Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e32e81b4-c2a3-3931-ae9b-64260737fd0a.roa
File:                     e32e81b4-c2a3-3931-ae9b-64260737fd0a.roa (raw, json)
Hash identifier:          HSG2qERhLI7WnQTo8vrYwe/TlZqaqokobwulSkboQko=
Subject key identifier:   FD:75:A8:B2:69:FC:FB:09:93:15:C2:61:93:94:2A:B6:23:4E:9C:48
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584BAD6286D83F7DBF522DF0B880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e32e81b4-c2a3-3931-ae9b-64260737fd0a.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     22773
IP address blocks:        2600:8809:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:86:d8:3f:7d:bf:52:2d:f0:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=7ac15a1c-f617-48d4-a2fe-b72a78a58e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:98:c8:b4:bd:56:f4:44:bb:1a:ee:3e:58:
                    5d:19:25:7d:41:eb:20:29:ba:67:d2:bc:56:27:11:
                    80:ad:04:00:8b:90:b5:7d:0d:85:62:87:3f:85:55:
                    5c:ab:c7:a0:a6:a3:c3:1e:ad:13:4a:44:ea:d3:d5:
                    b0:f3:8d:09:66:24:08:df:c9:bb:e3:a9:05:ef:94:
                    93:5d:08:44:4a:fa:b4:1e:86:76:10:bb:09:50:44:
                    22:1c:53:18:69:d7:60:31:a2:77:e4:9f:4b:32:4f:
                    2c:2c:2a:37:36:41:51:d7:93:ae:7b:d9:e8:0e:d2:
                    fd:5e:44:6e:3e:7e:c3:88:34:69:63:3e:ec:9e:f3:
                    f2:11:a6:98:77:9c:5c:3b:38:1e:e6:8c:4b:45:59:
                    63:f0:09:1a:f2:01:75:bf:2e:b9:0f:d5:0f:c7:31:
                    92:0b:47:d7:70:cd:ac:00:0a:79:fd:87:41:c7:ca:
                    ce:53:32:b7:4f:98:f0:b0:8a:1f:07:23:b9:bf:c4:
                    c0:99:13:5c:c1:f7:c1:f4:97:e7:70:9f:72:05:e2:
                    8d:38:88:39:35:0f:20:13:83:3e:1c:e0:2a:b7:88:
                    4c:b8:cc:8b:0b:d9:dc:0b:d2:bb:ea:dd:06:7c:75:
                    01:97:b3:97:b2:83:35:85:a2:8e:4f:fa:06:ac:23:
                    59:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:75:A8:B2:69:FC:FB:09:93:15:C2:61:93:94:2A:B6:23:4E:9C:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e32e81b4-c2a3-3931-ae9b-64260737fd0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8809:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:03:94:ae:59:8f:78:68:c8:40:ea:65:d2:e8:9f:c8:d0:ea:
         ea:d3:38:25:15:f8:21:cc:f5:3a:df:64:62:3e:52:5c:a4:f0:
         17:40:43:75:3a:af:c9:cf:1e:52:0f:51:d0:c3:20:a1:45:84:
         04:4c:f0:53:74:b2:d4:e9:97:b2:f3:f5:9c:b8:34:d5:52:50:
         a9:dd:95:71:ae:dc:55:36:a7:dc:95:3c:3e:62:7e:01:25:17:
         19:8b:d1:f3:d9:ba:5f:9d:14:07:66:a6:ef:60:dc:72:57:23:
         c0:10:92:c5:ec:be:d0:4c:6f:53:f7:9b:5a:d5:5d:f9:64:9d:
         43:fe:e0:e6:c0:44:27:84:55:cf:0b:c1:e7:4d:56:f3:a3:dc:
         63:3f:95:61:08:b8:26:7b:79:6d:df:fe:1e:7b:ab:ba:c1:f8:
         db:78:07:f4:dc:f8:a4:51:c9:e3:b6:8f:b0:f1:bc:99:b1:50:
         1c:12:67:d3:53:10:d1:6a:19:58:0a:04:d2:3d:22:89:6d:6e:
         1a:30:a4:05:94:59:86:a7:ce:db:bf:5c:4d:88:69:59:0e:83:
         28:5e:0f:67:44:8c:a3:f3:ad:9b:8e:ff:fa:e8:74:56:d7:0b:
         1f:fe:33:77:6b:75:75:ad:d6:f7:3c:ab:b7:b9:35:d7:8e:a3:
         b9:b4:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:39:39 2025 by rpki-client