Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3af35479-f2e6-33ec-a42d-90f04a52e8c9.roa
File:                     3af35479-f2e6-33ec-a42d-90f04a52e8c9.roa (raw, json)
Hash identifier:          oYemSQg4wmvKaWwMSPfh2m8DBnGs/qY+OjvRwwa4Hn8=
Subject key identifier:   2F:2F:A8:80:BA:C0:96:A9:40:70:4F:DD:5D:5F:B2:08:2F:90:6C:41
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E4F1F5DCA0309EA7283F7E800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3af35479-f2e6-33ec-a42d-90f04a52e8c9.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     22773
IP address blocks:        2001:579:f0fc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:5d:ca:03:09:ea:72:83:f7:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=5e0f0cbc-e0ee-4ae8-bb55-241c57557995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:38:66:a1:24:dc:a9:8d:d4:d6:66:54:dc:44:
                    74:8a:b3:70:c9:c9:8d:3f:1f:fe:cc:49:4c:2c:fe:
                    57:48:f2:f8:2a:0c:17:16:7e:0e:ec:60:c6:0a:8f:
                    2f:db:16:21:cf:4e:82:b2:db:a2:b2:ef:ae:9a:6e:
                    7f:72:e4:b4:62:85:b1:d1:40:6e:ee:96:e1:d7:9a:
                    fd:3d:70:8c:ee:42:a2:1c:7f:6d:fd:04:6e:03:28:
                    6a:ba:c4:88:e8:18:3b:2a:68:84:53:f0:7a:67:43:
                    02:b9:92:cb:65:01:cb:9a:8c:08:04:24:a5:66:40:
                    5a:50:07:fc:37:69:a8:d9:9c:51:4c:ae:ee:71:19:
                    ee:79:79:d5:60:b1:64:9e:7f:92:9c:b5:28:9b:ed:
                    8b:07:7f:de:1a:7d:37:c2:44:8e:41:de:bd:0b:bc:
                    6c:48:54:25:a8:fc:94:1a:fe:58:a4:be:00:74:1b:
                    b0:b6:54:a1:e3:a9:87:e0:78:70:e8:2a:23:0f:0e:
                    f5:ab:23:1d:02:e5:42:69:2b:9b:cc:42:10:5a:19:
                    68:b8:e9:f4:b4:f0:4e:0f:9c:a8:f4:0f:e4:e3:56:
                    7f:e3:1e:26:45:6a:43:ec:32:85:4b:de:46:99:e5:
                    ab:c7:2b:c4:71:5c:19:cc:0d:70:ca:07:eb:f7:b0:
                    c9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2F:A8:80:BA:C0:96:A9:40:70:4F:DD:5D:5F:B2:08:2F:90:6C:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3af35479-f2e6-33ec-a42d-90f04a52e8c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:f0fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c9:57:6b:23:0e:30:55:db:9c:22:83:b5:43:7a:05:b5:ba:
         93:cf:e0:a2:ff:6e:a4:98:f7:80:fc:0b:32:16:48:8c:7f:47:
         1c:2f:b5:ae:5b:5e:e8:a5:8c:b3:ea:30:d1:99:a7:b4:f3:66:
         ab:cd:6a:30:b1:a0:1b:5e:22:e2:72:4a:aa:81:81:61:83:9c:
         06:05:f8:f8:b8:7e:6c:3b:e1:b8:79:b8:70:79:8a:d2:a6:cf:
         50:42:d0:db:b1:d8:cf:31:24:64:fb:34:06:26:89:88:b2:be:
         24:36:fb:a3:78:77:a4:b7:57:5d:46:cd:b6:23:a7:89:0a:f4:
         2c:56:3e:e0:a4:fd:fd:e9:6f:1a:53:cb:d9:96:d1:2a:51:e4:
         6d:7b:bc:01:92:d6:3e:5c:fc:46:6b:63:dc:cb:f8:99:be:06:
         6b:27:a5:46:87:42:bd:c6:0d:e4:7e:52:c5:cf:9f:16:6a:c9:
         0e:ec:25:7d:70:81:58:93:b3:30:b8:8b:59:59:ca:b3:0b:e3:
         e2:1e:3c:89:3a:3c:a2:22:ad:4e:9a:f8:b9:03:f1:e6:2a:d2:
         cb:08:3f:18:ca:1d:ba:27:ad:32:33:20:b8:c5:23:fa:4e:ca:
         c7:e5:62:dd:68:f7:55:fa:1c:c5:36:c2:71:9a:7d:4e:57:e4:
         62:07:71:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:36:09 2026 by rpki-client