Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ec514ec-5fb8-3357-bac9-4c5d777b0fca.roa
File:                     2ec514ec-5fb8-3357-bac9-4c5d777b0fca.roa (raw, json)
Hash identifier:          jph7yy49mkneoV+UPe5W4smUXeq2iVZH2GiSksuJfx4=
Subject key identifier:   1E:25:77:C9:92:8B:CC:00:6D:51:C4:56:09:4F:AB:E5:B1:D5:BC:96
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DBFD098234013FB0669B893A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ec514ec-5fb8-3357-bac9-4c5d777b0fca.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     22773
IP address blocks:        2001:579:8148::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:98:23:40:13:fb:06:69:b8:93:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=5a1732fd-9f4b-4b7b-a392-2fe558d29f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6c:8b:ec:3f:1b:95:ba:64:63:5f:06:8d:eb:
                    d6:70:b6:7e:4f:db:1a:f0:42:5d:05:10:5a:22:09:
                    45:53:71:bf:1b:35:97:91:12:c8:6f:ed:65:3b:68:
                    93:e0:35:26:af:8c:4b:4c:6b:06:3b:b5:b7:42:a9:
                    0f:ed:6d:81:c1:90:40:ef:b7:9c:b6:3a:b6:19:52:
                    ae:f3:89:6e:38:8a:12:9b:d1:d4:28:4f:94:51:7c:
                    4c:b1:18:fe:ff:25:d9:74:9a:cb:f0:8e:1c:39:8c:
                    86:78:ce:9e:32:0b:46:38:3e:60:90:e5:c5:11:b1:
                    b1:54:27:0e:9d:77:82:51:76:fc:ac:8b:e8:10:b7:
                    78:b2:6f:2e:e4:5d:4c:5c:f1:0e:91:d6:d5:a8:99:
                    40:1d:7d:ae:c4:5f:2d:16:f3:38:b1:6f:56:f8:1d:
                    f3:14:3a:e5:d2:3b:3c:51:19:be:2e:8c:09:78:c1:
                    15:26:b0:72:5a:3f:de:a6:0c:49:da:fc:ab:82:89:
                    36:c6:94:aa:09:ae:18:bc:97:f5:37:a4:7e:00:e4:
                    7c:fc:9c:2c:fa:cc:ea:a2:28:c6:f0:3a:08:e1:62:
                    b8:57:09:65:8d:50:bf:f8:f0:a0:4a:73:9b:b4:ec:
                    b0:8a:fa:01:87:38:59:53:95:d9:ce:6c:50:2c:85:
                    b0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:25:77:C9:92:8B:CC:00:6D:51:C4:56:09:4F:AB:E5:B1:D5:BC:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ec514ec-5fb8-3357-bac9-4c5d777b0fca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:8148::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:08:e9:52:6e:3a:a5:ee:e5:96:25:a6:8b:f3:1c:db:47:fe:
         d5:d7:3d:d4:df:8f:e0:58:61:28:e6:df:94:2d:13:f8:f3:04:
         60:1c:aa:ff:f3:36:3f:18:d2:64:49:9b:5f:3f:0f:53:5d:e9:
         61:64:fc:97:0e:73:1d:0d:73:47:b1:57:ba:b0:b3:09:47:22:
         e6:f4:dd:11:17:21:01:7c:dc:7e:ed:9c:cb:1c:1e:48:b9:5d:
         d7:f1:65:33:37:0a:fa:6a:d7:89:4d:64:21:7b:6c:0a:06:3c:
         16:d4:20:5b:93:e7:cc:fd:f2:63:6c:be:ee:eb:37:44:d7:2f:
         35:b1:5d:03:d3:5c:91:2b:63:9f:e9:d0:d7:ee:74:50:ca:40:
         ad:88:7c:16:2e:56:4f:09:e7:00:36:31:6f:70:12:84:61:00:
         21:c0:91:cc:10:c7:b3:77:40:ec:d7:5f:42:8a:dd:89:93:1a:
         b6:a3:90:3b:d9:7d:fa:a0:8f:ca:e0:18:04:68:35:b4:50:7b:
         9a:38:47:ef:97:3c:89:e9:e9:92:ef:5d:6f:b5:53:e6:3d:3d:
         6d:8f:e3:10:30:f3:bc:f4:ca:72:5d:4c:ec:7b:d7:89:30:8e:
         16:27:98:62:1b:1e:ce:e3:4b:99:8b:d6:79:98:12:73:8e:25:
         40:c0:1b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:34 2026 by rpki-client