Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20fbdf58-b40e-3a6e-8ddb-76bf0413be17.roa
File:                     20fbdf58-b40e-3a6e-8ddb-76bf0413be17.roa (raw, json)
Hash identifier:          ONn6Es/TEgt5EVp+k9loUP3UzL+6Md3mM4mQz4IVFiA=
Subject key identifier:   F5:26:F5:16:74:39:4B:01:67:1D:E2:F5:82:A1:C5:06:D2:D3:CF:C1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EA0158269CD1A962F726A9E00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20fbdf58-b40e-3a6e-8ddb-76bf0413be17.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     22773
IP address blocks:        2600:8800:c000::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:82:69:cd:1a:96:2f:72:6a:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=5b6ba822-24cc-40f6-ad8d-6fda5a4e206e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:94:38:6b:3f:8a:a6:b6:62:41:dd:55:ed:
                    95:a9:c8:0e:13:0f:6e:cb:fd:09:fc:25:7d:cb:cf:
                    5f:30:0b:2b:aa:dd:bf:7e:59:48:93:87:b5:08:44:
                    a9:0c:3b:b2:8a:a5:7d:89:1e:66:cf:71:14:9b:4b:
                    51:07:c7:f5:1c:86:99:9e:26:b7:ad:18:72:72:88:
                    77:20:f1:f3:5a:9c:9e:85:20:22:5d:c4:3b:8d:31:
                    af:94:f6:d1:b4:b7:29:dc:bf:36:33:d1:6b:15:19:
                    82:ef:32:cc:12:3c:95:ad:74:ba:0e:bf:33:7b:5e:
                    1f:57:e2:d0:0a:ce:a7:82:b6:8d:9d:8d:e7:89:4a:
                    f6:c0:a2:0c:da:b9:b6:5d:ae:6d:98:1e:43:f2:1e:
                    fe:d3:52:3f:b7:05:81:2a:7e:78:24:4e:60:d1:d0:
                    f1:95:32:4a:19:f3:6b:be:0b:eb:04:6f:c3:de:bd:
                    11:3b:bd:1e:1f:fc:0f:0f:9f:43:91:b3:69:ab:cb:
                    be:ce:71:59:81:97:2e:1b:bb:2c:e8:f1:f9:be:dc:
                    ab:f0:2d:92:26:30:e0:67:e8:bc:6e:96:36:f5:77:
                    70:76:82:4d:c9:91:6f:d8:68:62:2c:7d:f9:cd:81:
                    c5:48:b2:7d:56:f1:7d:ab:7e:f3:7a:71:bd:bf:a9:
                    d5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:26:F5:16:74:39:4B:01:67:1D:E2:F5:82:A1:C5:06:D2:D3:CF:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20fbdf58-b40e-3a6e-8ddb-76bf0413be17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:c000::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:58:64:0e:ee:09:41:35:4f:86:70:7a:6b:1f:4a:91:f6:f1:
         97:31:15:31:7e:43:d9:46:ec:c6:54:29:56:10:37:e3:c3:52:
         0d:f5:12:59:71:25:0e:e9:24:67:c4:b6:29:b4:f1:01:fc:18:
         8b:cc:80:f0:c5:f5:b4:3b:b2:79:f4:2f:61:b2:6a:d8:32:ad:
         7e:09:47:dc:82:c5:0e:4c:5e:ad:78:45:57:bc:7c:5f:cf:d4:
         4e:72:be:70:8c:88:92:a9:60:72:eb:c6:39:b5:9f:e3:ab:94:
         85:75:b4:40:fd:43:0a:49:95:78:98:3d:6b:38:62:89:3c:04:
         7a:cd:db:d1:b8:35:a7:10:85:dd:50:82:fa:c3:14:7e:b5:40:
         63:0e:d4:aa:18:c8:6b:30:ee:f9:c7:df:d1:fd:a8:a3:96:78:
         1e:cb:9d:3b:56:82:ba:52:39:2c:73:10:1a:5b:b7:e0:5e:f1:
         37:b3:4a:c2:45:9d:50:0b:34:03:0a:ca:dc:0b:e4:3a:91:cb:
         1c:4a:6a:8a:aa:12:60:74:4d:3c:8d:87:e1:30:24:81:fd:73:
         aa:2c:40:f5:7b:21:ef:d6:7e:c5:b6:d3:b7:75:fa:30:fb:83:
         8c:b6:2e:9a:69:13:f9:b3:0a:61:63:01:6f:83:69:6b:01:59:
         e8:98:78:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:10:40 2026 by rpki-client