Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f87a5bc-a60b-3c85-a47c-ecac7bc633c7.roa
File:                     9f87a5bc-a60b-3c85-a47c-ecac7bc633c7.roa (raw, json)
Hash identifier:          9gTTXqTtubDOjfFRmjrwsT/bjotEzFrlEBU72MBluOQ=
Subject key identifier:   E4:CC:56:47:82:51:7F:71:13:23:F7:20:10:07:02:F7:13:42:53:49
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF3231B6621B178D12396480
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f87a5bc-a60b-3c85-a47c-ecac7bc633c7.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        2600:880a:d0c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:31:b6:62:1b:17:8d:12:39:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=237721cf-81c9-4dbc-9d19-85044d17e1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:1d:58:41:9e:9a:45:6d:56:51:96:b0:c4:
                    00:df:75:b9:cf:f4:00:1d:93:8f:d0:e2:18:a4:8d:
                    46:cb:1e:8d:77:b0:71:57:c1:f6:b8:15:7f:63:67:
                    48:f5:15:df:c1:d9:d4:58:83:ef:dd:a9:49:a6:31:
                    b6:47:be:d9:58:ec:03:55:44:88:73:f9:05:56:99:
                    08:03:b4:38:ca:85:a3:78:20:6c:d9:f7:74:d4:b4:
                    7a:3b:20:cf:a7:eb:67:37:e3:4c:f5:53:4b:df:b0:
                    81:fa:db:ba:6b:43:64:a7:78:b3:09:e1:b2:a2:dd:
                    b5:a4:44:01:85:fd:55:b9:bd:0d:4d:10:7c:c2:86:
                    9e:08:05:0a:03:b3:e0:0c:41:99:52:42:e4:e0:6b:
                    8d:05:c2:f9:3b:19:74:86:41:72:ce:38:d9:34:46:
                    ec:16:a9:ef:f6:05:ba:b0:9f:8e:90:3e:8b:94:29:
                    6c:ea:59:a1:44:5f:13:a7:dc:0b:af:e6:33:b9:26:
                    1b:47:dc:73:ae:32:18:78:9b:ce:71:95:f9:88:6c:
                    73:43:fc:b9:99:4e:21:90:f2:04:d5:18:25:59:fa:
                    6c:a9:73:e0:af:34:61:56:1f:3e:b6:95:25:40:dd:
                    9a:97:7d:cf:48:a3:43:54:ee:12:e2:d5:6b:f3:51:
                    b2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CC:56:47:82:51:7F:71:13:23:F7:20:10:07:02:F7:13:42:53:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f87a5bc-a60b-3c85-a47c-ecac7bc633c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:d0c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e3:7a:8a:70:d4:11:03:3d:40:06:9c:59:e5:45:13:f2:ba:
         db:00:c2:e6:86:15:4f:f5:ab:99:30:93:6b:4d:59:d7:3f:95:
         e5:84:93:f5:d0:b3:5a:29:2a:03:83:71:68:00:b1:df:69:c8:
         db:04:3f:4b:67:e3:25:a9:65:a4:41:a5:4a:23:e1:5c:ed:62:
         d5:b6:d5:f9:61:eb:5e:ab:39:6e:16:f6:62:73:c6:62:06:ba:
         8d:1b:4c:12:1e:0e:a6:79:05:eb:b6:4e:2f:d2:10:cd:c9:97:
         54:34:8f:f0:cf:27:e2:cb:2a:6e:89:b0:1d:6d:29:ad:6f:7b:
         1e:fc:d2:c3:58:8d:8a:02:85:86:c1:48:d9:95:ed:55:f8:b6:
         1a:3b:d2:3c:6d:61:51:c4:c2:46:95:a1:66:73:78:51:08:a2:
         fa:71:9d:87:5d:97:ff:62:c2:4f:eb:f3:f0:a8:c7:64:a1:0c:
         88:ce:16:fc:95:21:5e:52:74:7c:d6:a7:e4:37:95:37:f2:43:
         10:01:e6:7c:43:6b:91:a1:c7:44:8e:d5:16:18:9a:87:48:4c:
         80:c3:05:a2:71:1f:d5:f7:9f:fa:63:00:99:8f:aa:d8:e1:33:
         39:ad:99:41:54:7c:82:74:56:7c:f6:6f:b1:c8:5d:05:8c:fb:
         0d:84:c3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:40 2026 by rpki-client