Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/556f4775-fe86-320d-b820-7bfd6cba0b79.roa
File:                     556f4775-fe86-320d-b820-7bfd6cba0b79.roa (raw, json)
Hash identifier:          4BoiXYP6zwtdJVwBs9q6RKbqbboYTAQik+pIOnvZRhQ=
Subject key identifier:   71:A2:46:34:67:B1:AE:0F:87:49:9B:1F:CA:A1:DF:46:56:6E:21:3A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EA01560CE14A5B1E7C53322C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/556f4775-fe86-320d-b820-7bfd6cba0b79.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     22773
IP address blocks:        2600:8800:8600::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:60:ce:14:a5:b1:e7:c5:33:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=b381ab03-bc5b-44d4-b3e8-fa0d38c6dcf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ba:8a:a0:87:2f:85:77:42:e4:05:9b:77:b1:
                    cb:c2:dd:9b:d8:57:58:26:ef:9a:cb:0d:1c:91:24:
                    fb:6c:32:1e:d0:d1:94:c7:49:5e:33:74:3f:fc:09:
                    b6:9b:58:01:47:61:c8:75:61:e7:8b:f4:3a:a5:cf:
                    dd:41:4e:91:57:1f:0c:4c:2a:19:b7:76:f2:f3:90:
                    0e:67:22:07:37:db:ee:9f:de:c3:6c:08:70:82:1b:
                    87:28:d2:5f:b2:2a:4a:cc:58:37:2c:ad:8e:ff:c5:
                    c4:5c:05:90:4d:c4:0c:df:e0:b1:be:b9:9e:27:a6:
                    59:fe:c6:2b:da:9d:67:f5:e6:95:88:67:94:24:2f:
                    64:a2:91:a7:08:bf:50:38:5e:f0:e6:08:83:e9:e3:
                    20:b2:06:0c:fb:e2:20:e0:5a:cf:da:ca:38:4b:4c:
                    de:bb:31:8e:df:3b:7e:a8:b7:73:37:1e:78:6d:e0:
                    5b:64:79:9b:68:15:fc:ce:2e:47:11:31:b5:e6:7f:
                    af:5f:ec:9e:24:ec:bc:c5:44:7d:5f:dd:4d:1d:49:
                    84:9f:62:57:d3:80:20:5b:c8:ba:0f:20:ab:71:fc:
                    4e:a6:65:2c:1d:22:45:80:29:37:13:91:ff:f3:e6:
                    20:59:20:30:0c:21:b8:bf:e0:03:96:2f:aa:6b:bd:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A2:46:34:67:B1:AE:0F:87:49:9B:1F:CA:A1:DF:46:56:6E:21:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/556f4775-fe86-320d-b820-7bfd6cba0b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:8600::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:42:98:20:8d:d9:7f:8e:f1:08:67:34:ed:bc:c9:24:cc:66:
         1f:ad:5d:2b:61:bd:7d:f7:85:80:1c:5a:f2:97:70:42:f1:ac:
         32:3c:62:cd:75:51:f3:8f:65:84:ac:ca:5b:0a:5b:3c:c3:75:
         c9:c5:fa:d9:ce:1b:84:85:54:42:35:74:d1:ba:28:97:96:df:
         e8:b2:9d:5f:ff:89:71:fd:b5:01:68:fe:a0:33:6d:1b:37:14:
         9b:c2:f5:7e:88:ab:13:ef:ad:95:0c:36:71:94:24:b4:b2:8e:
         b1:f7:8f:0e:cc:86:db:c7:cb:4d:10:f8:cf:81:aa:da:b2:47:
         7b:47:07:81:d4:88:33:c4:e0:70:52:f4:85:ab:b6:b9:da:63:
         88:01:60:30:ea:ae:9d:d0:70:0d:60:e7:5f:a2:e1:6e:4a:22:
         31:82:ec:5c:29:85:12:2c:a5:e4:45:92:e2:09:68:ce:2b:f3:
         04:bd:6e:49:a4:4c:d3:ce:c3:86:f9:7f:6f:51:57:5b:ad:76:
         cd:84:cd:e3:f8:9c:35:3c:5b:e0:25:fa:6d:0d:78:9c:17:ba:
         88:a6:10:8b:3e:39:95:c6:2d:5e:89:f7:03:73:dd:98:52:6d:
         4f:ef:d9:ee:64:6e:3c:0c:9b:ee:10:3e:91:ec:3a:09:99:9f:
         f5:29:48:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:17 2026 by rpki-client