Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01dad117-a345-320e-a312-a265b5238db8.roa
File:                     01dad117-a345-320e-a312-a265b5238db8.roa (raw, json)
Hash identifier:          F63899rycaxVU7hFEPLR0kMeXP/hVAMl19nj8rxuGp4=
Subject key identifier:   6A:16:5C:32:22:48:7F:50:29:2B:1F:C1:A3:2B:B3:7A:4F:4F:8D:FC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F94D32AADD7F3CE45DAA608FE
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01dad117-a345-320e-a312-a265b5238db8.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     22773
IP address blocks:        2001:579:110c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:2a:ad:d7:f3:ce:45:da:a6:08:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=721a4857-9b6c-412e-b0fc-5683545f5fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fd:2f:d0:d6:c9:9e:45:74:b2:ad:d6:57:54:
                    b3:62:27:2a:73:e3:88:de:6f:1b:cb:2b:e0:b6:c6:
                    aa:ca:c4:38:a5:b0:2d:b2:c2:51:02:b0:58:33:87:
                    05:44:30:fb:3b:1c:bd:3b:a8:aa:c2:ed:24:c8:bb:
                    58:03:7e:1c:f5:cf:fb:17:18:ab:fa:2f:c7:60:9e:
                    86:24:b7:13:bf:b1:da:57:f9:50:ae:15:fc:b6:3c:
                    ea:e4:8c:46:62:d5:ee:70:17:88:89:0c:c0:37:4c:
                    5e:9b:2a:73:2f:70:56:57:c8:e5:3b:3b:47:21:94:
                    d5:f9:d9:e9:d6:ff:85:60:6e:44:d8:e0:12:19:4e:
                    b6:0e:b8:f9:f1:6d:60:2c:15:91:3b:b2:c0:d6:19:
                    c9:a0:a8:b0:f7:3f:6e:53:17:c0:63:3c:38:92:35:
                    ad:6b:e2:8d:74:81:03:51:1e:b3:47:42:fb:43:2f:
                    73:7f:07:fd:ff:45:12:11:ab:49:bb:8e:57:16:1d:
                    0b:d9:34:eb:fc:28:fb:ec:f3:cc:3a:79:9a:8b:4c:
                    c2:06:89:fb:68:c2:1e:9c:15:68:7e:7b:6e:f1:86:
                    91:17:16:91:48:43:6c:ec:2b:00:b2:cb:5a:69:4d:
                    f5:bf:ad:9d:65:74:50:b7:b5:1d:5a:31:66:ec:ef:
                    d8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:16:5C:32:22:48:7F:50:29:2B:1F:C1:A3:2B:B3:7A:4F:4F:8D:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01dad117-a345-320e-a312-a265b5238db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:110c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:46:a6:48:c0:44:30:04:d4:7f:3a:d2:81:36:bc:2f:0e:a2:
         6e:0c:07:ec:bb:f9:ef:5c:c1:6d:ff:7a:fa:b3:18:b0:27:ac:
         80:eb:49:bf:e3:7b:c5:11:8c:29:48:6f:6b:18:d3:26:84:78:
         e3:a1:21:6d:b2:be:0e:6e:f4:55:bf:75:a6:51:52:69:23:da:
         c1:50:bd:5e:a2:48:64:6a:47:2d:3b:b4:52:50:b8:c4:14:94:
         8f:bc:8c:f6:ca:7e:5a:36:48:56:9b:07:55:f1:2f:54:66:2f:
         81:47:76:7c:52:0d:e9:6d:54:fe:0b:d7:63:49:a7:24:f6:1c:
         32:bd:8a:16:a2:ed:de:5a:b6:61:0f:af:c6:40:6f:38:f8:ea:
         68:94:6d:4b:f8:24:b5:1e:4e:ee:ec:aa:3d:e0:9f:35:4b:e1:
         eb:5c:7c:e3:26:d7:61:85:17:a7:31:82:38:45:79:e4:45:3f:
         01:8b:94:c9:9e:80:6f:58:06:38:d9:0a:b1:c5:cc:15:50:e8:
         77:09:6c:f6:50:57:de:67:1c:89:37:d3:27:8d:fe:0c:8c:2a:
         5f:ed:ee:18:23:25:51:4b:56:f7:36:80:02:9b:8b:ce:a5:19:
         13:6b:c1:e4:ac:82:a9:ad:5e:76:cb:2a:d3:43:06:aa:5c:cb:
         12:f5:52:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 16:22:27 2026 by rpki-client