Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8c724175-9e0f-35ef-a02a-008fe44bc956.roa
File:                     8c724175-9e0f-35ef-a02a-008fe44bc956.roa (raw, json)
Hash identifier:          nHKSdJeNGxjxaApOCvvcOsa58zvtrmd3ayfcmfnKYf4=
Subject key identifier:   3A:5E:E5:86:14:CA:C7:78:E3:FC:75:FA:20:6B:46:44:13:D2:DD:C8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CBAE73B315DC2EAA7A6076A80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8c724175-9e0f-35ef-a02a-008fe44bc956.roa
Signing time:             Mon 02 Feb 2026 14:00:40 +0000
ROA not before:           Mon 02 Feb 2026 14:00:40 +0000
ROA not after:            Sun 03 May 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        2001:57a:7202::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ba:e7:3b:31:5d:c2:ea:a7:a6:07:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb  2 14:00:40 2026 GMT
            Not After : May  3 13:00:40 2026 GMT
        Subject: CN=4e7123ae-2ea3-4fcc-af19-beca689b81ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:83:14:ea:90:51:2a:7b:d7:a4:d3:fe:7f:af:
                    a5:08:6b:a5:ea:40:bb:61:04:9b:b9:43:55:6f:97:
                    f9:b6:f9:de:9d:80:72:92:c9:54:af:4b:2a:81:08:
                    10:b0:53:4f:55:bb:b2:a8:4c:aa:e1:0c:f6:c7:f1:
                    7e:0e:2e:51:04:71:82:59:96:64:ca:75:4d:a0:ff:
                    23:49:d7:01:54:b5:05:66:3a:32:e7:ac:95:36:84:
                    aa:1c:01:c3:c7:b5:61:e3:2b:14:43:cd:6b:5d:00:
                    ef:b8:ba:ef:d0:e8:8c:b8:48:5f:f3:6d:14:2a:95:
                    1b:ed:2e:42:c5:ca:ce:9c:d1:03:e5:7f:e2:0b:22:
                    87:67:2a:ce:7b:3f:f4:6b:b9:87:3c:7e:47:2a:40:
                    6b:b1:cb:ae:75:4f:80:cc:0e:c1:1f:13:4b:5d:e0:
                    98:c9:47:f3:1f:8a:aa:8c:1b:4f:81:9c:a8:f2:2a:
                    d8:20:21:7f:e0:73:e1:2a:8c:49:4c:7a:d2:ba:df:
                    e3:3f:46:57:c3:4e:39:fd:63:e5:1b:65:a8:3e:08:
                    3e:5d:bc:6f:d6:25:36:00:05:61:4d:7c:1b:2b:f4:
                    be:41:11:d0:6d:d3:a9:2d:d6:4c:27:e7:4d:a3:87:
                    55:96:ea:88:e1:3b:2a:f6:98:b4:1d:92:27:27:a1:
                    50:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5E:E5:86:14:CA:C7:78:E3:FC:75:FA:20:6B:46:44:13:D2:DD:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8c724175-9e0f-35ef-a02a-008fe44bc956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:57a:7202::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:4f:66:6d:bf:b3:9e:a4:34:26:f5:9f:b5:43:b4:60:13:72:
         e0:07:fc:b7:10:4e:60:cd:c2:c2:e4:4e:ac:06:30:58:2a:92:
         c6:e1:11:20:02:60:1d:14:7a:57:55:1f:ac:85:d4:31:b5:9a:
         f6:96:33:34:c5:d9:29:a3:55:61:8c:41:86:0d:ce:58:c1:ad:
         09:7a:2c:bc:e6:92:1e:49:21:de:1a:d7:00:f2:bc:8c:33:18:
         52:cf:ca:b7:37:ea:31:e2:d8:1d:b7:a1:e6:68:0b:34:01:29:
         62:88:14:d0:be:e8:09:e9:09:8b:96:c3:b6:60:1f:1d:f3:65:
         70:e3:a0:d9:56:bc:44:8e:6d:5d:40:98:63:24:b5:3d:c5:21:
         e6:be:7f:06:e1:bb:82:3d:db:13:2d:d5:cf:01:96:3c:81:55:
         ca:f8:ea:f8:7e:38:7f:cf:f7:c3:67:08:b1:40:06:90:23:ca:
         21:30:26:09:c3:a5:f2:fb:4a:f5:c2:eb:72:b9:5f:a0:c0:83:
         be:62:bc:97:91:ad:56:cb:98:ea:1c:86:9f:f0:a3:6c:40:8c:
         63:0f:16:5e:a7:64:d3:cf:42:82:75:d7:5a:f4:aa:c8:7c:99:
         29:06:16:18:17:56:25:93:15:e8:86:e3:7b:59:9a:47:77:60:
         a1:b8:b4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:11:40 2026 by rpki-client