Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ca4ecdf-2851-3ab4-a081-8321d0a959aa.roa
File:                     4ca4ecdf-2851-3ab4-a081-8321d0a959aa.roa (raw, json)
Hash identifier:          YRD0twM4fI4y/oTHCxpI1gXcuJZnZk+DhcXSqQugCN0=
Subject key identifier:   52:DB:E8:13:B6:6D:BF:E7:3F:8F:1E:74:49:D9:3C:8E:F4:F9:61:39
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF32A985562F42B320EDC240
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ca4ecdf-2851-3ab4-a081-8321d0a959aa.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        2600:8800:5690::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:a9:85:56:2f:42:b3:20:ed:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=31b2b9b8-6bc9-4095-a946-be9cd6b6699d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ed:da:49:57:6b:2f:fb:31:38:d8:e9:07:f1:
                    4e:3b:92:bd:91:c8:19:05:5c:70:26:33:2d:af:c1:
                    e8:5b:29:e4:cb:17:e7:a7:90:76:09:b5:68:33:cb:
                    47:69:1c:05:be:3c:9a:15:6d:95:e8:4d:ac:4a:c2:
                    6a:86:f6:53:08:19:bd:5f:52:1d:95:41:bc:e9:6b:
                    b8:30:3f:8a:00:39:b4:25:af:90:01:dd:8a:86:77:
                    e2:25:92:fa:e2:7e:16:70:5e:09:a0:0d:e9:9a:72:
                    9c:65:99:0b:eb:7e:3d:d4:5a:e0:24:bd:0f:26:81:
                    d3:95:35:a8:af:0b:75:21:c3:04:8f:e0:a4:a3:3d:
                    8e:f2:5d:07:b1:ac:57:cb:5a:e0:e7:8f:fd:d4:9a:
                    ff:db:e0:4a:a5:7b:27:0b:22:ec:26:d6:7c:f3:66:
                    11:3e:ed:ff:db:45:15:e9:00:68:6a:b5:e6:b4:7c:
                    9a:65:79:dd:a4:8c:4f:70:b0:e2:e8:47:d0:2b:f7:
                    13:ef:03:35:5d:30:88:45:10:7d:75:26:cc:57:5c:
                    f0:de:e1:f2:b6:b5:cd:6f:39:a0:4a:e1:de:bb:55:
                    8d:35:30:0a:93:16:94:e1:e2:20:91:1b:55:4a:a9:
                    58:24:cb:3f:14:97:33:c3:40:c3:72:0f:1a:2b:9e:
                    3d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DB:E8:13:B6:6D:BF:E7:3F:8F:1E:74:49:D9:3C:8E:F4:F9:61:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ca4ecdf-2851-3ab4-a081-8321d0a959aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:5690::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f4:e9:18:78:bf:5e:e6:4a:15:a6:a4:9e:25:e2:70:f0:34:
         ce:f3:93:06:b9:e5:45:45:f1:a1:38:87:c8:5b:c3:dc:85:dc:
         ef:7d:b3:61:db:4b:c0:8e:4f:8c:6c:2a:73:0d:51:a0:a8:ba:
         bb:ce:f1:c3:03:57:6f:13:50:75:35:e2:8e:de:46:72:0b:5f:
         27:2a:f9:ff:02:8e:17:e6:0e:aa:55:d0:60:37:31:6e:36:78:
         c2:20:d8:9e:a1:6c:17:71:a9:29:14:09:81:f9:68:95:fe:b2:
         6f:10:7f:a8:5c:8a:c9:a8:fc:e1:18:65:a3:82:51:e7:c0:ed:
         b3:2d:81:ba:ae:1a:4f:0e:c4:0e:31:a6:ab:e0:1e:49:09:c3:
         f0:2d:2d:06:29:d0:7d:4a:cd:1f:7b:53:92:38:8d:f3:dc:5b:
         7e:58:92:de:7f:35:54:fe:d7:66:07:f3:4c:bc:15:fa:f0:7d:
         6f:e9:1b:aa:bd:08:d9:28:c8:f8:6f:2c:00:8a:e6:fd:9a:27:
         c9:65:6d:12:fd:06:1b:12:42:87:a9:b4:ac:fb:28:a3:c8:1c:
         b4:dd:33:db:66:b8:0e:4e:1f:db:e9:05:6c:19:97:ac:03:31:
         76:66:3b:ae:e2:f8:8b:f6:4c:dc:2f:8f:fd:fd:ac:eb:6b:62:
         94:5f:2d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:58:49 2026 by rpki-client