Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9a890dc-63d2-3099-9eaf-d2b85ec28129.roa
File:                     a9a890dc-63d2-3099-9eaf-d2b85ec28129.roa (raw, json)
Hash identifier:          j5YMA4NKAuFOku90jQQ+nNLErSOuaX7OL/bUvYCHFL4=
Subject key identifier:   D9:93:2F:49:84:9F:F0:02:3D:F4:9F:0C:F0:33:9F:B1:A0:F9:6F:65
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF32625C0F7BDC7701A23700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9a890dc-63d2-3099-9eaf-d2b85ec28129.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        2600:8800:3e30::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:62:5c:0f:7b:dc:77:01:a2:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=0559617c-2c3e-4143-bf98-8399a27bbc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:08:1d:2c:3b:bc:6d:5e:f9:0b:ad:ed:83:
                    c5:44:51:a8:2f:a0:e5:d3:72:fd:f4:48:5e:7d:a5:
                    08:76:eb:27:e2:f5:25:e7:63:3a:aa:ba:29:4e:61:
                    ee:bd:66:ab:99:5d:7b:42:76:a1:5b:4c:89:72:26:
                    a3:26:3a:de:5a:c3:52:61:2f:3c:1d:af:cf:7b:f3:
                    ec:17:e1:39:45:a0:cf:85:6a:89:2f:d6:fa:a4:33:
                    a3:0f:0e:c1:4d:3d:42:1c:85:74:14:9a:1e:95:a6:
                    22:f9:06:3a:00:03:b6:f9:80:d6:9a:96:fc:f6:e6:
                    8d:96:a8:1d:b0:ec:f5:59:fa:99:b4:3e:3a:63:5a:
                    22:ed:3f:c1:54:d7:6c:09:86:c1:67:5f:3f:6b:79:
                    b3:06:55:0a:b2:04:5a:18:e5:cc:e3:8c:b1:c5:8c:
                    44:14:76:74:f9:a3:76:6e:fa:5f:9e:d1:2b:1a:15:
                    83:d5:50:80:98:5a:2e:d9:11:5c:7e:c5:fa:ac:2c:
                    43:61:0a:e4:87:e1:8d:69:d0:ae:e0:8e:ea:a8:90:
                    1b:e8:cb:9a:79:d7:dc:43:2a:e4:ac:b1:9a:0d:14:
                    59:a3:e2:87:40:d2:42:52:f8:5d:1e:74:8e:12:bf:
                    ee:f5:7f:62:35:35:14:a5:84:d9:13:70:92:3e:ba:
                    d7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:93:2F:49:84:9F:F0:02:3D:F4:9F:0C:F0:33:9F:B1:A0:F9:6F:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9a890dc-63d2-3099-9eaf-d2b85ec28129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:3e30::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:8a:d8:e1:90:e7:ba:fb:d4:4c:2b:3d:3e:c9:40:28:da:ba:
         a8:e6:b3:26:33:36:16:d7:d8:9d:e3:2b:42:84:fb:d7:a1:5d:
         9e:14:37:7c:b9:75:bb:5a:68:3f:6c:36:e8:31:5a:ac:89:7d:
         bd:54:e9:6c:2d:3b:f4:88:31:4a:ee:3a:d1:bc:10:2e:b1:64:
         71:7d:64:68:60:a8:02:3b:0b:79:9d:2e:21:ab:c2:ef:41:ab:
         bf:44:f5:25:ad:b5:e6:9b:ab:7e:91:82:7a:d9:2f:b7:95:eb:
         7b:e1:15:a0:0d:ba:a0:f8:7f:74:f0:43:68:62:d7:71:11:9b:
         ef:95:d9:b3:26:34:eb:8e:db:e3:97:c3:d2:36:19:fc:25:f7:
         77:72:15:ec:f3:e1:36:36:b0:ab:72:89:fa:97:95:6c:0c:5b:
         56:ec:e9:c0:27:15:35:b7:3b:22:69:c0:f7:6d:7e:c9:dc:61:
         f3:8b:1a:ab:d1:93:76:b6:f0:76:fa:14:f9:fa:92:30:68:ff:
         80:79:f6:29:19:5a:69:b8:2c:b0:cd:e5:d4:a1:c5:77:8d:34:
         0c:5a:06:a3:d2:de:6f:c9:d6:c2:5f:b5:35:b3:3c:f0:e2:61:
         d6:a1:fd:9f:19:4f:72:f6:99:0b:f4:22:af:58:4c:5d:01:3d:
         3b:cf:93:7c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzfMmJcD3vcdwGiNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk
MDU1OTYxN2MtMmMzZS00MTQzLWJmOTgtODM5OWEyN2JiYzJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuUIHSw7vG1e+Qut7YPFRFGoL6Dl03L99Ehe
faUIdusn4vUl52M6qropTmHuvWarmV17QnahW0yJciajJjreWsNSYS88Ha/Pe/Ps
F+E5RaDPhWqJL9b6pDOjDw7BTT1CHIV0FJoelaYi+QY6AAO2+YDWmpb89uaNlqgd
sOz1WfqZtD46Y1oi7T/BVNdsCYbBZ18/a3mzBlUKsgRaGOXM44yxxYxEFHZ0+aN2
bvpfntErGhWD1VCAmFou2RFcfsX6rCxDYQrkh+GNadCu4I7qqJAb6MuaedfcQyrk
rLGaDRRZo+KHQNJCUvhdHnSOEr/u9X9iNTUUpYTZE3CSPrrX3wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNmTL0mEn/ACPfSfDPAzn7Gg+W9lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTlhODkwZGMtNjNkMi0z
MDk5LTllYWYtZDJiODVlYzI4MTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAD4w
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJuK2OGQ57r71EwrPT7JQCjauqjmsyYzNhbX2J3jK0KE+9ehXZ4U
N3y5dbtaaD9sNugxWqyJfb1U6WwtO/SIMUruOtG8EC6xZHF9ZGhgqAI7C3mdLiGr
wu9Bq79E9SWtteabq36RgnrZL7eV63vhFaANuqD4f3TwQ2hi13ERm++V2bMmNOuO
2+OXw9I2Gfwl93dyFezz4TY2sKtyifqXlWwMW1bs6cAnFTW3OyJpwPdtfsncYfOL
GqvRk3a28Hb6FPn6kjBo/4B59ikZWmm4LLDN5dShxXeNNAxaBqPS3m/J1sJftTWz
PPDiYdah/Z8ZT3L2mQv0Iq9YTF0BPTvPk3w=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:07 2026 by rpki-client