Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2ffe503-8ef4-38af-8f57-f741abd0482b.roa
File:                     c2ffe503-8ef4-38af-8f57-f741abd0482b.roa (raw, json)
Hash identifier:          uWMO9fAup2p+XhtLLkGVNOk+0SllE284KY9w35Ou1pc=
Subject key identifier:   D7:D8:9B:56:1F:69:EC:23:40:8F:64:A2:3D:C9:EB:38:45:EA:E7:4F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF323DE9EEC39FCB498A8BA0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2ffe503-8ef4-38af-8f57-f741abd0482b.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        2600:8800:5606::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:3d:e9:ee:c3:9f:cb:49:8a:8b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=ee4b002e-6515-4231-8abb-bb67bce197cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:94:bf:48:c0:8c:24:3f:36:9f:21:15:e0:7c:
                    34:82:16:af:15:0a:fc:63:f5:fb:02:1c:49:b9:83:
                    87:94:cd:a0:26:9e:15:18:fd:7d:10:85:d8:b6:e4:
                    77:03:06:8d:47:06:5b:20:2b:80:fd:2b:90:3f:e2:
                    78:61:14:cf:00:41:36:23:2d:1a:b2:3e:bc:7d:21:
                    08:98:52:ff:ad:b4:52:7b:c4:20:bc:86:00:a1:d0:
                    d9:7a:2b:fd:4e:f9:db:fb:79:68:9e:c1:60:c6:f0:
                    26:5c:4f:bf:26:50:fa:49:fa:1d:29:76:b8:aa:d5:
                    47:eb:af:0a:0d:42:f7:fd:76:57:95:d3:2e:fc:99:
                    fb:58:dd:cc:2a:d2:94:fa:f5:9c:e9:25:43:bf:15:
                    75:16:1d:06:e9:22:7a:5f:14:ff:96:68:1a:2c:ee:
                    ad:21:59:4f:52:57:24:38:6f:37:bd:a9:26:91:c9:
                    8e:10:aa:07:cc:98:c2:0c:26:aa:95:89:13:6c:bf:
                    c4:1e:cb:2d:67:15:06:a3:bf:04:94:5b:e7:7b:73:
                    ef:48:b4:07:38:02:39:11:00:8f:7e:1e:8e:a3:29:
                    50:50:c3:75:3b:2b:bb:3b:d6:03:3f:ad:7d:97:c1:
                    da:81:16:8e:76:de:c7:67:14:4c:f9:3c:b6:16:7d:
                    8d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D8:9B:56:1F:69:EC:23:40:8F:64:A2:3D:C9:EB:38:45:EA:E7:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2ffe503-8ef4-38af-8f57-f741abd0482b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:5606::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:51:30:f0:ee:85:8c:f0:d7:c8:9d:df:75:83:9f:41:f7:a5:
         da:1c:58:6c:1f:57:cb:65:79:6b:e0:93:4c:86:2a:c7:8a:ce:
         01:5f:10:95:dc:d5:50:6e:23:0c:0d:df:8f:b7:bd:cb:7f:e8:
         52:67:8a:4d:51:23:3e:eb:72:15:6a:6b:aa:18:0e:ff:f4:e5:
         9a:ea:fa:7f:90:26:fe:57:44:bc:cb:d2:98:23:11:09:e7:d5:
         0a:20:d8:79:8c:74:0b:99:15:ff:5d:6e:15:ed:dd:f0:2f:f8:
         83:d5:76:0b:61:43:26:d3:15:08:7b:bb:b8:67:cf:00:04:27:
         2f:f9:10:7c:a2:fb:91:0e:21:1c:6f:78:3b:fa:65:2b:73:2d:
         20:ff:62:8d:b2:81:4f:a9:21:47:a5:71:72:90:e9:e7:ad:b2:
         42:da:e0:59:27:3b:c7:0f:3b:0b:f9:21:1c:60:f3:ae:c8:3e:
         0c:1a:b6:c6:ac:46:9a:4e:83:4d:33:bb:60:79:73:1c:74:01:
         4d:e6:53:78:aa:14:39:2d:a8:16:2d:01:50:f3:5f:14:e6:95:
         86:58:a8:5d:57:59:6f:bd:b3:61:85:13:7b:8a:b0:77:ac:0c:
         7c:05:cb:f9:e5:94:41:f2:ab:e2:38:00:d0:cc:b2:07:58:ea:
         d9:69:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:34 2026 by rpki-client