Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e49bbe8-aef2-3fab-b3da-4146f355d6f9.roa
File:                     4e49bbe8-aef2-3fab-b3da-4146f355d6f9.roa (raw, json)
Hash identifier:          fX0fUApWBEdau4x1TBX7KPvlgiq8Xj0pO3my2Pe5o2o=
Subject key identifier:   A9:3A:94:0A:D8:3F:CF:0E:C4:DD:1D:B5:30:82:8A:46:64:E9:F8:A5
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF32C0F66E7215458BB3A380
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e49bbe8-aef2-3fab-b3da-4146f355d6f9.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        2600:8800:2618::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:c0:f6:6e:72:15:45:8b:b3:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=9789aa1c-1a25-45af-9ef1-d38843d9df7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:32:db:47:20:6c:74:e9:df:e5:57:77:b3:c2:
                    27:1e:52:86:6c:a8:96:7a:a0:9c:bb:43:f3:b4:b1:
                    df:42:06:27:dc:a0:53:0d:b1:bf:80:87:02:86:ce:
                    9c:96:4e:73:94:4a:71:93:81:86:04:64:ff:4f:09:
                    7e:09:02:10:86:f7:0c:46:a8:26:bf:7f:50:a1:a3:
                    66:24:e0:31:f8:a2:6e:9c:20:c3:8e:98:62:6b:18:
                    a4:ac:4c:c4:61:04:f1:e1:4c:82:fe:1a:b6:ba:93:
                    ed:03:65:24:14:40:da:74:cc:eb:d8:19:c0:c8:fd:
                    7c:4b:9a:6d:04:ff:b2:11:88:3b:6b:5c:0a:76:01:
                    78:79:38:f0:c1:63:d6:41:61:8c:dc:d6:84:df:f7:
                    46:b9:1b:01:50:03:bc:38:b5:c0:e0:fd:60:3b:97:
                    a5:52:f9:cc:9b:9b:88:e2:df:2a:a5:f7:83:54:aa:
                    d3:46:6b:23:6c:b7:4d:78:7b:69:f9:80:33:99:7a:
                    6d:0a:6c:c0:17:62:40:b4:91:43:16:f1:e6:62:0c:
                    e6:49:f5:8d:fd:ce:31:37:b9:99:65:cb:f6:32:cf:
                    c2:d4:81:47:a9:8f:f5:a9:d5:65:94:88:5e:8b:6c:
                    a1:ba:f5:63:90:4e:5c:98:0f:37:54:86:6c:5e:4d:
                    c7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3A:94:0A:D8:3F:CF:0E:C4:DD:1D:B5:30:82:8A:46:64:E9:F8:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e49bbe8-aef2-3fab-b3da-4146f355d6f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:2618::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:36:41:ac:67:be:62:73:ce:fd:41:10:60:2d:00:7a:bd:8d:
         41:b2:14:63:6f:0f:bb:f1:34:55:2c:b8:1a:52:81:4c:5d:4b:
         42:6a:09:a7:cb:4c:e9:a1:fb:ab:f5:0f:c3:d8:4c:ab:cb:d7:
         c3:cd:54:8d:f1:71:7b:03:9b:d0:59:5e:aa:1d:18:ad:ca:d1:
         fb:92:05:f5:fc:bf:32:17:1a:39:0b:d3:6e:4d:68:11:e4:86:
         4b:f4:8b:fb:73:eb:8f:b7:11:0d:2d:23:bd:b0:58:29:3e:87:
         f4:7c:77:5b:f3:ed:73:25:a6:38:ce:38:69:58:55:d3:80:46:
         33:96:aa:cc:16:62:91:15:31:3e:cc:90:14:82:84:92:d4:69:
         a4:10:6e:5e:02:89:05:be:4e:3a:bc:06:e0:ae:31:05:ae:58:
         b3:75:ba:43:59:6d:e3:c7:d8:fe:30:4c:81:c7:24:03:ae:a9:
         81:a4:9e:fa:52:a4:d1:c2:b3:13:52:e9:45:14:52:eb:90:21:
         db:40:e2:79:39:8e:2e:ec:92:c5:55:fe:b2:0b:a6:d7:53:cb:
         ab:95:1b:ba:0f:3f:44:0c:49:c9:6a:a5:c8:54:b9:06:62:e9:
         31:fd:a8:69:cd:80:20:f7:a2:8f:34:bf:e3:97:4e:c0:ea:df:
         ba:ab:a4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:58 2026 by rpki-client