Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09e87285-c43b-365e-a04d-907acbe5390a.roa
File:                     09e87285-c43b-365e-a04d-907acbe5390a.roa (raw, json)
Hash identifier:          /ekInxasErvwQgnsNdGzkCYa+6+EqsaLs0Dywnb7snw=
Subject key identifier:   C2:4E:A6:08:63:BC:BB:6B:AA:31:AB:45:82:16:7A:4B:59:9E:F9:BB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DBFD0911FDAB9AEA03F9A8F00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09e87285-c43b-365e-a04d-907acbe5390a.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     22773
IP address blocks:        2600:8800:8f12::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:91:1f:da:b9:ae:a0:3f:9a:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=857a28ca-1e40-4887-824b-2a29aac1e3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e7:8d:ae:39:b6:0a:be:47:b0:c8:13:c7:25:
                    0c:51:7f:a6:4d:a8:e1:c9:5c:1c:1f:53:b0:a2:38:
                    62:42:60:e4:f5:0e:ae:36:73:d4:97:5c:73:6a:0b:
                    b1:b0:74:b9:09:a0:3a:d2:29:1f:c2:04:02:2b:79:
                    cc:a3:bf:cb:11:8b:29:09:bc:89:fe:e4:ef:66:91:
                    23:82:cd:30:eb:c5:ea:b5:87:62:83:7a:da:c1:ee:
                    0b:c4:f3:f7:99:92:5e:b3:ae:32:e4:c7:9c:78:f8:
                    d3:be:9e:f6:28:90:6c:e2:e1:a9:1f:54:2a:18:ed:
                    a1:ed:76:ff:a1:ab:6b:45:57:bf:0e:8d:92:64:06:
                    c8:c9:6c:bc:06:0f:4f:c1:f9:7f:ae:7a:f0:cd:db:
                    69:b4:7a:d0:a1:9a:be:cd:22:10:5c:5d:f1:8c:d3:
                    d4:9d:4e:57:df:e0:4d:b8:d6:21:86:54:9f:46:d7:
                    17:af:fc:f8:9b:b8:36:7f:13:10:d9:9a:12:1c:6d:
                    c8:70:4e:96:c1:7c:00:9d:39:2e:c3:30:62:85:f6:
                    0d:ad:29:75:ee:87:cf:3a:2b:5d:7e:9a:4f:85:6f:
                    3e:be:18:5f:b6:4b:ab:2b:c9:c2:eb:81:e8:e0:45:
                    0d:2a:e4:99:24:19:6f:3e:df:aa:13:86:38:99:24:
                    52:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4E:A6:08:63:BC:BB:6B:AA:31:AB:45:82:16:7A:4B:59:9E:F9:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09e87285-c43b-365e-a04d-907acbe5390a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:8f12::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:30:42:33:35:7c:69:ec:d6:07:7c:bc:31:4c:16:2c:f7:92:
         d5:e9:7d:28:67:41:d5:80:5d:1d:f0:89:d1:0e:0c:18:72:11:
         c7:51:f5:ef:66:e2:01:0b:cf:74:ac:ed:38:b4:c1:dc:b3:e1:
         96:32:84:bc:40:d1:a1:70:fc:62:1e:7c:a2:08:b2:a0:61:08:
         01:74:51:16:e3:2b:9f:da:5c:73:22:aa:47:da:51:7e:4a:63:
         28:d3:dd:85:b6:14:6d:ec:51:22:41:5e:e9:ad:cd:49:3a:77:
         51:64:7c:ad:33:2f:03:d1:d9:dd:42:db:ca:e9:41:b6:fb:df:
         14:08:1e:80:0d:91:46:c9:12:bc:91:e2:10:ab:e3:46:7f:d0:
         37:f8:28:80:05:ab:d9:f5:09:65:30:b9:3b:e9:c2:43:c2:85:
         eb:2c:3f:d8:f8:36:02:9a:86:f3:4b:a7:33:68:80:88:58:7a:
         04:5c:4d:68:b6:f5:7a:03:5b:f2:c2:c2:de:e6:1f:1d:01:95:
         7a:e9:11:92:ca:a6:c7:da:01:92:e1:93:e5:cc:b8:61:1d:31:
         0d:a8:82:80:e5:97:12:3f:25:b0:17:e7:61:f3:f0:93:8c:c5:
         89:6a:fa:12:9c:95:18:3b:4d:17:5c:91:be:87:67:1b:0e:c7:
         dd:90:fe:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:54 2026 by rpki-client