Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3c3a9f9e-876c-3bf6-8d6a-03545548a319.roa
File:                     3c3a9f9e-876c-3bf6-8d6a-03545548a319.roa (raw, json)
Hash identifier:          l/TNaRZtM3sYB82rXIqgMq32bro/7Erh0CBRF1Nog90=
Subject key identifier:   80:3D:5E:44:81:9D:8D:78:28:27:D9:9F:06:6D:D6:E0:46:FB:0C:39
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F427831EED7FD5BB6E091EF80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3c3a9f9e-876c-3bf6-8d6a-03545548a319.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        2600:8800:a880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:31:ee:d7:fd:5b:b6:e0:91:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=78af3fb9-f3b9-4d82-b5cf-0d31c6650c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:26:36:9e:7e:65:95:f2:3c:f8:b9:15:9f:e4:
                    12:ab:6c:fc:29:11:81:5a:32:a5:8b:72:b7:7a:10:
                    a9:9e:8d:1a:b2:2c:40:85:a6:42:5f:6f:e6:44:c1:
                    9f:82:a3:d0:30:4e:fa:a6:0b:b5:d2:6f:67:0c:b6:
                    54:2b:ed:df:05:cb:33:16:d8:2f:2f:73:91:45:6c:
                    ee:80:97:7b:54:60:aa:a2:8c:44:a0:0d:bf:67:b0:
                    e5:9a:ed:24:3b:b5:e3:12:00:37:08:af:99:39:95:
                    10:25:0a:59:12:06:d2:05:ae:84:34:0b:18:ae:66:
                    83:21:e2:74:1d:15:4d:58:33:42:44:f5:a1:a8:74:
                    de:17:1a:98:9e:b9:de:fb:4c:ec:35:5f:68:e7:24:
                    59:4a:85:bb:27:ea:e5:25:68:4a:a1:2c:84:2e:9e:
                    25:ce:dc:cc:33:24:7f:a2:76:08:ed:25:c6:87:d5:
                    90:a0:7e:3a:54:f0:0d:ff:a3:53:bf:b5:66:93:6a:
                    d3:a1:18:eb:27:44:24:97:41:ab:91:99:6b:72:46:
                    2c:04:5d:c3:ec:fc:94:c1:54:fc:cd:13:1d:2d:34:
                    4d:fa:e9:60:35:f4:6a:72:44:5e:64:a2:b5:09:e1:
                    45:1f:12:9e:24:f0:5c:44:3f:4b:72:8f:a2:00:88:
                    2f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3D:5E:44:81:9D:8D:78:28:27:D9:9F:06:6D:D6:E0:46:FB:0C:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3c3a9f9e-876c-3bf6-8d6a-03545548a319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:a880::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:3c:a5:2e:51:7d:fc:e2:cf:87:d7:fd:26:7f:7c:ae:43:c9:
         a1:78:a3:e6:d3:ba:43:e0:5e:a3:54:11:84:5c:dd:d2:95:ed:
         ac:e8:4d:b5:50:51:09:6d:52:8f:97:ac:df:27:04:be:aa:32:
         a2:7c:7c:a2:59:98:69:71:c8:d1:90:31:c2:82:1d:04:5c:cb:
         0f:3a:1a:56:c7:4c:2c:7d:b8:13:53:10:00:df:29:70:58:a4:
         30:bd:38:52:8c:4b:92:15:89:f2:07:47:9a:45:89:d5:81:76:
         f4:8a:5f:ea:32:81:da:fa:07:45:1a:1b:92:2c:0a:db:a4:f3:
         86:52:62:94:5d:c5:c6:bd:08:7f:3d:9c:1e:c7:0a:58:dd:da:
         33:8a:71:73:6e:66:91:57:ab:9a:5c:c6:6a:0d:8a:36:e2:5b:
         25:bc:1d:ea:15:04:e2:c9:b2:49:fb:2f:cb:6c:2c:a3:06:61:
         54:4b:0c:05:57:47:cc:19:de:8c:70:17:36:c1:f3:de:ee:47:
         47:15:97:bf:1a:db:3f:97:c2:29:31:56:a2:87:9b:3b:09:7e:
         85:23:cb:9b:af:7f:45:75:11:0d:38:a1:44:8c:0d:10:48:f4:
         3a:62:0b:78:49:4f:07:ba:a1:b2:f8:66:0e:f4:43:00:36:bb:
         4f:a7:04:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:30:52 2026 by rpki-client