Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38692496-fae6-317b-962b-9a70c68b5570.roa
File:                     38692496-fae6-317b-962b-9a70c68b5570.roa (raw, json)
Hash identifier:          yfKl1wQaKuIiBPLAwmRigoG7qA6LGa5JoGM3FwFiMaQ=
Subject key identifier:   A9:6A:7E:5E:BE:2E:F6:64:D9:96:6F:8E:B8:FB:B8:5E:74:28:03:1E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4278526DE853AE5D69500480
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38692496-fae6-317b-962b-9a70c68b5570.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        2600:8800:b73c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:52:6d:e8:53:ae:5d:69:50:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=cc242df5-be73-4200-9a6f-373cac0c1c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bf:73:17:08:26:41:26:1b:b9:86:d3:05:96:
                    b8:1b:d2:1f:2b:2c:90:64:a0:91:a9:74:91:90:6b:
                    05:46:a3:e3:4b:6f:76:e4:72:5f:3f:d9:44:f7:26:
                    02:fe:81:1b:eb:5a:b5:39:07:ee:f2:63:bc:a3:ae:
                    15:b4:09:dc:ac:2a:dd:79:25:a0:2a:57:6e:58:1b:
                    d3:f1:56:92:99:e5:14:b8:2a:94:fe:f7:cd:47:8b:
                    41:35:9a:49:3c:0c:f2:37:f1:d5:67:b2:32:21:86:
                    da:fd:e7:62:7c:a5:bc:a8:41:91:93:50:a8:e7:4d:
                    0d:8f:78:97:57:1a:9e:7b:05:6c:ea:bd:a7:cd:f1:
                    1a:62:11:05:05:2d:2f:31:16:d8:0b:f6:9e:ba:1a:
                    ca:f3:11:43:37:7a:cc:49:90:40:17:b9:f4:cf:7f:
                    39:eb:44:ad:1c:63:76:da:4a:5c:a5:18:1a:68:48:
                    08:b3:4b:59:2e:5d:79:db:24:d2:e3:87:9d:a2:2a:
                    d9:de:ff:ce:34:3f:4f:7e:25:0c:3a:27:31:c7:30:
                    6b:70:7d:7a:25:7e:b3:0c:59:9e:ee:d8:51:8d:9c:
                    0f:8e:bf:96:1d:57:0d:72:87:cc:73:7f:97:5d:84:
                    27:7e:33:a1:b3:c4:ae:dd:21:02:15:dc:7e:9c:fb:
                    7b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6A:7E:5E:BE:2E:F6:64:D9:96:6F:8E:B8:FB:B8:5E:74:28:03:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38692496-fae6-317b-962b-9a70c68b5570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:b73c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:06:2a:e7:7c:49:e8:d3:92:55:02:cd:65:a4:ea:f8:a3:fe:
         6e:90:38:d4:0d:12:d0:7c:db:8a:f2:a4:10:ba:86:d9:97:3b:
         13:89:b5:85:81:ee:31:89:ce:06:57:2e:4b:aa:3f:69:00:23:
         21:1d:0a:ef:fe:6f:0c:15:07:ec:4f:70:b5:5d:dd:5f:9d:d9:
         b0:3f:9e:da:ea:50:b1:f6:d4:7d:21:7b:23:a2:c7:d2:a7:88:
         cd:b3:69:2d:d0:90:c6:3e:f2:31:7c:fe:66:5a:69:0b:9f:cc:
         19:64:32:48:9d:c0:22:aa:e5:ec:f8:9f:10:c4:45:02:06:0e:
         38:36:35:1b:a9:f4:4c:3e:9e:f8:27:54:29:b3:49:85:11:29:
         48:0b:10:ca:50:e7:e5:d5:fb:3a:9e:79:c4:73:64:69:77:57:
         8d:84:d9:52:cd:4f:c0:79:ac:32:ad:5c:57:bd:6c:57:26:6d:
         e3:b3:fb:3f:50:2b:1b:ac:a0:2d:fe:02:b4:b3:99:e9:30:8b:
         9f:05:0c:ff:3d:9b:db:ae:c6:45:31:f5:2d:7d:4e:57:2d:b9:
         69:c7:7a:0e:ff:a9:5d:d8:9f:7e:e6:06:73:94:62:25:ad:99:
         9c:14:a9:d8:c7:9c:1b:2e:0b:48:a2:9c:2a:87:7d:0c:41:a5:
         24:ce:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 14:23:55 2026 by rpki-client