Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3990e42-b6e4-3dc3-9cd8-7485df55289e.roa
File:                     d3990e42-b6e4-3dc3-9cd8-7485df55289e.roa (raw, json)
Hash identifier:          deic8HhTF5V0Byaa31VFX34LsjgfhUEvocpn/RxVokg=
Subject key identifier:   D9:66:22:1F:75:3A:A7:10:20:B5:70:5D:7A:5B:BC:24:22:7D:86:29
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF3267E6B499D79046D96AF0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3990e42-b6e4-3dc3-9cd8-7485df55289e.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        2600:8800:3e8c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:67:e6:b4:99:d7:90:46:d9:6a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=e51c2d1f-1525-4a90-b1d5-c0de2f7330df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:04:7b:03:df:0b:84:50:09:d8:59:9d:38:
                    fb:c4:f9:a0:8e:17:ab:e3:ef:d3:cf:1d:7e:61:93:
                    c3:92:3d:fe:39:27:91:dc:18:34:65:6b:a3:1a:4c:
                    73:59:11:02:3f:7c:a4:6c:5e:f0:f8:e5:0b:53:d8:
                    b3:cd:3c:ed:10:50:b6:cf:c4:1e:5f:b4:9e:b5:67:
                    67:26:5c:ae:33:42:14:f1:27:49:99:b0:e6:d3:00:
                    e0:c5:e9:5f:b3:83:c3:fa:06:24:1b:48:30:fd:12:
                    a2:d5:43:59:18:6e:e7:1e:2e:e5:79:25:a1:1b:5b:
                    90:61:67:e2:49:e0:b3:cd:e4:18:7e:92:52:f2:bd:
                    02:44:5a:c4:1c:65:32:5e:16:ea:72:2a:f0:63:33:
                    4b:fd:ea:0a:c2:a7:f4:ca:9e:2b:48:5e:3f:8f:b6:
                    02:64:df:4c:e4:51:4e:5c:93:40:5b:bb:f6:b1:60:
                    fb:6e:44:a3:eb:d8:06:98:5d:7a:40:d4:dc:cb:39:
                    06:e6:6a:cb:96:d8:8b:b8:04:35:ea:0d:08:b6:2c:
                    7c:8e:d6:24:3c:5b:76:6d:22:bb:7d:95:a5:f9:2d:
                    76:cb:a4:c9:b6:03:10:8e:36:36:5a:4f:81:3c:8f:
                    7f:f2:4f:59:69:b2:12:63:f8:e3:cb:68:51:83:9e:
                    eb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:66:22:1F:75:3A:A7:10:20:B5:70:5D:7A:5B:BC:24:22:7D:86:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3990e42-b6e4-3dc3-9cd8-7485df55289e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:3e8c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:08:37:20:36:48:3b:71:77:6a:fe:05:2e:f0:0f:ac:d2:85:
         56:fb:f2:02:3c:b9:f1:cf:cd:1d:3a:20:74:fb:70:7a:02:e9:
         08:9e:b1:49:f3:42:2c:56:b9:df:ce:87:61:3d:b1:46:e1:e4:
         1d:f5:bf:10:5b:42:9e:fc:85:09:84:de:0b:4c:04:e4:02:41:
         54:d8:d4:31:73:31:53:60:fd:8f:8a:de:af:8a:84:07:38:21:
         f8:5d:87:21:68:59:1b:c3:4f:82:df:cc:5b:4d:55:a8:4a:f9:
         e2:e8:17:b0:89:27:eb:30:0e:bd:be:9b:5b:82:99:a3:73:de:
         c4:f5:a2:d2:63:c3:f6:0f:0c:14:1a:ee:1a:5c:54:8f:07:4e:
         83:4a:88:83:4d:90:34:6a:7b:10:52:7e:90:92:96:63:17:aa:
         f0:3c:80:88:0b:b4:2d:ff:b3:ba:c6:1b:8b:c5:95:a4:c9:89:
         e5:05:f6:34:c1:85:7e:da:2b:30:5f:58:f4:17:e9:0c:5f:9e:
         32:48:2b:d8:cf:7e:f6:16:cd:f6:5d:b9:ee:02:e8:20:37:8e:
         9a:ec:bc:94:d7:29:96:a7:6d:ac:07:71:1e:5d:09:d3:ec:72:
         77:81:70:e6:3e:29:c0:e3:b4:07:08:d4:0d:09:5f:4d:ca:f9:
         c6:c0:9d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:59 2026 by rpki-client