Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/143ddda7-311a-325d-8e3b-32141467776f.roa
File:                     143ddda7-311a-325d-8e3b-32141467776f.roa (raw, json)
Hash identifier:          8rbTvrYns3QhJNOdx2RHT0bQPVZvLbSiwrbmHognxCw=
Subject key identifier:   83:7D:8C:81:89:E9:22:7A:98:23:B8:A8:7F:60:FF:D0:CA:E1:C5:62
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E66DA21D05AFA72D8C05DC670
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/143ddda7-311a-325d-8e3b-32141467776f.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     22773
IP address blocks:        2001:578:2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:21:d0:5a:fa:72:d8:c0:5d:c6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=a2900804-f9c2-4148-8c40-460cf63ec58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:2f:26:c5:70:3d:ef:d1:8b:16:50:51:aa:
                    32:e2:bd:41:07:f4:c3:be:44:40:33:28:a2:af:73:
                    00:d5:81:a6:27:12:3f:8e:b0:9c:0a:a0:4e:cc:9d:
                    4f:98:5a:a8:2a:2f:d6:40:df:81:dd:0f:53:af:20:
                    f4:cb:21:2a:ee:a5:f4:55:65:18:18:9e:00:b2:ef:
                    e4:aa:f7:9c:24:2c:af:14:bb:6c:eb:83:30:cc:42:
                    ec:cb:80:91:0c:1b:f5:93:b3:1e:ad:fb:56:ef:4d:
                    06:ce:5e:83:73:66:7b:0a:54:f6:ae:f5:c2:2e:96:
                    b5:5f:73:13:ea:4a:0e:b6:f0:ce:8c:45:4e:91:49:
                    0a:e9:3f:7e:05:e3:7b:5d:a3:5d:d0:3d:8d:11:3e:
                    e0:f5:4f:e3:41:ea:2a:a5:8d:7b:b5:58:11:39:4f:
                    78:51:e2:ee:b5:60:1a:b1:25:53:0d:89:cc:f4:27:
                    b0:41:dc:89:87:8a:14:5b:9f:db:46:21:96:75:0f:
                    45:ec:1c:9d:c2:1f:2f:5d:6f:a1:a6:b9:f9:96:7f:
                    0e:fb:73:00:b8:20:b1:6b:f7:6b:59:ec:68:92:e3:
                    57:40:13:18:97:8c:4d:5d:d5:de:55:41:cb:ee:de:
                    42:98:ea:9f:3f:22:a1:e4:be:3f:08:7d:b7:e6:4c:
                    83:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7D:8C:81:89:E9:22:7A:98:23:B8:A8:7F:60:FF:D0:CA:E1:C5:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/143ddda7-311a-325d-8e3b-32141467776f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:578:2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:dd:f9:a8:0b:1b:51:3a:83:a7:f1:f6:30:21:15:40:2e:06:
         c8:80:16:1a:66:22:85:32:15:de:ce:50:3f:d4:22:ba:23:95:
         31:9d:1b:35:10:ec:62:96:8a:65:b9:95:1c:9b:74:ce:f9:65:
         64:3e:e3:68:68:14:2d:d2:02:65:27:db:20:98:99:fc:24:7e:
         63:ab:81:8c:51:20:ea:4a:4d:8c:b3:e9:98:0b:2f:a6:84:91:
         50:47:dc:7a:39:41:94:ff:4a:fc:b1:e2:ef:a8:6a:15:c2:0b:
         08:d7:3e:38:77:ae:74:9f:4f:ee:de:0f:a5:a0:4c:aa:53:1f:
         34:96:72:9e:56:0d:28:60:c5:f4:86:c1:94:1a:be:b3:18:67:
         6a:01:1b:4b:e2:20:37:82:68:12:91:bc:7f:01:df:e0:f0:5b:
         67:93:bc:b0:96:84:8a:c7:7f:c5:ab:3a:e1:dc:13:29:f2:d2:
         3c:06:6a:1f:f4:a3:71:49:87:cf:40:89:3e:fe:94:47:92:f9:
         5b:ea:f7:90:46:8e:ec:d5:0e:a9:c7:22:1b:89:e8:4e:a2:c0:
         3e:bf:97:4b:93:ca:43:15:60:76:2a:12:80:dd:3e:d9:2a:db:
         a0:39:08:3b:0e:5b:06:23:cd:56:62:bb:e7:55:04:cb:25:3f:
         ff:65:71:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:01:44 2026 by rpki-client