Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/389efdd0-3f48-3fce-9374-6a5befd823be.roa
File:                     389efdd0-3f48-3fce-9374-6a5befd823be.roa (raw, json)
Hash identifier:          fc3T5b9Jo66HXPRtxDLbRrgcs+fIuyVxgI+3nolNzXU=
Subject key identifier:   B2:6C:F3:E7:27:E5:DF:9B:6E:96:48:BF:E7:D5:D4:6F:62:BE:03:40
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CFDEAA2FCAE10D3EB45F6EB00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/389efdd0-3f48-3fce-9374-6a5befd823be.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        2001:579:a088::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:a2:fc:ae:10:d3:eb:45:f6:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=3d4a6a0c-5841-4959-9150-c77376c83d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:8a:e0:a0:dd:26:77:56:29:a6:37:ef:ab:
                    cd:c2:14:df:85:7e:6a:4a:2d:96:10:d0:e0:fa:22:
                    68:a4:1c:09:75:c1:f2:96:24:5b:1a:6d:bc:44:dc:
                    14:c9:91:7a:03:34:2b:ab:bb:dd:a8:0d:94:61:78:
                    c7:04:18:5c:4b:64:d2:ef:34:38:55:4e:41:55:87:
                    54:b7:4b:6a:ca:41:a5:f4:49:c1:5a:20:6c:17:47:
                    e8:9e:a9:60:f6:06:92:58:d6:60:b5:48:e8:d8:00:
                    73:b7:2b:23:6f:48:db:aa:45:8b:39:65:4b:87:6c:
                    49:c4:18:61:d5:46:b2:b9:60:29:b8:c2:e2:f3:b9:
                    e6:24:c3:7b:a4:70:11:89:66:82:f8:f3:80:33:01:
                    46:eb:17:78:ce:00:c9:49:19:10:7f:87:91:27:67:
                    77:43:1c:e0:2f:8f:13:c8:65:87:cc:d6:7b:90:92:
                    48:46:58:da:3c:bf:10:bc:a6:38:f3:f3:3c:19:03:
                    e7:3f:75:21:b3:ea:b8:c3:61:ba:aa:fd:84:98:01:
                    b2:1d:59:e8:ba:71:7a:1c:e9:ce:e3:24:55:d8:b2:
                    6d:15:9e:f9:4d:f9:26:1b:86:b9:31:8b:40:8a:da:
                    4a:ce:36:cb:5d:c0:5c:51:d4:ad:bd:8f:c7:e2:f5:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6C:F3:E7:27:E5:DF:9B:6E:96:48:BF:E7:D5:D4:6F:62:BE:03:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/389efdd0-3f48-3fce-9374-6a5befd823be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:a088::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:51:8f:ba:c5:8f:41:4d:c4:ab:56:51:30:d0:f9:f9:fc:e8:
         c5:84:b3:ea:55:26:67:85:cd:e0:a7:7e:36:2d:4b:86:90:b5:
         69:f2:a1:51:35:10:61:b5:ab:d4:f3:dc:c4:fc:19:ff:fc:10:
         8b:bd:22:fb:af:ac:01:ab:5c:34:ad:4f:85:01:0d:32:90:db:
         af:12:fc:48:22:30:9a:85:a5:f1:09:c2:94:86:54:6e:92:f4:
         6c:22:ab:7c:27:34:c4:cd:b8:74:ac:02:87:6c:ee:ad:2a:37:
         79:75:64:bb:90:79:37:64:85:55:5f:11:d4:ce:7d:82:d4:7d:
         b8:4d:48:66:a6:30:1a:3d:da:a6:a6:df:a0:0b:17:2a:08:32:
         fb:83:bf:6e:b3:35:85:ee:db:e9:11:c8:51:51:33:44:27:fa:
         62:65:a6:78:72:b2:e9:0b:44:66:c5:09:12:48:47:a2:59:7f:
         61:93:e0:5d:68:06:d3:29:36:8c:1c:45:ae:69:a6:dc:10:ff:
         c0:c1:b2:df:48:89:82:29:f6:4b:7d:60:e6:a7:c9:f8:22:a2:
         e4:26:b2:dd:ed:06:33:d1:af:3c:75:ab:3b:1f:49:c7:3a:87:
         85:86:82:69:6f:8c:90:21:7d:f0:68:31:06:d1:89:07:a6:24:
         7b:3e:81:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:36:04 2026 by rpki-client