Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51f3f995-c5f8-3fbf-a770-d3ef2eb289ea.roa
File:                     51f3f995-c5f8-3fbf-a770-d3ef2eb289ea.roa (raw, json)
Hash identifier:          lCGqudBGqWV/qNpDw9telIsLSGJLU08lQsG73l90VgA=
Subject key identifier:   3D:A5:01:AC:68:7C:9B:F3:38:AA:F9:7D:D2:16:46:12:6B:86:CB:6C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EA01548AF8CE920B89C6A2500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51f3f995-c5f8-3fbf-a770-d3ef2eb289ea.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     22773
IP address blocks:        2600:8800:8602::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:48:af:8c:e9:20:b8:9c:6a:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=45c7f88f-af81-4c5c-affe-8352067dbf5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:79:af:84:3e:76:77:04:14:96:00:85:c8:d3:
                    cf:61:e6:3e:f4:4e:6a:41:6f:fc:60:21:52:8f:72:
                    ed:a6:75:2c:58:34:6f:f5:c9:c4:c3:26:b3:37:fd:
                    ac:e2:35:cd:76:93:5b:f2:15:db:98:06:f3:97:59:
                    e4:b7:ea:12:3a:a9:5e:8d:1a:81:d1:12:30:2c:84:
                    31:26:33:31:50:26:01:64:17:d6:57:58:c9:22:99:
                    1e:93:0f:10:ff:07:4f:8b:ca:28:cf:35:a6:f5:97:
                    5c:f8:e3:ce:60:07:0c:6b:82:f5:0d:b0:37:0c:de:
                    2a:42:5c:9c:a7:96:71:a3:2e:ac:59:4b:8c:cb:11:
                    6d:0e:f0:da:59:23:de:8a:c5:3e:6e:45:86:d2:d7:
                    da:21:94:90:d8:a5:2e:9c:23:f6:13:08:04:cd:3e:
                    1b:7a:45:93:36:2d:b3:b9:6b:a7:a0:11:9a:b8:5e:
                    ec:d6:92:63:55:a5:04:7b:d8:1f:81:09:63:f0:b1:
                    55:65:77:3e:8c:a9:3b:99:c5:e0:d7:e5:73:02:02:
                    d6:9c:94:b0:cf:27:c3:e1:3f:50:93:f6:02:6c:89:
                    7c:77:28:55:e7:19:bb:32:32:8a:fc:06:b6:e8:14:
                    1d:a3:bf:9e:11:c6:99:75:9d:90:1c:43:05:72:09:
                    6e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A5:01:AC:68:7C:9B:F3:38:AA:F9:7D:D2:16:46:12:6B:86:CB:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51f3f995-c5f8-3fbf-a770-d3ef2eb289ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:8602::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:59:99:10:8f:e2:3f:af:7d:13:a2:7d:da:d9:b4:be:28:9a:
         23:e5:aa:1c:6e:b6:4e:0e:ea:2a:5f:e2:f9:fe:15:1c:e0:4f:
         c7:38:70:10:05:55:1e:a4:e0:c7:d4:f3:4a:fb:6f:1a:a7:20:
         bf:d1:04:c9:50:f8:27:8e:5a:48:f3:05:0c:7b:68:fc:06:04:
         8e:16:56:e8:0f:0f:bc:64:b1:c5:8d:f1:39:62:29:31:9d:a3:
         e6:2d:16:1a:81:1c:6a:cd:63:94:5a:f7:dc:a2:97:b4:34:33:
         1a:09:d4:93:f4:29:77:ab:00:ac:80:5c:20:11:4e:87:6b:a9:
         c1:c6:d3:00:95:6d:c3:23:14:80:61:48:9a:dd:94:2a:52:1e:
         ca:0a:a8:e4:05:21:c6:85:7a:e1:d7:86:da:5b:f8:d8:c7:0b:
         45:1b:75:ca:f7:b5:14:65:47:4b:1d:b7:84:8e:d2:97:e1:08:
         7b:a1:30:cc:f4:d8:81:4f:e1:f4:05:57:20:79:4b:3a:4c:de:
         42:03:2b:8c:e4:74:51:57:45:5b:bd:09:fc:c5:23:94:4b:0a:
         c5:07:35:6e:a9:e4:6b:b6:aa:6d:ad:e0:c6:c0:b0:bd:87:eb:
         9c:5f:21:f3:a1:c0:a0:0c:ad:a8:ee:e5:42:cd:25:f2:d9:d7:
         25:d4:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:57:27 2026 by rpki-client