Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aee4f61c-f8f8-3ff3-ac94-5a06d838a71c.roa
File:                     aee4f61c-f8f8-3ff3-ac94-5a06d838a71c.roa (raw, json)
Hash identifier:          4XVOvqDA+7MWjYqK1yelacyXxjRDh3s9D47BOSAYxh4=
Subject key identifier:   38:8F:4C:09:1D:5F:00:89:52:68:19:26:A0:D2:32:29:0D:9D:08:83
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584BAD6286E6517428237EEA00C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aee4f61c-f8f8-3ff3-ac94-5a06d838a71c.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     22773
IP address blocks:        2600:880a:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:86:e6:51:74:28:23:7e:ea:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=6b78bf60-f154-4336-909a-34aff65d288c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:1a:4d:ac:e9:66:3c:6c:c3:86:8e:e3:c4:
                    fa:80:3f:10:03:51:e6:2d:28:7c:af:40:8a:df:91:
                    5b:80:50:a9:bd:0c:90:5a:f9:4c:e3:29:3b:ce:5c:
                    d4:04:cd:f7:40:30:91:aa:e5:8c:18:07:22:d7:40:
                    91:7d:ec:56:84:6b:a7:2e:92:71:10:89:c0:6c:f8:
                    2b:c8:70:47:6f:d6:68:0b:57:d1:69:44:93:42:d2:
                    0a:0a:24:60:1a:d8:ee:af:74:80:c5:54:b2:65:74:
                    50:22:f9:2e:71:ad:bc:8d:df:69:f4:a6:c0:90:e3:
                    fc:d8:76:4b:d0:67:79:bd:9b:45:40:c9:ee:53:f9:
                    8b:03:76:60:ee:33:5e:15:d0:ab:11:d9:47:93:9e:
                    4f:ea:d1:40:0a:bf:82:a0:cc:52:c7:13:34:b0:ad:
                    6b:bc:f7:1b:ed:81:af:80:b9:75:09:21:c8:c3:8e:
                    c4:85:ca:d8:89:d0:3e:39:5d:07:cb:a1:ec:8d:99:
                    8d:d4:2c:dd:36:65:99:ae:c4:20:93:89:51:9e:44:
                    44:b9:f5:2d:3e:44:ef:e9:0b:eb:53:3a:2c:17:ae:
                    9f:f8:21:46:02:c5:f1:d0:0c:6c:10:5e:a8:fb:b9:
                    22:54:09:2c:af:cb:05:e1:16:8b:6c:f8:9d:c3:27:
                    92:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8F:4C:09:1D:5F:00:89:52:68:19:26:A0:D2:32:29:0D:9D:08:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aee4f61c-f8f8-3ff3-ac94-5a06d838a71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:cb:1a:4e:c3:42:d5:d3:d4:eb:ba:6b:71:22:89:61:84:0f:
         74:52:c6:bb:d3:45:cd:96:94:37:e3:c6:ad:3f:67:af:66:43:
         94:0d:ab:14:23:e6:35:ac:e7:4d:cf:e7:23:6b:27:f1:52:62:
         58:7d:b4:2f:0c:32:1f:11:23:70:5d:2e:f0:f0:99:36:70:46:
         9a:0d:5e:05:9b:a8:42:10:53:c4:f6:10:7e:c4:03:f0:21:c5:
         72:f8:2f:aa:51:f3:f5:93:49:e3:bc:6c:f1:07:93:30:88:74:
         5f:43:10:68:b0:8c:08:e2:0c:87:ba:19:76:99:2c:05:e3:84:
         5c:c2:db:d2:ff:23:17:db:1f:11:f3:c0:5d:0e:9a:d1:40:83:
         ea:53:1c:a0:90:bf:24:cd:5b:c2:c6:26:83:eb:68:f3:59:fa:
         9f:31:ac:05:01:aa:50:c6:55:16:09:88:4a:20:8b:d5:5b:58:
         34:97:01:00:9a:67:44:4f:0b:9f:46:2f:1f:15:1d:12:ce:fa:
         b0:c0:ad:7f:c5:18:3a:44:1e:37:f6:99:81:f8:ec:ad:f1:a4:
         93:70:9f:e3:6d:5d:bb:98:a8:b2:4a:5b:97:a4:a9:9d:d5:d0:
         3d:f5:3e:66:2b:22:e2:5d:d8:37:6e:10:1f:9c:46:53:14:10:
         80:32:f5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:09:02 2025 by rpki-client