Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89fffa69-8331-313c-ad60-2aadb5676f71.roa
File:                     89fffa69-8331-313c-ad60-2aadb5676f71.roa (raw, json)
Hash identifier:          RZ6/i/zoiIwdjP7jzBLl4hcXdKOITKUoWjj2+HbS9CI=
Subject key identifier:   AB:A2:F4:F5:2F:CA:46:93:7D:3C:26:F4:47:A0:9E:F2:F7:2A:8F:66
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF3294359F9AB9DD85589098
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89fffa69-8331-313c-ad60-2aadb5676f71.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        2600:880a:300::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:94:35:9f:9a:b9:dd:85:58:90:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=433d1230-5829-4a91-ab7b-b7804fc416ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:61:66:ec:ad:45:6b:c2:41:7f:f6:f6:e8:
                    08:67:c2:62:8d:2e:22:28:67:d6:15:b0:e1:e2:01:
                    6a:17:f5:27:76:f0:1c:7b:45:2d:da:95:65:63:20:
                    2c:ca:5d:fb:07:28:9a:6a:2c:45:de:51:b7:a7:59:
                    b7:fe:32:13:c0:cc:68:1d:65:d5:b6:c9:e5:a5:f1:
                    b3:6e:aa:bb:a6:fe:7c:df:32:c9:ce:67:e9:d2:7f:
                    44:64:6f:59:4e:08:29:60:31:f2:55:6c:f8:af:3b:
                    a7:c0:f2:33:f6:c8:e4:0e:6f:35:2a:46:b5:7d:a0:
                    bb:de:7a:57:d8:0c:8f:22:d3:4e:c9:24:58:31:7c:
                    86:96:55:0b:5b:76:36:82:75:a9:38:8b:12:33:d6:
                    18:9e:65:7b:90:9c:e9:1b:44:e8:2a:1f:6f:67:50:
                    c4:12:ac:7e:af:35:7d:bb:12:35:36:c2:88:4c:42:
                    d6:15:9b:00:44:02:1e:23:56:41:4b:ad:85:a7:d2:
                    5d:97:38:b8:20:94:5b:ea:05:7d:5b:f9:b1:4d:9e:
                    4d:c1:2c:d4:d0:4e:1b:95:d5:8c:19:19:1c:16:f8:
                    eb:76:7c:60:be:59:82:7c:a9:53:e9:59:56:12:f1:
                    01:b7:03:f4:57:8b:c6:82:1e:77:13:f8:ac:7e:0a:
                    f1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A2:F4:F5:2F:CA:46:93:7D:3C:26:F4:47:A0:9E:F2:F7:2A:8F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89fffa69-8331-313c-ad60-2aadb5676f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:300::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e3:a4:0f:17:31:c7:32:6b:6f:9b:67:00:29:61:17:84:de:
         57:a1:31:e5:ee:66:69:b1:86:78:d3:eb:c5:b5:9c:2f:e8:7f:
         35:c8:3d:7d:ee:50:98:f7:e7:ec:71:03:8d:f7:8a:b8:1c:03:
         7b:a8:9c:65:29:6e:50:30:b3:81:6e:9a:e4:da:e2:19:2d:ea:
         3e:5c:58:50:d1:50:e3:26:67:05:2d:f7:c8:f7:b3:9f:51:78:
         0e:e4:0f:4d:a3:d2:bb:68:ee:2b:2e:ff:44:e3:78:b2:8f:eb:
         8f:e6:a3:17:0f:4f:54:e2:80:86:d9:38:e2:c1:22:fa:6a:36:
         a9:61:7a:fb:71:f4:85:c0:f5:fa:ee:8d:ca:25:c0:9e:9c:55:
         6b:b5:af:39:a0:e4:67:dc:df:e0:0a:4f:95:a8:b4:0f:52:7c:
         ad:b3:c9:59:d9:78:a4:85:41:c4:8e:68:33:c2:1d:81:e5:1f:
         80:5f:24:25:9f:f1:ac:75:9e:78:4f:21:90:85:dc:b1:98:67:
         2b:f3:7a:53:27:80:a9:0a:8d:ba:97:82:70:77:7f:e0:da:68:
         ea:54:c6:b9:51:8a:af:0e:92:72:e3:b4:7d:63:de:b4:b0:de:
         22:92:a6:f2:12:99:8d:1c:fe:cb:73:a3:22:80:0a:1d:72:87:
         af:ea:c5:56
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzfMpQ1n5q53YVYkJgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk
NDMzZDEyMzAtNTgyOS00YTkxLWFiN2ItYjc4MDRmYzQxNmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgRhZuytRWvCQX/29ugIZ8JijS4iKGfWFbDh
4gFqF/UndvAce0Ut2pVlYyAsyl37ByiaaixF3lG3p1m3/jITwMxoHWXVtsnlpfGz
bqq7pv583zLJzmfp0n9EZG9ZTggpYDHyVWz4rzunwPIz9sjkDm81Kka1faC73npX
2AyPItNOySRYMXyGllULW3Y2gnWpOIsSM9YYnmV7kJzpG0ToKh9vZ1DEEqx+rzV9
uxI1NsKITELWFZsARAIeI1ZBS62Fp9Jdlzi4IJRb6gV9W/mxTZ5NwSzU0E4bldWM
GRkcFvjrdnxgvlmCfKlT6VlWEvEBtwP0V4vGgh53E/isfgrxQQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKui9PUvykaTfTwm9EegnvL3Ko9mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODlmZmZhNjktODMzMS0z
MTNjLWFkNjAtMmFhZGI1Njc2ZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCICgMA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI/jpA8XMccya2+bZwApYReE3lehMeXuZmmxhnjT68W1nC/ofzXI
PX3uUJj35+xxA433irgcA3uonGUpblAws4FumuTa4hkt6j5cWFDRUOMmZwUt98j3
s59ReA7kD02j0rto7isu/0TjeLKP64/moxcPT1TigIbZOOLBIvpqNqlhevtx9IXA
9frujcolwJ6cVWu1rzmg5Gfc3+AKT5WotA9SfK2zyVnZeKSFQcSOaDPCHYHlH4Bf
JCWf8ax1nnhPIZCF3LGYZyvzelMngKkKjbqXgnB3f+DaaOpUxrlRiq8OknLjtH1j
3rSw3iKSpvISmY0c/stzoyKACh1yh6/qxVY=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:41 2026 by rpki-client