Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1017c856-cb9a-3204-8b2f-05ad2252d87e.roa
File:                     1017c856-cb9a-3204-8b2f-05ad2252d87e.roa (raw, json)
Hash identifier:          KXni74wI5mjZZAq6/QaJMHwz6kTEIWTjKunJPJpvHYQ=
Subject key identifier:   B7:BE:7F:61:87:79:74:0F:6B:D8:03:62:F3:E8:5B:7C:D4:96:FE:7C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4277D636D5812D3C12B3F100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1017c856-cb9a-3204-8b2f-05ad2252d87e.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        2600:8800:b71a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:77:d6:36:d5:81:2d:3c:12:b3:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=240ef105-8c24-40ca-b0aa-7cf45d2c08c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:fd:cb:bf:d4:d2:31:71:a0:b1:f2:fb:1b:
                    13:20:cf:f6:ea:5e:eb:32:79:b7:00:81:4b:81:0a:
                    e9:71:0a:e7:fc:10:3f:7a:71:06:e1:d9:7a:37:9f:
                    c2:21:34:46:52:4b:98:9b:fb:24:4a:96:c9:94:0a:
                    f2:cd:ed:d7:dd:a1:f0:71:d4:86:89:e7:f6:62:e6:
                    cc:bb:bd:8f:9c:1a:3d:0d:96:7d:a0:da:86:50:28:
                    59:5a:9f:e5:c3:5d:1b:25:ce:5d:42:27:09:31:4b:
                    38:2c:a4:5f:fa:59:3e:b9:c2:ca:90:d9:17:8b:98:
                    4a:0f:e2:1e:75:96:eb:71:a3:ab:fa:41:96:f3:29:
                    04:01:a5:05:73:09:ed:67:15:63:41:8f:2b:fe:d3:
                    4f:16:45:5b:7f:76:3d:76:68:69:d3:10:b9:dd:1e:
                    49:ee:7b:d7:93:bc:63:2d:57:e1:2e:3e:2f:18:b9:
                    23:cb:8b:43:41:cb:1a:2a:f4:8c:4c:e8:1c:7c:26:
                    30:8f:a8:0c:cd:a4:cb:c3:13:69:46:0d:6e:bb:08:
                    fb:e1:df:58:3b:67:5f:d8:4f:24:e0:06:02:65:cc:
                    8f:3c:39:1e:05:ea:03:59:be:fe:93:d0:bd:a6:f8:
                    31:20:d1:c4:af:56:73:4d:60:a3:42:83:25:ed:d2:
                    7f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BE:7F:61:87:79:74:0F:6B:D8:03:62:F3:E8:5B:7C:D4:96:FE:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1017c856-cb9a-3204-8b2f-05ad2252d87e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:b71a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:83:0d:4b:26:50:ef:57:5b:22:63:7f:ef:c8:12:29:b5:5d:
         ac:41:84:1f:55:5d:5d:44:c3:11:a7:08:00:04:61:3a:1a:df:
         ac:b6:c3:81:cd:e5:30:30:cd:1c:a2:de:08:2b:53:05:03:b2:
         70:1e:27:22:80:ef:a4:41:78:1f:6d:84:9b:a4:26:f0:59:ef:
         c2:eb:cf:1a:94:28:8b:b7:62:52:26:90:18:91:ce:04:74:01:
         64:02:07:dd:65:ce:45:b5:5e:f9:ce:e0:a0:b0:db:b1:45:ad:
         46:b6:bf:8f:10:52:8a:95:89:19:6a:b6:1c:21:23:c0:d1:f8:
         a9:f0:3d:e7:7c:9c:fd:3c:be:85:d1:09:c0:eb:89:bf:4e:4d:
         9b:3e:0a:52:5b:7e:54:68:f5:4b:1d:bf:44:22:d5:bf:da:f9:
         8d:69:83:0e:6d:d3:b9:53:20:bf:2a:87:9e:b2:9b:2c:a3:31:
         c9:15:65:c2:70:a2:e1:ed:e9:aa:02:36:ad:24:cf:cf:5b:26:
         08:36:89:9a:00:45:f6:09:07:85:48:f2:14:a5:61:0b:f7:63:
         eb:af:ac:cf:fa:65:dc:ec:f0:5e:d1:a3:61:4d:3f:38:32:07:
         09:b6:bb:cc:19:d9:51:d2:c8:d7:13:e6:f8:e6:ba:2a:f0:41:
         96:40:2f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:14:55 2026 by rpki-client