Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66909247-59ac-3c2d-b123-b617d30a3bfa.roa
File:                     66909247-59ac-3c2d-b123-b617d30a3bfa.roa (raw, json)
Hash identifier:          kwiOzcNMBs1moopuRiKcGdVjRQFg3dQ1LT1BXZNZlOI=
Subject key identifier:   49:12:87:88:16:3D:D6:EC:B4:04:A6:91:42:F9:4F:6A:CC:20:6D:9D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF325F11192563237B369A80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66909247-59ac-3c2d-b123-b617d30a3bfa.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        2600:8800:2f9c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:5f:11:19:25:63:23:7b:36:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=1e347116-a8ac-49d3-962b-379b927df421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:92:db:6d:cb:1e:3b:ed:6d:c6:32:aa:46:2f:
                    f3:a9:29:93:01:a2:81:75:7f:59:5a:66:f3:da:f1:
                    a8:7d:1a:08:ca:eb:7a:5f:d2:12:fa:4b:8c:ba:16:
                    c5:68:7d:2d:a1:bd:3a:8c:11:c0:44:1a:1a:88:4e:
                    35:65:61:4d:75:6b:8d:67:fe:27:5c:9e:4d:2c:0b:
                    7b:9a:48:f4:7f:67:ed:35:2b:e3:78:e6:41:2b:6b:
                    1c:d2:8f:c5:9a:50:80:4f:d7:6b:70:46:2d:6a:af:
                    7e:74:5b:14:65:6c:d8:f4:37:82:34:30:ec:67:bc:
                    0c:fe:36:83:a0:1e:05:57:27:89:0a:ae:ab:b7:9b:
                    30:7a:ef:19:aa:56:66:ed:2c:62:15:4b:6e:88:4c:
                    dc:9d:8e:e9:a9:48:e7:3c:90:87:03:be:76:80:f8:
                    f0:67:3c:99:06:3e:93:bc:2c:01:3c:8d:c9:b5:67:
                    db:3e:d8:44:57:ad:a8:24:ef:d5:73:cf:57:41:e8:
                    38:fd:63:ac:39:0d:5b:87:72:62:c4:87:ae:ff:64:
                    98:d2:fe:53:a9:15:48:7c:a0:f2:10:54:88:35:ff:
                    76:70:47:7c:02:32:c2:8b:f8:ea:97:54:dd:6c:18:
                    45:39:35:3c:c1:e2:43:86:94:c0:4f:26:2c:f5:39:
                    78:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:12:87:88:16:3D:D6:EC:B4:04:A6:91:42:F9:4F:6A:CC:20:6D:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66909247-59ac-3c2d-b123-b617d30a3bfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:2f9c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:0e:cc:cd:38:14:93:5f:84:af:b8:22:25:4f:64:ae:32:43:
         fb:5a:c2:90:e8:c1:67:44:8c:98:73:82:1a:55:42:8a:ab:03:
         19:a7:59:76:69:e9:f7:8e:67:0c:c1:e6:b3:5d:5c:85:2a:37:
         20:69:62:42:e8:03:06:a1:6a:18:77:7d:e6:8e:b4:1b:a9:34:
         da:3a:67:b3:fb:12:68:0f:36:0a:1a:98:a5:10:4f:d0:c7:0b:
         f4:a7:9e:42:cc:e3:ff:96:6a:66:07:c4:77:6c:3b:ac:68:93:
         d8:9c:78:e3:2f:51:20:54:da:56:03:8c:7a:ba:d7:4f:8c:54:
         fa:fb:e3:1b:1f:ee:6f:d9:03:2d:f5:36:1a:50:bc:a2:6d:15:
         c0:8d:3b:88:7b:67:ac:85:65:ab:78:9d:2e:da:e8:ac:4f:bd:
         cd:92:4a:ef:91:8e:22:73:11:c6:30:03:33:af:60:f5:a0:ad:
         fb:70:24:f5:1e:00:7b:ef:d4:9f:fd:c4:9c:e4:5c:bf:5c:2f:
         9b:78:c8:2b:6f:60:c2:6b:db:0a:17:c4:85:b5:74:9a:c5:d4:
         16:16:9c:d0:63:39:eb:91:3a:2d:06:35:7c:6a:95:ae:52:56:
         0a:53:da:f5:ab:7b:f9:30:13:33:a3:66:b0:f2:36:86:90:b7:
         f6:0f:62:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:57 2026 by rpki-client