Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59baf9f8-9e53-3c02-92c5-92bbe9726acd.roa
File:                     59baf9f8-9e53-3c02-92c5-92bbe9726acd.roa (raw, json)
Hash identifier:          qXyilgRGnNEqV/HSJmZp4twtnBBhKTq7GK0Uif92daE=
Subject key identifier:   6D:1D:42:93:00:F2:51:2C:7B:FA:B4:0D:92:D5:2D:78:06:DE:53:E1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DBFD04AA0BFCA247A41C57BC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59baf9f8-9e53-3c02-92c5-92bbe9726acd.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     22773
IP address blocks:        2600:8800:4c60::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:4a:a0:bf:ca:24:7a:41:c5:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=cdd249e1-cf4b-4f7e-9c81-5b3387f2784a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:3e:f8:f1:d2:06:fa:19:88:07:1e:e4:7e:
                    71:05:48:19:fb:e2:50:80:53:fc:be:47:90:61:9f:
                    54:05:bd:7f:7c:80:ac:b1:b9:50:e0:51:b0:f4:f3:
                    01:2c:9f:41:19:3c:06:87:66:10:28:9c:44:49:90:
                    3f:4b:5f:79:3e:cd:13:c4:57:2b:b0:85:f7:a5:41:
                    d1:5b:ad:f7:52:42:07:bc:a2:d5:a8:92:df:76:a8:
                    d8:31:e3:6d:27:76:5c:a5:77:9d:cb:ab:b8:dc:a5:
                    16:5b:78:73:6d:11:30:06:83:46:70:9a:20:bb:a5:
                    b4:61:99:6e:4e:d6:b7:fb:4c:6d:85:3e:3c:98:7e:
                    50:6d:21:eb:96:92:5d:e2:28:f2:8a:ea:fa:2f:4f:
                    bd:63:40:eb:12:9d:ed:0d:9f:07:58:1f:3e:03:1b:
                    11:09:2f:14:a3:63:45:19:3b:d0:9f:2f:5a:0f:32:
                    06:4f:1e:5b:4f:50:e5:2e:24:37:00:6d:dc:78:66:
                    d0:8c:fa:6d:ca:45:81:cd:e2:4a:e1:fb:23:17:b4:
                    7d:96:de:85:dc:f7:81:35:dd:bf:9b:42:de:e3:a6:
                    2b:b2:8a:8a:7b:34:a5:3a:04:19:83:6f:cc:34:ed:
                    4d:cc:bc:8f:b0:aa:ff:4b:79:1c:41:2c:18:88:5d:
                    28:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1D:42:93:00:F2:51:2C:7B:FA:B4:0D:92:D5:2D:78:06:DE:53:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59baf9f8-9e53-3c02-92c5-92bbe9726acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:4c60::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:10:8a:58:e9:b3:ca:b5:0a:ee:57:e6:07:17:9d:b9:ac:f7:
         78:ac:7c:96:b7:1b:3c:a1:4f:05:9d:f0:9d:6b:8a:57:18:3b:
         4a:f1:25:41:df:15:73:35:25:29:c9:c8:61:b5:39:a6:3d:1d:
         04:1f:dd:be:13:9b:84:08:c5:46:b2:e3:c8:75:00:1c:2e:19:
         ed:2e:2f:c2:93:eb:58:22:c7:73:3e:b5:de:44:49:35:39:ed:
         4b:ab:41:35:19:db:11:d4:08:7f:a2:1a:04:c7:9b:9a:15:e2:
         f2:5b:3e:aa:6f:15:88:ff:7b:23:04:6b:74:00:23:2e:58:7e:
         46:20:b1:de:7a:f3:5d:bf:66:b4:42:4c:47:ca:1b:aa:2e:a7:
         57:2a:59:2a:a8:c7:72:cc:09:9c:96:c5:41:8f:21:16:0c:37:
         61:00:90:b3:1d:c2:ba:f3:a5:cf:da:00:c5:59:e1:11:50:5a:
         f9:76:ae:a4:88:79:79:f4:6a:e5:e7:4d:d6:db:a5:b1:e2:9b:
         31:77:43:a9:a7:82:d0:cd:b2:19:15:bb:98:16:8e:c2:c4:4b:
         a1:1c:9d:f2:67:f9:d1:b4:a5:b1:fc:cb:78:b0:04:1c:8a:80:
         8a:d1:58:a2:be:c0:90:fb:95:57:d8:23:c8:03:30:83:85:ae:
         f1:cc:ef:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:56:14 2026 by rpki-client