Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c0a63f72-6560-3822-a024-d316498c68f7.roa
File:                     c0a63f72-6560-3822-a024-d316498c68f7.roa (raw, json)
Hash identifier:          hpggTrQSdPJBfH+9lnmNBuzwfHVbhTjAtGovpHuLL3I=
Subject key identifier:   F7:E1:EA:0B:96:E3:29:95:E0:67:11:46:CF:CD:88:64:89:C5:B5:D5
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584BAD628636B41A6CEE5F2F7900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c0a63f72-6560-3822-a024-d316498c68f7.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     22773
IP address blocks:        2001:579:e290::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:86:36:b4:1a:6c:ee:5f:2f:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=52a3f57a-2c8f-4de9-be3b-043042def655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:30:f3:c7:7d:18:81:94:e7:fa:98:e8:80:19:
                    f9:a9:51:10:8d:b4:b2:3b:ca:99:45:49:0f:65:a3:
                    f4:dd:e5:e8:3b:62:a5:e8:99:aa:66:54:44:94:75:
                    39:9e:72:d7:54:27:79:bd:32:5c:5d:b4:f8:08:f0:
                    8c:69:ff:ec:1a:ff:6f:c6:02:dc:cc:da:e2:0e:60:
                    57:e1:07:f7:8b:b7:78:1d:60:32:5e:57:d5:61:3b:
                    1b:49:4a:40:39:9f:7c:8c:63:17:e5:f1:61:b8:ce:
                    bc:62:82:15:54:ca:1e:62:d3:91:95:6f:d1:d6:53:
                    1c:de:31:4b:d2:af:6b:75:91:96:ef:da:ab:a8:a8:
                    77:42:bd:fc:e0:1f:29:e5:56:29:17:5f:9d:b2:d8:
                    e1:e3:7f:e9:90:d4:d2:e4:8f:4f:95:30:e0:37:67:
                    bb:28:5a:b0:1b:06:78:d3:da:eb:c9:bb:73:29:0a:
                    48:fe:4c:9f:cf:e9:76:27:ca:1d:a7:d4:5f:5f:6f:
                    83:c5:2d:68:c0:5a:d3:24:ed:ac:81:8d:88:76:8a:
                    cf:4d:cf:32:48:9a:87:53:53:e2:f1:dd:06:ac:54:
                    f5:74:5e:a6:bd:dd:6e:26:7e:b0:bd:ff:45:ed:3f:
                    aa:53:2f:5d:9f:8c:40:d6:86:b4:d2:b7:ed:71:89:
                    24:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E1:EA:0B:96:E3:29:95:E0:67:11:46:CF:CD:88:64:89:C5:B5:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c0a63f72-6560-3822-a024-d316498c68f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:e290::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:2d:d3:84:c3:fa:6e:0d:82:a8:29:9d:05:5e:32:ce:6b:7f:
         2d:f9:7c:a2:e4:89:c6:0f:4b:fa:13:09:24:9d:6d:4f:e1:03:
         5f:32:0b:5f:b6:e3:26:fb:13:88:c4:ad:58:b9:93:0b:4e:4c:
         ae:a4:1b:5a:d6:81:14:be:30:56:77:cb:ba:f6:01:59:29:7f:
         2d:c8:0a:48:3b:fe:a3:71:1b:b6:4e:64:c1:ef:c9:c6:c4:c6:
         f4:be:f4:b5:ea:9e:ac:d8:3c:e9:71:53:6c:95:72:61:dd:fc:
         47:1a:b7:93:78:0a:93:14:cb:cd:98:cc:4a:f0:fe:84:bd:fd:
         0b:86:99:f3:ce:66:d4:58:89:9b:36:fc:6b:04:45:f3:08:75:
         07:09:a4:14:4a:86:bb:35:2c:4e:0b:c0:06:7e:c9:db:c0:6b:
         52:e8:f7:1d:c5:aa:09:d7:9f:a2:8f:3d:5e:a9:05:8d:1e:4e:
         dd:ba:2b:ff:3c:3e:0c:f3:b8:84:92:8d:10:75:5b:b2:20:2b:
         45:22:b8:98:33:ab:5e:c9:db:13:17:48:4a:2f:b4:e4:d8:fa:
         13:dc:aa:3f:d6:08:95:b1:28:28:26:60:ca:eb:59:d1:96:30:
         71:2f:06:a6:43:ea:72:f7:21:5d:60:88:10:a6:57:2c:04:70:
         75:45:c8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:32:52 2025 by rpki-client