Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ea96fb2-a1a7-31d3-8094-46716f320769.roa
File:                     9ea96fb2-a1a7-31d3-8094-46716f320769.roa (raw, json)
Hash identifier:          OOs69zJjGqm/1OpC4S7OGydf3kbWbN41TR1+kIVV2s0=
Subject key identifier:   3D:78:48:CD:46:30:2F:9B:77:BD:36:E0:8B:D6:8B:FC:1B:58:D3:AB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF324CA4CB601F540E7B3340
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ea96fb2-a1a7-31d3-8094-46716f320769.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        2600:880a:828::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:4c:a4:cb:60:1f:54:0e:7b:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=f163c8dd-7b0f-4679-bfef-1c6a51c003e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:63:c0:46:fd:ea:1e:58:0e:36:f0:ec:ec:15:
                    f8:83:56:72:09:b2:9e:13:7d:45:cb:54:39:e3:d1:
                    43:56:7f:b9:ee:52:55:ca:38:fe:50:ca:5e:36:be:
                    46:9e:93:37:c7:9a:18:68:df:dc:14:9e:a6:e8:89:
                    fb:43:2e:ea:6c:31:c5:56:ea:57:2f:69:98:c8:de:
                    7e:46:99:ed:ef:ea:71:73:16:d7:78:7e:da:62:04:
                    c7:07:b4:59:cb:b1:f3:9b:08:ec:8d:f3:23:15:9b:
                    88:94:6f:7a:81:40:03:e0:1a:b4:e6:56:c6:f5:57:
                    6f:e2:c4:8c:d1:ce:89:a2:3c:47:55:80:07:e6:85:
                    5e:73:35:f4:ad:b5:02:a0:b3:ee:c5:79:86:10:98:
                    79:bc:87:61:49:91:8d:4f:47:fa:63:80:f6:60:46:
                    08:f5:89:2b:c5:ee:c0:9c:de:32:4a:a6:c9:c8:62:
                    da:4a:cd:63:07:c1:cd:61:ad:0b:3e:cf:98:34:1b:
                    24:da:cd:b5:54:74:fa:cc:e8:87:b3:f3:e0:aa:63:
                    5a:80:fe:c2:01:12:57:28:a8:5a:0d:16:72:a5:be:
                    bf:85:90:d3:d2:2a:f4:5b:3e:44:cc:0a:8c:e5:49:
                    a3:48:e7:11:df:5b:26:9a:8f:be:57:cb:ce:d2:74:
                    ff:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:78:48:CD:46:30:2F:9B:77:BD:36:E0:8B:D6:8B:FC:1B:58:D3:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ea96fb2-a1a7-31d3-8094-46716f320769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:828::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c4:5f:48:05:e3:d5:0c:ff:a3:f8:f8:01:77:40:6f:1e:65:
         82:b2:3b:ba:55:75:1a:d6:03:13:a9:43:a8:0c:53:fb:e8:91:
         be:75:4a:db:75:55:96:13:d9:f6:32:b2:8e:b6:a1:50:75:7f:
         72:21:bc:6e:a7:e3:e0:67:61:6a:e1:2a:9d:15:f4:d6:a0:ac:
         ea:5d:61:a4:22:af:83:08:40:51:3d:10:63:c6:b0:04:0b:b4:
         f8:64:3a:0f:bd:f8:61:97:fb:41:5b:5a:4b:f9:6a:e4:f6:d6:
         0a:fc:64:23:9a:74:7d:91:93:5d:69:8d:bd:ae:b7:d2:d0:fd:
         e5:64:6b:20:36:56:64:89:31:b1:0b:56:84:62:75:0b:bf:37:
         0d:23:97:47:3f:ac:d6:ee:86:82:92:31:5b:f5:ac:73:df:5b:
         31:81:40:01:a8:b0:7d:fd:57:d4:31:66:6b:dc:40:53:59:7c:
         a3:55:06:4b:08:26:63:27:c5:04:8e:d3:fa:67:04:d8:e8:2e:
         ea:d6:f1:ac:e9:c6:08:d0:dd:59:81:74:eb:8f:96:06:5f:26:
         0a:53:d9:29:74:1a:ac:30:7c:a6:7b:6e:64:e9:3c:42:c5:8a:
         01:54:d8:ec:3e:4c:c1:1a:7d:ba:fe:ff:df:02:6c:2d:d4:e1:
         46:37:d9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:17 2026 by rpki-client