Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00596da9-6e5c-37df-a845-c2d39dade8aa.roa
File:                     00596da9-6e5c-37df-a845-c2d39dade8aa.roa (raw, json)
Hash identifier:          ZmNtLOFrbLDLqUisKSnjjZZWxXc814I2OHCC9URJDOo=
Subject key identifier:   3C:A2:3A:A2:21:DC:52:D3:91:52:FA:DB:61:D9:4C:EA:4D:C3:40:FC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F53A90CA5F84C23A2F4F19700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00596da9-6e5c-37df-a845-c2d39dade8aa.roa
Signing time:             Mon 28 Sep 2026 16:48:09 +0000
ROA not before:           Mon 28 Sep 2026 16:48:09 +0000
ROA not after:            Sun 27 Dec 2026 17:48:09 +0000
asID:                     22773
IP address blocks:        2001:579:3f0d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:a9:0c:a5:f8:4c:23:a2:f4:f1:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:48:09 2026 GMT
            Not After : Dec 27 17:48:09 2026 GMT
        Subject: CN=89f926e1-e2b8-4dec-91f2-5d061179110e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a1:90:cd:ad:c5:91:af:7a:a2:89:eb:97:38:
                    9e:0b:aa:96:99:f8:89:84:0b:0e:05:59:eb:eb:b6:
                    50:7f:ee:41:ae:88:94:05:13:40:40:1c:3b:f3:25:
                    a0:6b:0e:0b:3f:30:05:40:74:67:c8:f4:e8:3c:75:
                    81:6c:29:8e:83:11:53:53:b3:fa:f3:ef:23:69:ee:
                    2f:14:6a:01:be:b7:ca:82:ae:70:e2:93:d0:d7:19:
                    e1:8e:74:b5:da:56:00:a9:9c:15:25:8e:84:12:c5:
                    8f:34:c7:13:d5:71:f5:ea:39:f8:58:40:46:a8:68:
                    f7:7e:37:c1:a5:8d:0d:df:86:4e:d8:17:27:fc:3d:
                    9f:f0:95:7e:17:ce:17:7b:56:73:46:85:4b:68:86:
                    0c:16:24:df:5e:8b:3e:a4:8b:6a:54:5b:f1:11:a9:
                    fe:36:ea:c3:58:2a:eb:c7:bc:07:c7:a8:fa:81:73:
                    1f:e5:e6:92:32:c1:a1:3a:b5:87:7c:34:15:2e:44:
                    9b:03:93:de:07:3c:33:c2:0e:59:a3:c9:3f:2b:82:
                    db:6d:90:8e:f7:d5:e1:97:c9:9a:c1:af:cf:dc:a3:
                    59:a3:28:bd:29:08:bf:70:48:b5:1f:ee:33:d4:95:
                    61:8a:d7:ee:81:0e:26:67:65:e6:2b:e5:ac:db:07:
                    cd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A2:3A:A2:21:DC:52:D3:91:52:FA:DB:61:D9:4C:EA:4D:C3:40:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00596da9-6e5c-37df-a845-c2d39dade8aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:3f0d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:1b:96:bb:5b:f9:2e:23:50:4a:90:cd:08:39:7c:0a:81:9b:
         44:26:34:d6:f2:39:70:18:ee:1c:f8:87:43:ef:a8:bd:88:bf:
         5d:59:70:a6:0d:3a:ad:03:4a:dd:08:b4:fe:be:9f:d1:4f:01:
         c2:aa:fe:a0:f6:ad:76:02:8a:b0:07:cb:53:80:fd:85:6e:f9:
         97:09:8d:64:1a:7d:5c:21:4d:3c:83:32:58:d1:f6:8a:e5:1b:
         fc:36:08:c4:db:c1:92:ef:75:cc:04:ef:b6:93:d8:78:82:52:
         5f:6b:56:3d:48:a2:68:13:5f:2e:8e:3f:c5:6b:cb:9d:4a:bc:
         e0:dd:9a:98:15:b7:37:26:1f:80:cb:07:a7:1b:2f:a9:82:34:
         b9:1b:57:c3:b9:7e:b0:97:50:58:01:3f:05:ab:9a:1f:e3:fd:
         fc:a1:f2:be:cf:df:3a:f9:7e:13:64:f4:7f:ca:09:95:cc:8f:
         2b:cf:6f:1e:f0:c8:fb:18:34:af:6c:09:c0:d2:9b:07:39:1b:
         2d:5f:7d:30:77:2a:e9:79:13:8e:ab:8f:ba:44:ad:3f:5b:b6:
         96:22:f0:cd:cc:14:1c:49:57:28:91:61:9c:86:c2:91:c1:60:
         f8:bf:69:c5:67:31:c0:4a:ba:4a:fb:c7:ef:4a:58:ee:7c:33:
         c1:65:80:a8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9TqQyl+EwjovTxlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDkyODE2NDgwOVoXDTI2MTIyNzE3NDgwOVowLzEtMCsGA1UEAxMk
ODlmOTI2ZTEtZTJiOC00ZGVjLTkxZjItNWQwNjExNzkxMTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qGQza3Fka96oonrlzieC6qWmfiJhAsOBVnr
67ZQf+5BroiUBRNAQBw78yWgaw4LPzAFQHRnyPToPHWBbCmOgxFTU7P68+8jae4v
FGoBvrfKgq5w4pPQ1xnhjnS12lYAqZwVJY6EEsWPNMcT1XH16jn4WEBGqGj3fjfB
pY0N34ZO2Bcn/D2f8JV+F84Xe1ZzRoVLaIYMFiTfXos+pItqVFvxEan+NurDWCrr
x7wHx6j6gXMf5eaSMsGhOrWHfDQVLkSbA5PeBzwzwg5Zo8k/K4LbbZCO99Xhl8ma
wa/P3KNZoyi9KQi/cEi1H+4z1JVhitfugQ4mZ2XmK+Ws2wfNPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDyiOqIh3FLTkVL622HZTOpNw0D8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDA1OTZkYTktNmU1Yy0z
N2RmLWE4NDUtYzJkMzlkYWRlOGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeT8N
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFQblrtb+S4jUEqQzQg5fAqBm0QmNNbyOXAY7hz4h0PvqL2Iv11Z
cKYNOq0DSt0ItP6+n9FPAcKq/qD2rXYCirAHy1OA/YVu+ZcJjWQafVwhTTyDMljR
9orlG/w2CMTbwZLvdcwE77aT2HiCUl9rVj1IomgTXy6OP8Vry51KvODdmpgVtzcm
H4DLB6cbL6mCNLkbV8O5frCXUFgBPwWrmh/j/fyh8r7P3zr5fhNk9H/KCZXMjyvP
bx7wyPsYNK9sCcDSmwc5Gy1ffTB3Kul5E46rj7pErT9btpYi8M3MFBxJVyiRYZyG
wpHBYPi/acVnMcBKukr7x+9KWO58M8FlgKg=
-----END CERTIFICATE-----
Generated at Wed Sep 30 05:49:59 2026 by rpki-client