Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24df850f-1714-30ad-9210-ca4f9b467bc3.roa
File:                     24df850f-1714-30ad-9210-ca4f9b467bc3.roa (raw, json)
Hash identifier:          EG+U0YDucMZQRURjt3fqzLKo1wnUpKW2IcsXTrq02dU=
Subject key identifier:   D4:86:D6:EE:70:AD:97:16:F4:32:8A:94:2E:43:D3:71:59:A1:AD:C9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D6EDA8A95207DAE11187DF7E0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24df850f-1714-30ad-9210-ca4f9b467bc3.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     22773
IP address blocks:        2001:579:d144::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:8a:95:20:7d:ae:11:18:7d:f7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=bc8320ff-f320-4f3c-8459-581789cba68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:b9:5c:19:4b:5c:49:ea:73:4e:80:f5:60:
                    67:4b:ce:34:52:cf:d8:45:7a:f7:52:23:01:46:f5:
                    0d:99:89:60:4d:88:c4:e6:39:45:53:89:00:63:b7:
                    2b:6b:19:c3:1b:50:c3:e6:fa:c5:b0:06:9f:a8:9c:
                    a0:52:e2:34:24:65:84:4a:7d:24:bc:0b:9f:67:64:
                    6c:71:02:c5:bc:d5:08:40:2f:76:7e:4c:f6:75:b3:
                    16:16:e1:9b:56:4e:76:3b:32:d8:2a:46:13:a4:b6:
                    d0:eb:23:b4:bb:ae:4f:2f:d5:34:5b:73:7d:57:40:
                    f2:bf:57:44:f7:42:88:cd:d8:88:cd:54:da:7b:ca:
                    1d:4e:25:ee:a7:89:70:cc:12:f2:28:1a:e0:da:75:
                    d3:39:98:90:38:8d:a4:f0:af:5c:b7:0c:3a:14:32:
                    b0:8a:07:ce:61:d9:e1:dd:79:30:8c:3e:e0:df:36:
                    67:20:53:d3:21:59:14:b0:1f:8d:36:5a:94:23:28:
                    92:e9:3d:06:ac:ab:19:fb:55:77:f3:e8:2a:2c:95:
                    1b:d4:fc:15:a9:a8:e8:af:2a:55:dc:a4:55:34:d5:
                    e4:ea:4f:1e:fd:dc:24:de:52:86:c9:aa:72:7d:d5:
                    f0:90:22:1f:9f:90:ce:ca:c7:a7:dd:32:18:7f:da:
                    8f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:86:D6:EE:70:AD:97:16:F4:32:8A:94:2E:43:D3:71:59:A1:AD:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24df850f-1714-30ad-9210-ca4f9b467bc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:d144::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b5:9c:9b:d1:06:9d:a5:1c:9c:4e:23:6c:ff:8c:f3:7a:c3:
         9d:1c:fe:2b:fe:25:8e:4a:9c:95:69:f7:7c:2a:58:d3:48:fb:
         9d:ce:2c:be:87:63:be:af:a2:fd:46:a7:87:86:15:d3:3c:79:
         3a:1e:eb:09:76:f3:09:35:7e:74:e7:c1:09:6a:a3:f2:16:ad:
         32:2b:96:2c:99:93:64:9e:79:30:06:80:d1:b1:d5:7e:d7:02:
         29:78:3b:7a:a4:35:af:d6:f9:89:b4:55:f7:07:e9:c5:8a:18:
         14:c0:bb:68:cf:e2:d6:0b:da:36:ae:77:c0:71:bb:15:d1:ba:
         0f:96:f2:90:88:20:74:fc:de:1d:5b:af:22:20:e9:d4:51:29:
         9c:1e:a2:e3:b1:04:b1:67:ac:4b:b0:c1:e6:35:3e:35:a2:ca:
         0b:0a:4f:72:61:59:6a:70:67:37:66:cb:fd:61:9e:21:c3:72:
         9b:9b:75:5d:8d:6e:47:5c:07:46:72:ab:d7:14:ba:5d:83:e9:
         93:1b:f1:e7:a4:ed:d9:d7:b5:01:b0:c8:2a:9d:76:8b:4c:ea:
         ea:65:50:90:7e:12:13:56:36:af:43:9b:45:4a:9e:6c:82:f3:
         66:0a:c2:19:32:12:6d:9b:a9:ba:64:50:77:95:ba:7a:74:3c:
         f6:3b:4e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:43 2026 by rpki-client