:40:a2:35:c0:97:1c:f6:82:ed:69:1c:ef:
                    bd:03:3b:1f:30:d2:76:03:b4:e9:dd:66:e4:54:c7:
                    87:e9:23:c2:cb:57:f2:7f:e6:41:9d:4d:04:b7:ef:
                    97:95:87:d3:0c:ec:d7:ff:15:98:eb:eb:f9:6d:d7:
                    9e:e4:96:92:99:65:63:82:50:72:2f:fd:a7:80:af:
                    9d:38:e9:a7:5e:b1:e1:1e:3f:4d:13:b2:11:cd:a0:
                    07:13:28:13:4f:dd:a5:88:48:6e:fd:75:3b:ae:b4:
                    2f:32:3f:af:48:0b:eb:e9:d8:3f:b6:53:46:e0:3b:
                    30:be:4d:4a:3e:3b:6a:ff:f2:82:f5:69:0f:f2:83:
                    ae:09:ea:c9:5a:f5:4a:e7:0e:89:ae:6e:d7:53:e7:
                    5d:dd:0c:8e:93:65:aa:a9:1b:22:e7:2a:98:96:bb:
                    b6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D4:A4:5C:6C:E7:EC:2C:3D:ED:0E:42:CD:60:44:E8:9B:DE:FB:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/604fe3bf-1a7a-3dee-bd49-459caecc2dce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:93c6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:7c:ec:f6:e0:d2:cf:f2:ad:4d:31:43:ef:41:41:d3:64:b2:
         b5:01:df:60:79:13:56:11:81:d7:e9:ba:af:a5:e1:f4:5a:b3:
         53:75:77:d4:79:2b:8a:9e:d2:e4:a8:03:c0:9b:28:ca:48:af:
         04:e7:66:dd:90:39:76:4f:6f:76:3f:95:a2:69:36:42:ac:c1:
         c5:a8:fe:69:db:5e:4a:19:d2:b9:91:29:88:94:21:c7:bd:7a:
         8c:49:32:4c:1f:e9:20:b1:2e:36:39:80:57:14:3c:52:df:e0:
         01:e1:64:6f:58:19:aa:79:ca:82:1e:1b:a9:6e:c9:7a:56:11:
         82:5c:6c:7a:f3:8c:49:b1:c1:ad:03:45:07:10:4b:0b:03:48:
         f0:c5:de:6f:43:1a:1f:f6:7e:cd:1c:f9:42:c3:8d:de:40:04:
         2a:bb:c5:8c:c0:fa:30:6c:92:81:b5:c9:36:80:f4:b6:66:64:
         c4:15:05:dd:b7:e3:62:5f:ab:b6:75:d3:fe:a7:02:b6:03:8c:
         f5:f6:a4:fc:b4:7d:96:1b:cc:d3:8f:62:87:11:9a:b4:04:69:
         04:fa:ef:aa:4a:94:85:77:f9:f9:c5:4a:0f:af:d2:cd:2e:4d:
         08:e6:cd:0a:2c:3f:aa:01:6c:58:70:1b:37:ec:0e:16:01:09:
         0a:b2:c3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:10:48 2025 by rpki-client