Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/823cb91a-fb7e-3a57-998a-fcf3baaf535e.roa
File:                     823cb91a-fb7e-3a57-998a-fcf3baaf535e.roa (raw, json)
Hash identifier:          IdEFmHKVNiMGY9/wvFToDr3WYo1hcCWTgk5Ygh3DCEQ=
Subject key identifier:   FC:3C:1D:BC:61:45:C8:DA:6B:CC:78:8E:00:42:DE:7B:3E:0C:D6:17
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF32B39FB3F000DB7B88B480
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/823cb91a-fb7e-3a57-998a-fcf3baaf535e.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        2001:578:8b1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:b3:9f:b3:f0:00:db:7b:88:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=48159ef8-5212-4307-960b-72e528ae45a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:0e:cb:cd:a2:51:eb:e9:ce:1e:31:4c:1b:
                    fe:8a:d5:d9:3f:5c:d2:15:50:39:de:db:4c:f7:86:
                    52:dd:23:e7:22:de:ae:eb:9e:65:fc:ab:42:fa:18:
                    03:77:fa:09:9b:50:63:84:f9:90:3f:e4:2c:e5:79:
                    47:2c:1b:3e:57:81:73:40:00:78:9e:e6:46:e6:2c:
                    16:84:27:7a:09:49:b8:42:2e:b1:d5:ef:5e:9e:6f:
                    60:f1:ee:3e:f6:11:f2:42:d3:88:b4:9b:01:f3:95:
                    7e:6d:ea:b8:58:27:f6:11:22:a6:24:39:a5:19:92:
                    a5:ae:09:5e:cb:8c:7a:36:c0:7a:71:1a:9f:10:58:
                    2b:16:9f:6c:db:51:66:70:51:93:16:7e:e2:8d:2f:
                    84:a4:70:33:46:72:d5:27:fa:bc:d3:15:b5:87:ef:
                    1b:7f:76:53:cb:a9:3a:7c:43:3a:03:f0:91:1a:81:
                    09:71:56:e8:ec:7c:15:7d:1e:05:93:e0:0b:7c:9f:
                    08:37:79:64:26:5e:c9:88:d6:a6:05:4d:dd:71:58:
                    34:1c:8a:8f:44:2a:6e:0c:21:ef:70:21:1f:ca:d9:
                    9c:e7:87:e6:04:95:e0:c8:f4:58:f6:22:d1:68:71:
                    89:35:f0:e7:de:72:a1:01:9d:0e:6c:bc:22:9b:14:
                    c6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3C:1D:BC:61:45:C8:DA:6B:CC:78:8E:00:42:DE:7B:3E:0C:D6:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/823cb91a-fb7e-3a57-998a-fcf3baaf535e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:578:8b1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:2c:b1:5c:34:48:d0:ca:fd:02:a9:32:2a:e6:2a:cf:15:56:
         70:bd:aa:e9:dd:43:3f:37:58:71:db:e6:fd:60:7a:70:99:ff:
         3c:e9:8c:41:2a:6d:07:01:4f:0a:e1:79:17:9a:40:d8:7d:a6:
         f3:70:30:00:4c:f2:f6:0b:f9:23:b5:ed:69:bb:30:a0:0d:0c:
         a4:83:dc:19:eb:ae:4c:36:13:2e:33:0a:b4:3c:27:19:de:36:
         05:b9:32:89:59:e3:bb:ed:2d:62:c1:9e:1a:09:df:89:30:c7:
         c2:1e:1a:4e:bc:ed:b0:fc:ab:e8:6d:96:ff:a1:17:29:08:ed:
         68:eb:78:e6:dc:28:6a:34:63:66:15:00:66:c3:b8:0c:0e:4d:
         29:81:aa:da:81:25:ec:63:f6:44:4b:7b:45:5d:05:7d:1f:1b:
         24:92:7e:d1:ae:5d:41:c2:9a:1c:5e:11:96:a2:f3:66:e7:6a:
         50:a8:de:a6:66:a3:2a:d2:b9:f3:69:79:16:0f:34:90:45:40:
         1b:67:1d:e3:6d:45:2f:86:ba:a3:9d:7e:75:dc:d9:05:31:be:
         52:bf:f2:8a:a1:cd:be:80:ac:30:ba:62:7d:45:5c:f0:8a:69:
         9c:d2:f8:83:e1:d9:04:97:13:18:3f:44:00:a3:43:0e:88:c1:
         d7:36:57:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:29:33 2026 by rpki-client