Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba691718-d30f-3bc2-b65a-c8fd29b6c524.roa
File:                     ba691718-d30f-3bc2-b65a-c8fd29b6c524.roa (raw, json)
Hash identifier:          M3BqHBa6XRh/FMpJc/mt8DCmk3gIOgH1JA7dDQau5PM=
Subject key identifier:   32:F9:C0:D0:33:A2:F6:20:3B:67:96:21:A8:1B:21:96:91:E7:99:7C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D7CCFDD867F985698EAC95200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba691718-d30f-3bc2-b65a-c8fd29b6c524.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     22773
IP address blocks:        2001:579:6108::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:dd:86:7f:98:56:98:ea:c9:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=63f750c0-25bc-42ac-ae42-4bdfeb140e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0f:51:68:9d:dc:ce:90:57:3b:92:ca:b4:58:
                    11:6f:52:e6:88:c4:86:da:00:65:a7:40:48:d4:aa:
                    28:e5:90:be:90:bd:1d:87:2a:00:f5:fd:80:47:2f:
                    3c:21:47:a8:f9:c0:c5:36:76:02:a2:15:5a:f9:b5:
                    95:39:53:36:2e:0f:93:8a:a2:7d:19:bb:60:aa:f7:
                    0e:bb:97:5a:54:a2:95:67:b3:b6:ab:38:c7:7f:b9:
                    09:62:4c:0f:28:73:d5:7b:43:67:1a:d7:e4:89:de:
                    cf:ec:d5:e8:52:54:d0:b6:63:74:2f:02:28:03:f2:
                    9d:2f:d9:43:2a:63:f5:9b:17:ce:e8:5e:64:ac:8d:
                    dc:e0:41:88:c8:d5:16:6d:51:15:cf:29:8f:74:48:
                    37:f9:2e:b9:c9:d7:7e:d3:20:bb:a9:a2:9a:bb:3f:
                    63:cd:9c:36:d4:f5:0d:26:ba:c4:41:29:a5:6d:06:
                    4b:c5:84:67:fb:9a:af:bd:66:42:94:6e:9f:91:ab:
                    bb:e3:f2:3b:4a:46:d0:2b:c1:2a:72:2f:ce:e6:eb:
                    20:d4:7a:38:0f:0d:6d:0f:5c:bc:40:ee:de:55:f6:
                    44:a0:79:60:4d:f3:aa:15:8c:69:0d:f9:d5:44:69:
                    e7:83:17:33:a3:54:b2:d1:6e:fe:6d:a1:b3:b6:7f:
                    8e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F9:C0:D0:33:A2:F6:20:3B:67:96:21:A8:1B:21:96:91:E7:99:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba691718-d30f-3bc2-b65a-c8fd29b6c524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:6108::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e2:00:12:d3:3e:97:11:73:f1:1d:43:2d:ab:7d:29:5a:aa:
         6f:ab:7a:63:c1:60:7f:d9:d3:9e:8f:24:32:69:7b:85:05:dc:
         e7:7d:d8:0f:36:7b:ca:7e:57:0b:29:78:ef:7e:03:49:4c:ff:
         75:91:ba:29:99:28:c0:18:ac:8c:8d:39:ad:1e:4f:25:95:e9:
         2a:3f:ce:2b:0f:c4:4e:f8:83:61:60:10:0d:14:47:aa:87:0b:
         a5:a7:0a:14:ce:0c:21:28:43:3f:25:05:8d:a6:c0:3f:de:74:
         91:2f:44:8f:32:f3:50:29:30:03:dd:4d:3b:19:f9:dc:4c:5d:
         b1:7f:2f:04:5e:3c:2f:13:58:98:b6:c1:d4:da:19:32:53:8a:
         07:1f:b5:74:5c:a8:b1:9b:a8:0c:f6:e9:1e:96:5c:98:29:17:
         fa:48:07:77:66:1c:72:90:01:85:14:97:90:17:62:e6:22:31:
         9a:a6:f4:e5:8d:53:dc:ac:73:5e:a8:fb:9e:1f:4b:7c:02:b7:
         e2:d0:37:ed:f4:8a:25:7d:73:ba:d5:2d:4c:c8:04:ee:d3:a3:
         42:21:45:92:cb:a0:1c:ed:d8:ac:71:1a:89:9e:36:b9:46:69:
         a2:c4:14:8c:ce:9f:67:ce:5b:3a:15:b2:0b:74:d6:78:74:f8:
         48:34:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:26 2026 by rpki-client