Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28d179d7-aeb0-3c7b-bc48-57f0cd6d9111.roa
File:                     28d179d7-aeb0-3c7b-bc48-57f0cd6d9111.roa (raw, json)
Hash identifier:          1Uei12HtvduZVXtz0GDy+cQ78lfJW+yuM76U5dgmkCw=
Subject key identifier:   98:64:1F:05:26:2E:20:40:2E:69:89:33:4F:A0:57:D9:86:A8:4E:53
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DBFD060EC02197B7A3F10D080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28d179d7-aeb0-3c7b-bc48-57f0cd6d9111.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     22773
IP address blocks:        2600:8800:8ec0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:60:ec:02:19:7b:7a:3f:10:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=6955d5ae-0e56-47ef-b305-f3f83ac94ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4b:66:20:30:5b:da:b4:40:9c:e4:1c:9a:62:
                    ba:b0:be:14:e4:b3:7f:64:72:4a:f9:ac:87:73:dd:
                    87:9e:de:5f:c8:a0:03:74:74:e4:22:71:20:84:a5:
                    d4:ff:5c:45:06:48:fc:11:d2:52:6e:ea:45:3b:e3:
                    98:6d:b5:7e:64:a7:4a:12:bd:bb:89:08:3d:2c:73:
                    48:03:6e:6d:f3:0f:d5:0a:20:c2:5e:80:60:c6:c3:
                    43:5b:64:1e:51:f0:1a:a7:6c:b6:8b:3f:d7:71:d3:
                    86:42:61:82:7a:e7:9e:9f:63:ad:6b:1c:90:36:7c:
                    f5:74:3d:d7:02:70:ae:99:c8:eb:f5:64:d4:2a:ef:
                    9a:8a:4d:6c:d3:f4:19:ab:ae:7a:38:d4:3a:0b:0a:
                    c1:08:4f:66:aa:c4:65:2a:b8:f7:f8:2d:b0:a5:86:
                    14:0b:85:08:c4:50:a1:11:97:70:d1:56:95:1c:43:
                    97:44:2a:6a:3a:8f:bc:79:6b:f1:22:9c:b5:41:db:
                    56:a6:75:a3:a4:bd:61:82:b4:22:45:30:7d:fc:91:
                    35:a5:91:eb:89:5b:a9:27:88:c8:5d:40:53:81:6e:
                    ef:42:77:51:51:3b:0b:14:91:f6:3d:ea:4d:e5:28:
                    5c:45:41:98:2f:d4:50:ae:63:c4:15:a1:41:b2:ef:
                    f5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:64:1F:05:26:2E:20:40:2E:69:89:33:4F:A0:57:D9:86:A8:4E:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28d179d7-aeb0-3c7b-bc48-57f0cd6d9111.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:8ec0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:de:a5:ce:b8:95:64:4d:6f:29:04:30:ad:ae:9c:3c:10:22:
         8d:78:db:56:77:81:89:0a:ae:11:c5:9e:fa:7b:22:ee:e1:f4:
         ad:55:c9:e7:5f:bd:a0:a3:f7:9e:2b:56:c9:41:55:fb:cc:26:
         e8:d8:d0:d4:d2:cb:c9:9c:2c:2b:7c:53:bc:68:f6:64:bb:ae:
         76:05:ff:16:12:c2:44:21:0b:03:0a:73:75:b3:12:67:e3:74:
         93:48:15:e1:60:c0:7b:34:38:d3:86:b3:34:55:95:11:ad:d7:
         ef:16:06:48:98:93:7a:ac:d9:01:c7:2b:c2:4d:18:92:8f:86:
         90:9c:9e:b0:d7:0c:69:ea:86:16:2b:5d:12:4e:80:ff:2f:0d:
         74:a0:80:d0:4d:6b:4e:c8:09:d6:9c:8c:b9:78:90:f2:4f:60:
         2c:6d:66:76:eb:89:8e:43:95:98:ff:dc:d3:d6:0b:3e:c4:61:
         1b:3d:5e:61:97:e0:91:02:d0:fa:50:d1:88:c8:39:a2:5d:61:
         3b:c1:6b:f4:92:83:80:54:c4:b9:7b:57:1d:db:7e:87:cd:5c:
         7e:58:93:c1:52:b0:21:1e:12:39:c7:1a:4c:65:fe:17:20:3b:
         c7:e1:26:47:5a:36:a7:b8:1d:48:5a:34:93:ce:3e:99:8a:77:
         6d:7c:24:c4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2/0GDsAhl7ej8Q0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk
Njk1NWQ1YWUtMGU1Ni00N2VmLWIzMDUtZjNmODNhYzk0ZWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUtmIDBb2rRAnOQcmmK6sL4U5LN/ZHJK+ayH
c92Hnt5fyKADdHTkInEghKXU/1xFBkj8EdJSbupFO+OYbbV+ZKdKEr27iQg9LHNI
A25t8w/VCiDCXoBgxsNDW2QeUfAap2y2iz/XcdOGQmGCeueen2OtaxyQNnz1dD3X
AnCumcjr9WTUKu+aik1s0/QZq656ONQ6CwrBCE9mqsRlKrj3+C2wpYYUC4UIxFCh
EZdw0VaVHEOXRCpqOo+8eWvxIpy1QdtWpnWjpL1hgrQiRTB9/JE1pZHriVupJ4jI
XUBTgW7vQndRUTsLFJH2PepN5ShcRUGYL9RQrmPEFaFBsu/1KwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJhkHwUmLiBALmmJM0+gV9mGqE5TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjhkMTc5ZDctYWViMC0z
YzdiLWJjNDgtNTdmMGNkNmQ5MTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgCIAI7A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKrepc64lWRNbykEMK2unDwQIo1421Z3gYkKrhHFnvp7Iu7h9K1V
yedfvaCj954rVslBVfvMJujY0NTSy8mcLCt8U7xo9mS7rnYF/xYSwkQhCwMKc3Wz
EmfjdJNIFeFgwHs0ONOGszRVlRGt1+8WBkiYk3qs2QHHK8JNGJKPhpCcnrDXDGnq
hhYrXRJOgP8vDXSggNBNa07ICdacjLl4kPJPYCxtZnbriY5DlZj/3NPWCz7EYRs9
XmGX4JEC0PpQ0YjIOaJdYTvBa/SSg4BUxLl7Vx3bfofNXH5Yk8FSsCEeEjnHGkxl
/hcgO8fhJkdaNqe4HUhaNJPOPpmKd218JMQ=
-----END CERTIFICATE-----
Generated at Wed May 13 06:52:23 2026 by rpki-client