Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06593cde-d408-3083-9677-c5f12b9b13ad.roa
File:                     06593cde-d408-3083-9677-c5f12b9b13ad.roa (raw, json)
Hash identifier:          5Pev0OpSVoPqaamjrfHye53RkoE0uVcFw+wGH4buefA=
Subject key identifier:   F0:AD:8B:1E:03:D0:38:B8:3A:04:5D:A9:DE:50:F3:4B:32:12:C4:D8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4277F1EEE55E926A43BD89C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06593cde-d408-3083-9677-c5f12b9b13ad.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        2600:8800:b6e6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:77:f1:ee:e5:5e:92:6a:43:bd:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=18ee795a-7885-4d39-8e5b-cfd84d49c179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:30:a5:bb:4c:f6:80:f3:45:75:ae:1c:5f:c1:
                    2f:1c:46:7e:4f:32:ad:eb:7e:83:46:4d:ce:4b:10:
                    54:71:6e:d6:90:bd:f5:fb:8f:a4:b7:f1:a6:71:d6:
                    89:9d:d8:f7:95:c5:14:e9:b8:ba:5a:91:73:ea:c6:
                    b6:c5:b8:e4:06:b8:58:56:a9:27:46:6f:33:74:72:
                    43:f0:de:78:c1:ff:b9:1b:a2:da:cc:48:3c:86:b1:
                    23:c4:0b:03:c2:ae:08:c8:66:91:47:85:5d:2b:ce:
                    e2:7e:54:e5:0d:32:d7:92:a3:cd:1d:ca:ba:1a:ed:
                    1a:6f:a8:4a:ab:d3:6c:32:c0:e8:f9:15:34:62:78:
                    bd:27:94:d4:67:a6:f3:1f:a4:89:70:e6:1d:44:16:
                    34:11:27:a6:43:de:62:48:1e:10:10:65:9b:e4:f1:
                    78:f5:65:1e:1a:83:37:16:67:10:93:ab:ac:e1:90:
                    f7:73:df:15:03:28:7e:0f:04:e5:1e:10:b1:3e:dc:
                    47:77:24:19:54:71:fc:60:9c:c4:c5:4e:b2:67:1e:
                    f0:d4:22:37:c0:72:7e:3f:ba:14:e6:21:a4:53:ec:
                    fc:bb:60:cf:ba:2a:f5:b3:ef:b5:e3:d0:ce:a8:93:
                    6e:88:d9:d3:fe:a2:e5:4f:9c:25:c8:3f:09:fe:80:
                    59:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AD:8B:1E:03:D0:38:B8:3A:04:5D:A9:DE:50:F3:4B:32:12:C4:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06593cde-d408-3083-9677-c5f12b9b13ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:b6e6::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:eb:6c:f6:99:49:94:02:a2:58:3b:69:0f:82:8f:53:2a:60:
         38:89:6d:ef:29:ac:b1:31:30:a7:88:7a:3f:3a:98:ce:21:09:
         68:e5:6c:e5:ac:1b:9b:60:2d:8c:4d:18:6b:8e:b3:54:75:9d:
         54:7a:5a:b3:1e:7e:e8:db:8b:21:1a:3f:b9:d4:5a:b5:ee:c1:
         ed:bd:d4:74:0b:45:a1:94:c7:31:1d:b3:7c:6d:4b:03:f3:c8:
         67:d8:38:72:d4:3b:80:eb:de:44:7d:c6:1b:95:21:95:2d:52:
         60:c2:29:ab:fc:b7:bf:7e:2f:e2:5a:4a:61:d5:f7:1b:91:0c:
         ff:e0:78:9c:52:a1:d9:70:6d:03:8d:57:fc:84:20:f7:dc:43:
         ec:d5:95:75:74:2b:29:cb:f8:8a:97:ac:14:e9:45:ad:71:9e:
         29:50:9f:fe:04:50:de:74:3a:7a:43:d3:04:72:59:fc:49:cc:
         0a:39:66:bc:fc:0a:e0:9b:61:3e:80:6c:3d:62:84:fd:a2:62:
         04:b4:01:93:48:72:cc:93:3e:19:67:7c:28:70:ba:7f:23:61:
         2f:0c:e6:67:82:71:89:d3:3e:35:6d:6f:b1:a9:41:cd:75:fc:
         e0:e5:79:ad:ad:2e:59:e0:72:23:76:7e:1b:c9:42:2b:90:9b:
         4f:fe:b2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:07:38 2026 by rpki-client