Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07272fb6-e81a-3e25-bbdf-3bb0d8c4b353.roa
File:                     07272fb6-e81a-3e25-bbdf-3bb0d8c4b353.roa (raw, json)
Hash identifier:          wDDR7Zv+rPLRj3agfC7uv2aIOLrw01yWKQbPfUYmKSI=
Subject key identifier:   7C:27:CD:40:42:06:FF:AA:47:54:56:1A:02:5C:CB:64:69:03:A9:DF
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F53ACD4BF5F23F235D8C7ED00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07272fb6-e81a-3e25-bbdf-3bb0d8c4b353.roa
Signing time:             Mon 28 Sep 2026 16:55:47 +0000
ROA not before:           Mon 28 Sep 2026 16:55:47 +0000
ROA not after:            Sun 27 Dec 2026 17:55:47 +0000
asID:                     22773
IP address blocks:        2600:8807:aaf2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:ac:d4:bf:5f:23:f2:35:d8:c7:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:55:47 2026 GMT
            Not After : Dec 27 17:55:47 2026 GMT
        Subject: CN=eb6d7769-dbc2-40b4-b918-0011c744d375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dc:83:33:6a:f8:e3:80:ef:26:88:37:2b:73:
                    d7:2f:40:d4:88:1f:12:b8:7a:29:aa:a2:47:24:59:
                    67:1b:a3:37:ae:ce:d8:92:af:88:05:68:90:3d:03:
                    52:16:82:6b:0b:0c:8e:98:44:65:99:5e:03:0d:44:
                    4d:54:d6:e8:48:79:b7:fb:44:e9:d1:4c:94:45:b4:
                    91:2d:75:15:ff:74:56:f8:a7:99:ed:52:d1:f5:38:
                    89:f0:f4:0e:20:70:49:1e:d8:71:0c:e6:9d:ff:30:
                    19:a7:96:ed:90:a5:2e:69:b2:6b:72:57:5d:86:60:
                    8b:ba:23:14:a9:73:4c:aa:db:c4:38:c5:d7:ca:96:
                    e5:e4:74:a3:ff:52:e4:a6:56:c2:de:27:bf:f9:d3:
                    c9:c9:ff:3f:c5:2a:3b:b5:36:9a:dd:45:11:33:cd:
                    45:63:be:9c:77:f0:26:c9:92:67:6d:a3:02:e6:f2:
                    4e:03:93:e3:d8:55:d1:26:9d:b6:bb:dd:a4:2e:7c:
                    13:61:0d:f2:ca:9e:95:66:e0:b4:42:db:89:e5:b4:
                    cc:23:aa:38:55:dc:f1:07:df:52:99:89:4d:91:79:
                    5f:b6:1c:fd:4c:0f:bf:e5:df:b3:a1:00:69:f8:f1:
                    5b:72:ab:b2:d9:29:8b:ba:cc:90:06:07:6b:03:0c:
                    e2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:27:CD:40:42:06:FF:AA:47:54:56:1A:02:5C:CB:64:69:03:A9:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07272fb6-e81a-3e25-bbdf-3bb0d8c4b353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8807:aaf2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:3b:f7:92:b4:f4:33:14:68:4a:b2:0d:ff:37:81:22:a5:73:
         87:1b:8c:4f:94:a7:b6:d0:0d:37:6e:bb:4d:a7:b5:3f:11:7c:
         1d:6e:69:e5:0f:4c:1e:03:67:b6:05:08:3b:aa:28:ce:c9:25:
         94:64:0a:39:4e:ef:3d:d5:8c:81:2c:0e:ce:a7:26:b7:93:55:
         85:1c:9c:c5:ef:f9:21:dd:a1:74:8d:04:0e:b6:a0:8d:50:95:
         80:96:3e:f9:84:8c:bf:ea:d8:90:38:1a:ed:af:46:44:1f:64:
         7e:ed:12:51:c1:24:e2:4e:55:0f:69:aa:86:71:70:62:37:34:
         c1:57:42:19:68:c4:43:5a:13:a5:1e:7d:17:d8:85:ce:e4:8c:
         01:78:36:87:1a:d9:92:ed:5f:61:58:ff:ed:58:8e:d3:55:3f:
         3f:80:60:3d:b5:8b:c4:94:69:fc:da:8d:c4:96:cf:c0:05:46:
         39:5b:5f:0b:bc:bb:69:e1:53:e6:57:71:07:45:1e:49:99:9f:
         ca:4c:e7:fe:de:6c:56:80:0e:63:b3:7e:4a:ea:a9:4f:30:f0:
         e0:37:0f:0a:2e:63:6d:02:e2:2d:2d:48:9a:53:32:d4:d3:62:
         f5:68:62:c8:5c:0a:67:32:18:dd:44:0d:b3:24:f9:3b:1c:72:
         31:3d:e1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:59:32 2026 by rpki-client