Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/60fff28e-9544-3edb-a2d1-deeefbb9cdb6.roa
File:                     60fff28e-9544-3edb-a2d1-deeefbb9cdb6.roa (raw, json)
Hash identifier:          h8xyRRdB0GYs92fDfCxxC7f7lT7vo+uLqk11FNSJZ1M=
Subject key identifier:   09:C7:92:47:F5:51:32:DA:C9:3E:AE:CD:8C:6D:A6:DD:33:26:06:81
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF32920A0588108A2493CD80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/60fff28e-9544-3edb-a2d1-deeefbb9cdb6.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        2600:8800:3e06::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:92:0a:05:88:10:8a:24:93:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=f1686385-1b4c-452e-8116-8ba6dbe7e611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:6a:cd:b2:ab:39:d9:21:58:48:3e:b2:f0:
                    3c:61:51:ba:cc:8d:a1:48:f7:37:61:57:f0:aa:04:
                    a3:27:c4:42:f1:f4:35:24:dc:0a:cf:2c:96:1f:c8:
                    b9:b5:77:ce:5b:ad:c2:41:8d:5d:99:e0:91:c1:79:
                    69:83:b3:22:a8:16:dd:26:f8:04:f6:c7:f6:da:0c:
                    ed:cb:7d:84:24:d0:2d:d9:1c:80:86:11:59:d6:10:
                    01:b9:e2:44:15:16:ce:2b:ab:26:7d:90:7f:89:03:
                    3b:b1:85:74:bc:74:f3:29:f4:e8:0d:14:07:7a:5d:
                    51:ca:9a:da:a2:93:db:b9:e4:42:0f:6f:fe:57:84:
                    fb:1f:72:92:93:f0:7c:8e:b6:5b:3e:98:90:74:29:
                    9c:0b:60:6a:7f:5e:41:dc:c3:ed:9b:35:95:7b:9e:
                    47:fd:83:ce:45:f2:4f:16:08:0a:ae:42:fe:7e:9d:
                    c0:65:e2:f5:8a:9d:91:16:bf:ad:1e:58:19:0b:a8:
                    4b:49:78:74:41:cc:f5:3e:c2:6b:09:72:95:25:a8:
                    c8:02:f0:fc:9e:ce:53:40:61:ea:bb:48:28:ce:54:
                    d7:47:a0:e3:a3:76:59:99:40:47:1f:87:61:c2:d7:
                    8f:17:e2:f6:ac:e1:0d:f6:c1:9d:69:ea:5f:a4:fb:
                    12:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C7:92:47:F5:51:32:DA:C9:3E:AE:CD:8C:6D:A6:DD:33:26:06:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/60fff28e-9544-3edb-a2d1-deeefbb9cdb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:3e06::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:3e:a5:f2:31:49:c9:c5:b8:da:05:4a:07:a7:fb:5a:49:21:
         65:7f:49:ea:32:da:11:8c:2e:a8:af:1b:06:97:33:ab:ee:7e:
         06:5a:26:bb:74:8e:2f:07:03:eb:47:ba:d1:6c:3e:bf:d3:27:
         f8:e7:e1:f2:86:b8:a3:a7:6f:80:53:3d:38:b0:d1:73:f7:36:
         98:9e:bf:f1:24:99:db:60:70:2a:e5:fb:d3:d3:30:b0:42:e5:
         f4:f7:2f:01:a7:ce:66:d1:f5:71:66:7d:44:a9:1f:69:67:e6:
         be:72:ee:95:17:c8:18:51:17:b0:dd:40:07:4f:3c:6e:b5:aa:
         85:e2:26:23:ff:b8:d2:d0:80:a6:c1:36:be:e1:9d:c1:92:ee:
         98:88:a8:1a:90:1f:54:c9:b6:32:4d:82:7d:5a:60:f8:ba:35:
         61:35:eb:e6:dd:f9:98:8a:58:47:67:d0:48:92:99:f5:ba:29:
         3f:03:28:7c:6a:3b:cf:65:38:d9:f7:77:55:d9:44:d6:59:f8:
         48:b3:fa:43:33:18:2e:94:fd:2e:ea:09:56:24:e6:cf:99:50:
         77:3d:e7:a6:2e:ab:39:e1:5f:7b:f6:43:3c:63:58:03:f9:06:
         b2:37:85:78:a9:49:59:2a:1f:cb:bb:9a:9a:8b:f5:75:a6:97:
         7d:6f:61:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:44 2026 by rpki-client