Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/938ba122-7f64-362d-999c-278e8174a91b.roa
File:                     938ba122-7f64-362d-999c-278e8174a91b.roa (raw, json)
Hash identifier:          +Bh/088vujq7pFVr/BdJWudUX8G0T/CV9PuFgIq5DAg=
Subject key identifier:   BC:E6:51:16:CF:FA:B1:CB:EA:F8:BC:80:19:80:ED:3A:C0:81:9C:78
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF32B66187E7A9D75227DF00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/938ba122-7f64-362d-999c-278e8174a91b.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        2600:8800:8100::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:b6:61:87:e7:a9:d7:52:27:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=46a51e7e-3c4b-4866-80e4-a594664d9706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:cf:f3:e2:f4:7e:e5:6b:25:d7:a3:d1:42:
                    67:6b:76:11:0c:ca:6f:88:13:9b:bb:98:37:b3:6e:
                    9a:87:b0:ad:e0:51:02:13:01:ea:d3:4e:53:1a:66:
                    f5:6b:d0:92:44:9e:eb:95:58:3f:2c:03:f0:51:df:
                    3a:4e:d5:01:75:12:7c:9a:8a:53:70:00:14:49:80:
                    8b:ec:7b:67:ac:09:07:9b:a3:04:3a:2b:87:88:84:
                    50:56:db:4e:0f:2d:5e:45:22:a1:83:ca:7b:49:30:
                    ba:e7:6b:f4:52:7c:a3:77:23:ac:dc:10:b9:37:6e:
                    19:b0:0a:63:4a:15:51:9b:2c:46:7d:e3:90:c7:4f:
                    3d:5c:43:ae:eb:39:89:52:37:20:ed:2e:37:15:b3:
                    19:e4:d0:1c:1e:3a:e7:af:06:98:d3:83:52:ee:e7:
                    ed:8e:14:12:8a:13:ed:e3:3b:cf:6f:28:27:d1:86:
                    0a:06:4e:94:bb:3a:c4:a9:f1:4a:e0:b0:79:65:fe:
                    60:f7:25:9d:6d:f5:23:2f:cc:87:e9:2e:6c:83:b5:
                    91:1c:64:f2:3b:a1:36:6e:ca:c7:ea:22:47:a0:dc:
                    dc:0f:53:f0:9f:55:f4:ae:9b:ab:ae:aa:bd:02:e4:
                    b8:ea:81:da:47:a6:6e:c0:04:06:40:cf:48:b8:71:
                    42:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E6:51:16:CF:FA:B1:CB:EA:F8:BC:80:19:80:ED:3A:C0:81:9C:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/938ba122-7f64-362d-999c-278e8174a91b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:8100::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:82:06:5b:dc:66:0d:ca:65:e4:97:a1:a3:82:85:bb:d7:81:
         33:05:78:3a:90:ea:a3:b0:d9:62:89:c3:40:79:f9:f6:67:09:
         79:55:04:3e:a9:98:18:2f:36:30:14:85:13:bb:9e:0f:ff:1b:
         1b:b0:dd:4a:8c:5a:3b:a1:bf:69:7d:62:ec:39:a9:e9:16:c2:
         af:49:c5:4e:a3:fa:20:13:1b:a3:f9:fa:13:79:d3:b3:3a:61:
         df:a9:10:07:c8:e4:d5:0c:d2:4c:25:b2:72:86:76:35:d4:b8:
         40:f4:97:51:08:fb:ff:97:62:13:c2:30:eb:aa:7e:b2:3c:8e:
         e5:4e:62:75:14:f5:99:de:1b:67:93:25:1e:29:fd:4e:fb:dd:
         17:82:a1:0f:bb:eb:c0:12:af:54:de:65:95:a4:91:75:0d:c9:
         6b:bc:04:77:43:5e:e6:55:64:8d:d0:67:1b:c5:13:26:87:df:
         c8:fc:9f:f8:a9:2e:3b:5b:1b:63:28:0b:1f:20:86:c4:06:2d:
         3a:69:67:ea:c5:5c:ed:02:2d:34:ea:a1:ce:6c:2c:a0:e0:e0:
         ce:92:6a:41:20:0b:44:36:b7:d2:4e:28:74:e2:71:cd:e6:5d:
         55:2f:cf:17:dd:58:f8:2a:28:0e:7e:a5:b4:13:37:62:da:bf:
         6a:eb:d7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:51 2026 by rpki-client