Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1fd604d9-ab69-3e0a-b0d7-6209ee1f9c0d.roa
File:                     1fd604d9-ab69-3e0a-b0d7-6209ee1f9c0d.roa (raw, json)
Hash identifier:          zASJf9evAy1sYBYGwX/UqlZszSrLYCL7KcIyFWw7gg8=
Subject key identifier:   0C:E6:CC:86:98:FB:40:E7:CF:F6:5E:B8:AD:5C:4F:A7:82:87:16:A3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F42785414BB43EF5F551328B8
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1fd604d9-ab69-3e0a-b0d7-6209ee1f9c0d.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        2600:8800:1e80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:54:14:bb:43:ef:5f:55:13:28:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=aad8478c-3d6b-492f-9b2d-30056d9d65aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fc:0c:3e:f7:89:f1:d9:c4:c8:f3:71:a9:03:
                    d9:c8:42:a5:6b:fd:60:3b:aa:d6:f9:50:9f:a3:ed:
                    8a:d4:7a:49:be:70:ca:b8:37:a8:2e:82:db:f8:f2:
                    97:2c:26:6e:4f:6c:6a:f1:2b:6d:f1:56:ea:46:ac:
                    2d:48:fd:4c:32:7b:71:9e:cd:ee:b1:cb:51:c1:17:
                    ac:3b:e0:5e:44:a2:29:e1:78:8f:b1:3a:65:f1:f6:
                    19:5f:af:0c:18:97:3c:24:ea:f1:77:4c:a0:1d:a6:
                    75:91:fa:78:e7:59:c5:0b:2a:cd:42:63:71:c1:8a:
                    24:7c:5c:9c:61:4b:41:a0:76:58:9b:a4:1b:22:92:
                    53:38:f1:93:ce:2b:50:8f:d0:5a:9d:d8:58:f8:36:
                    12:12:87:66:9b:f9:dc:70:5a:b4:e3:c2:7d:30:47:
                    f3:33:d0:ad:ea:d6:55:9e:12:57:1e:1b:6a:68:b5:
                    4d:1f:42:50:e3:d1:85:70:a6:5c:33:f2:1e:e0:09:
                    c7:c6:7d:1b:0a:40:7d:fd:60:7a:d0:99:03:33:99:
                    73:7c:ea:d7:52:c4:11:a8:89:15:91:e0:51:f3:5a:
                    5e:25:cf:81:12:e2:4e:99:84:0f:dc:16:72:4c:29:
                    62:5b:33:71:d0:56:53:90:fd:1c:4a:f8:3d:fb:79:
                    a7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E6:CC:86:98:FB:40:E7:CF:F6:5E:B8:AD:5C:4F:A7:82:87:16:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1fd604d9-ab69-3e0a-b0d7-6209ee1f9c0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:1e80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:6a:4e:67:55:b8:43:e6:8f:a5:ac:bb:d4:d3:07:de:e7:35:
         60:4a:60:ec:6a:79:7a:aa:4f:04:76:c9:c6:41:17:08:cc:5f:
         b4:72:b7:eb:a9:82:20:78:69:84:00:cf:52:44:d4:b9:45:46:
         96:ba:d9:4c:e7:19:64:5c:b2:df:e1:6c:ce:66:03:35:cc:4b:
         90:9b:b6:43:fa:71:c6:6c:26:25:aa:a3:c1:22:72:a3:76:10:
         ed:42:02:a5:31:0b:22:30:22:78:e9:bb:6d:88:d4:e8:15:2f:
         e3:95:ca:7f:df:4c:01:b9:17:6d:d6:3e:ce:6f:a5:ba:16:a3:
         81:ea:c9:d7:70:a1:d9:ea:c8:a0:d0:ba:0f:92:7d:4a:c9:77:
         4e:1a:e1:79:27:ca:c9:97:e1:32:cb:60:35:92:23:ce:94:c6:
         29:1e:f7:1a:19:17:d4:e7:aa:c1:3e:d6:45:ab:eb:43:16:2f:
         3a:f0:0a:01:64:b8:5d:75:c3:cf:69:b3:03:70:c9:d3:cf:62:
         d2:ff:c2:d4:d9:28:a6:68:ec:76:73:c1:aa:e4:ce:3b:16:9f:
         9d:68:eb:eb:58:fb:9a:e1:fb:3d:f5:87:b2:98:59:62:74:e4:
         1c:7a:d8:c1:58:f6:f3:9d:60:c8:91:e4:3b:30:5e:16:63:7c:
         08:15:db:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:56:00 2026 by rpki-client