Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/26b6eb63-efa6-3ffe-a8ac-04ef2318d1be.roa
File:                     26b6eb63-efa6-3ffe-a8ac-04ef2318d1be.roa (raw, json)
Hash identifier:          sk4XMeSCmojWMdGgKZifHsdQ4adoNTdd/wxlDcH+gvc=
Subject key identifier:   A6:74:F6:BB:DA:1D:83:F6:D4:B7:A7:70:CB:1B:B3:F5:FC:1F:31:59
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4278008345F66A65D9FFA640
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/26b6eb63-efa6-3ffe-a8ac-04ef2318d1be.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        2001:579:8228::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:00:83:45:f6:6a:65:d9:ff:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=455d65bf-89dc-49c8-809e-2b7fb5bf98dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b5:64:75:bb:e0:c1:12:b9:e2:9a:c8:52:1e:
                    ad:7f:df:10:5d:64:37:63:cf:88:2a:1f:94:29:6f:
                    b1:de:ec:af:93:21:50:f7:5e:bb:28:80:cf:8f:47:
                    f7:3a:44:89:84:84:28:bd:7b:24:e3:1e:eb:60:6b:
                    97:d5:d3:88:01:df:ef:66:31:c8:d1:5e:ca:8b:e0:
                    c2:68:2b:62:c9:ef:d4:d4:9d:ef:1c:93:6f:c3:97:
                    92:68:33:54:cc:c6:b8:4c:6c:9e:56:bc:4c:68:f0:
                    48:76:8b:5e:28:ad:69:ef:92:16:a1:d5:5a:10:8d:
                    d3:4f:20:32:40:e6:6b:94:65:a6:df:e0:7a:9f:7f:
                    8c:4f:61:ae:1e:e5:0f:76:0c:2d:f3:59:9c:2d:88:
                    5d:32:bc:f2:a3:87:9d:1b:2f:eb:52:fe:81:0c:ae:
                    98:27:59:fa:22:e3:92:7f:8c:53:13:0e:a5:86:6d:
                    7b:f0:2d:ad:cc:d7:39:44:75:0e:36:27:c1:25:e9:
                    9c:d3:fb:28:fa:41:05:57:17:03:49:9b:49:4c:7c:
                    a3:f6:84:d1:f4:68:47:e4:47:f4:77:61:d1:10:0c:
                    02:16:07:08:3c:34:a5:fe:67:2a:d6:51:75:07:1f:
                    60:f9:a8:37:d1:62:ee:87:c0:a0:57:23:39:61:4a:
                    f4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:74:F6:BB:DA:1D:83:F6:D4:B7:A7:70:CB:1B:B3:F5:FC:1F:31:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/26b6eb63-efa6-3ffe-a8ac-04ef2318d1be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:8228::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:40:70:e2:2b:59:12:2b:b1:7a:dd:33:6a:09:c1:68:03:53:
         a8:4b:ee:f5:39:85:c6:ed:dc:31:fe:72:36:7b:27:63:7d:8d:
         84:bb:5b:fb:1d:5a:00:f6:b3:34:2c:65:15:51:94:03:8b:37:
         b9:93:bb:4a:9e:60:75:31:bf:49:8f:59:d9:e5:15:ef:3d:89:
         a4:10:bc:8e:34:9c:00:58:d6:ed:b3:e7:ee:17:de:3c:a5:d1:
         ba:97:bf:04:17:b6:bc:30:c3:a3:4c:7c:d9:2e:86:2c:bb:57:
         df:13:16:b6:f3:08:e8:df:8d:28:ec:52:59:f6:b6:28:16:ea:
         4b:c8:27:82:56:ac:2b:99:dd:dc:e6:4d:a2:9f:1e:c3:49:ff:
         a1:4c:a1:c5:df:69:c3:d9:f3:6e:62:b6:93:51:19:43:b3:47:
         77:f2:f6:90:cd:cc:b4:ca:9a:70:a4:72:a1:a9:b6:3d:04:2e:
         dd:c8:99:f1:49:ec:17:83:7e:3c:3c:43:fa:78:2f:f5:f2:2a:
         dc:ff:0a:d8:9a:ab:e0:bf:b3:f5:da:78:fd:91:2a:a3:7b:e1:
         7b:bb:ed:20:16:11:e2:13:a4:a5:bc:9c:c0:99:f1:80:6d:96:
         f9:8d:f0:43:af:f7:ce:3a:c9:9c:65:3e:bd:cd:a4:49:37:76:
         3a:f2:78:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:34:00 2026 by rpki-client