Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2687ab7a-ab1b-31f2-9e53-b8b7a24a3245.roa
File:                     2687ab7a-ab1b-31f2-9e53-b8b7a24a3245.roa (raw, json)
Hash identifier:          o0nk7ZXHu/rsG5O4/k4SoXKVBok7Xf4e2+khqJghYYE=
Subject key identifier:   EE:0B:24:FC:FA:6F:C4:58:46:29:D2:0E:08:7A:3D:90:A5:6C:A9:05
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF328E34CF4B25AF155D6F00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2687ab7a-ab1b-31f2-9e53-b8b7a24a3245.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        2600:8800:5410::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:8e:34:cf:4b:25:af:15:5d:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=551b0687-c0f7-47bc-adc8-30e490cbe78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:de:38:ac:c7:5e:68:5f:7e:c9:da:b9:33:
                    7a:e6:20:ce:07:a0:66:ac:8b:b2:27:50:d8:f8:4d:
                    7f:2f:05:7c:45:ff:43:25:8f:06:88:15:e4:03:58:
                    a8:56:60:89:b9:af:1d:0e:e2:07:7e:00:04:d9:96:
                    40:2a:61:12:40:0d:9a:39:b4:00:ef:2e:27:54:5d:
                    d6:7b:1a:78:8e:6b:60:16:d5:98:b4:46:3f:e5:15:
                    e7:c1:d2:85:2c:8b:d5:a8:63:b7:3e:11:24:48:e2:
                    53:14:0d:63:e2:ba:ec:b6:73:4c:8f:a7:1f:9d:0d:
                    ed:ca:77:07:4c:6d:5a:31:88:d2:c6:7a:9b:07:7b:
                    72:cf:c5:8d:30:eb:e7:88:6d:6f:45:4c:04:53:35:
                    c0:a5:b7:c9:6a:a4:dc:cf:78:b4:49:d1:12:9d:21:
                    a6:e7:45:0c:c8:b0:89:6d:07:34:1c:56:ff:6c:91:
                    3d:ae:e1:37:71:86:5e:8b:93:62:76:5a:b6:15:29:
                    51:9c:3a:a6:c5:25:c4:9f:9d:c9:ef:e6:00:55:b4:
                    af:37:d6:da:4c:0b:73:63:34:1f:ab:79:03:29:45:
                    ea:31:fd:8a:a1:9a:93:5a:df:6f:e4:23:70:a1:bb:
                    17:06:d0:61:30:ad:77:26:f9:1c:36:58:1a:c6:33:
                    11:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0B:24:FC:FA:6F:C4:58:46:29:D2:0E:08:7A:3D:90:A5:6C:A9:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2687ab7a-ab1b-31f2-9e53-b8b7a24a3245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:5410::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:6d:88:be:ad:21:4b:fe:b8:d2:be:ab:c7:55:3c:62:72:90:
         27:2e:68:2b:b1:b6:3b:f1:8b:34:48:70:9b:80:02:b8:1f:74:
         c1:04:cf:a4:01:a7:92:a5:d2:a4:cf:68:15:e5:16:2d:aa:bf:
         6a:e5:ae:88:20:65:32:2e:50:cc:64:58:72:87:db:43:74:c4:
         70:5a:43:91:b7:56:71:05:8a:ab:08:28:c9:06:71:8c:68:54:
         68:63:41:0b:ed:95:ac:db:79:5f:77:68:ee:a0:02:5d:19:3e:
         fa:63:b8:69:39:51:df:95:bc:8c:48:ba:78:d3:3a:30:40:04:
         f5:dd:ee:a7:33:0c:87:59:45:45:3a:2d:9a:c2:13:75:56:3e:
         f8:e9:5d:f4:60:31:42:65:2e:f4:52:51:51:23:77:bd:3b:86:
         47:61:ca:2e:ef:32:f6:e4:5e:8f:ee:dc:9f:8b:e3:1f:17:b9:
         49:92:67:30:5a:69:c6:02:8b:cf:04:fb:ce:6a:33:2f:1f:ee:
         fb:15:18:1f:c1:3c:6b:5b:99:1f:88:1c:b3:8f:e5:7d:7d:28:
         f7:fb:5e:c7:5b:3f:6e:67:ab:1c:a4:84:44:ff:ca:8b:32:30:
         b4:76:b6:71:a7:a8:da:b4:59:b4:d5:d4:5c:f9:a9:c2:d8:4d:
         e0:f2:e7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:02 2026 by rpki-client