Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af145108-6b17-30da-aef8-500ff61db7b8.roa
File:                     af145108-6b17-30da-aef8-500ff61db7b8.roa (raw, json)
Hash identifier:          0zJTOJcq2FCW2u7TQ9oblUD8XGvLa7aJVKH+qZCZwqA=
Subject key identifier:   02:CA:E5:9B:E3:DA:4A:EF:3B:4E:B5:7A:13:FC:84:AF:95:4A:D2:C4
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF325A7EAD25C7BC80FFC680
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af145108-6b17-30da-aef8-500ff61db7b8.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        2600:8800:8f04::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:5a:7e:ad:25:c7:bc:80:ff:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=179243b1-cc1e-4b99-aab4-8d75b47b6f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:d5:5d:0b:f1:35:78:6b:be:2c:e0:8f:94:
                    df:5b:40:68:68:dc:c5:28:0a:b5:50:0e:c4:06:d4:
                    33:ad:73:ec:68:0f:bd:d2:b0:73:a5:72:e2:a9:14:
                    43:10:b6:c3:f5:97:0e:e9:11:ba:72:d9:82:8b:e5:
                    0d:11:ee:ca:41:93:80:08:a9:2d:0f:3f:8c:f0:73:
                    21:3e:45:f7:38:95:04:9f:1e:1f:25:d5:86:b3:00:
                    62:81:d4:5b:b3:e5:89:88:a7:a1:5f:78:64:88:82:
                    5b:31:69:30:84:25:27:08:07:93:cb:ae:9d:63:73:
                    c4:a3:d7:1c:f8:0b:22:6b:98:fe:b3:cd:6b:dd:db:
                    cb:4f:51:a5:32:61:7a:2c:ff:b6:ce:2a:61:cd:e6:
                    75:00:b5:39:01:35:24:a6:c6:11:01:b6:f8:f9:26:
                    0b:c6:15:ea:d2:55:48:b0:66:a6:53:02:1a:8a:6e:
                    09:a7:4f:73:3c:49:3b:e4:fe:32:bc:4c:9b:2a:9d:
                    18:01:51:e1:e0:f0:5d:7c:24:67:0c:cb:84:47:ca:
                    e4:9a:2a:fe:92:29:e7:fd:04:34:7f:38:62:e0:15:
                    60:42:b0:d1:28:7e:7a:45:4e:5f:72:47:58:17:dd:
                    7b:96:65:cd:6a:73:48:6e:ee:29:4b:b6:1c:ed:4f:
                    e9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CA:E5:9B:E3:DA:4A:EF:3B:4E:B5:7A:13:FC:84:AF:95:4A:D2:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af145108-6b17-30da-aef8-500ff61db7b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:8f04::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:11:3e:82:c1:65:43:e5:96:6e:91:26:69:27:85:a3:91:bf:
         7c:a7:f0:da:18:ca:a0:96:19:89:87:38:39:34:6d:fa:d4:53:
         e7:60:13:f2:b9:d8:a2:17:98:9a:d2:83:9a:76:0b:62:95:ed:
         37:92:85:00:16:d4:ba:38:05:1c:cc:e3:75:aa:f4:78:3c:55:
         3f:ba:d7:8c:ee:9e:56:b7:a8:de:84:d5:b2:e6:f6:f2:2f:de:
         51:ac:a9:c2:3d:1b:32:4a:e5:92:ec:82:35:9e:12:fb:cc:62:
         c5:6d:98:00:f9:12:00:75:0f:49:82:a8:54:11:e2:48:6f:14:
         14:fc:28:13:9f:23:22:0e:48:1b:bb:18:ca:54:00:24:57:6e:
         4c:eb:67:1a:c2:87:4d:00:b0:44:57:ac:8e:b1:13:fe:41:9b:
         dc:a3:ae:6e:4c:7f:49:38:0e:83:b4:cf:20:7a:45:67:45:1e:
         18:6e:10:c6:b3:3c:e6:0f:99:1f:52:c3:91:6c:4b:dc:6c:98:
         e2:0a:6a:17:6e:54:00:f2:57:7a:6d:9c:ea:1f:3e:67:01:84:
         5f:f7:d2:40:72:1a:35:4a:ee:27:c6:5e:41:44:1f:7d:cd:a1:
         81:12:15:0c:dd:25:22:f3:c1:0c:c7:3f:b4:e8:d2:7c:8e:ec:
         54:73:e0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:05 2026 by rpki-client