Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0920cecf-d7cc-34ed-ac1c-c2b649dd0949.roa
File:                     0920cecf-d7cc-34ed-ac1c-c2b649dd0949.roa (raw, json)
Hash identifier:          DjUg7xRouLBFsN64BpMvBGGfsy6ZyzSvYJllkEsdIWc=
Subject key identifier:   92:34:5A:E8:02:D9:25:4A:F7:B6:EA:7C:D4:2D:E2:F3:22:21:72:EE
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F53AA7776D8C0708DB5FA7180
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0920cecf-d7cc-34ed-ac1c-c2b649dd0949.roa
Signing time:             Mon 28 Sep 2026 16:51:01 +0000
ROA not before:           Mon 28 Sep 2026 16:51:01 +0000
ROA not after:            Sun 27 Dec 2026 17:51:01 +0000
asID:                     22773
IP address blocks:        2001:579:a150::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:aa:77:76:d8:c0:70:8d:b5:fa:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:51:01 2026 GMT
            Not After : Dec 27 17:51:01 2026 GMT
        Subject: CN=0d6a6916-fd39-4825-8a80-6abbb94d4a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a9:62:43:da:1b:b6:3c:80:46:d3:58:71:92:
                    03:8d:d8:27:5c:fa:be:65:50:0d:1c:c9:35:16:1c:
                    dd:8b:c2:b3:32:28:f7:a0:d6:94:82:31:07:c2:15:
                    36:45:7c:79:5e:12:e5:93:5b:cf:43:d6:fd:6d:62:
                    ba:b8:2f:63:24:fe:c6:8c:2f:50:f1:57:80:59:0e:
                    a2:ff:d7:42:24:1a:3d:6d:3b:75:b8:da:0c:67:a8:
                    cb:07:0f:b5:ac:e8:6a:83:5a:a1:38:e7:35:5c:b0:
                    ee:4f:eb:88:ac:41:a5:a0:35:e5:32:5f:c9:91:21:
                    7f:43:bc:ef:6e:ad:52:ad:90:74:95:83:0a:80:0a:
                    97:a6:5b:15:85:55:a0:a2:98:97:fd:4d:b4:e8:69:
                    fc:68:05:31:84:9c:49:cf:34:fd:de:bb:e0:74:7c:
                    14:cf:a5:37:25:5d:a3:3f:d8:5a:31:a1:72:ff:1b:
                    06:34:52:69:f1:d1:23:50:e6:c6:b7:11:82:a5:82:
                    f7:95:11:5f:0d:e7:78:b6:6c:28:c6:1f:4e:5c:0a:
                    d6:e6:83:db:50:ac:0c:62:b1:58:65:23:98:d9:10:
                    2e:02:18:26:88:42:84:0b:d7:44:b9:fc:90:dd:72:
                    dd:81:11:44:31:2f:64:66:30:61:f5:c0:55:fb:15:
                    b8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:34:5A:E8:02:D9:25:4A:F7:B6:EA:7C:D4:2D:E2:F3:22:21:72:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0920cecf-d7cc-34ed-ac1c-c2b649dd0949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:a150::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:47:c5:af:2d:ea:32:83:a7:d0:92:74:cc:34:c9:26:0d:1a:
         dd:35:b6:6a:ea:45:1c:46:ae:49:89:fc:0e:91:b2:b3:ec:cb:
         4a:a2:31:3a:28:39:cd:ac:2e:9d:ee:52:52:c9:1b:a1:08:8e:
         1b:58:fc:34:01:54:76:dc:11:5f:2b:b8:bd:91:a0:44:38:f8:
         a0:9b:79:24:14:45:5a:56:ab:ae:08:84:37:0e:51:f3:d5:25:
         c4:dd:b4:21:9b:4c:46:50:26:53:4a:9f:38:1a:43:6c:35:9b:
         a3:69:e5:4c:e1:d1:1a:bb:72:5e:ae:25:e1:c5:42:f3:92:27:
         68:ec:b9:76:9f:cc:c0:e1:bc:c4:28:73:35:01:30:74:bf:84:
         13:f1:4e:c6:f4:57:e0:20:c2:8b:6c:b4:7d:94:ae:42:13:25:
         d8:7e:3d:58:a3:a5:fb:e3:61:94:10:b3:20:b9:4f:fe:b1:9c:
         ce:ce:ea:df:66:6e:00:91:85:c0:c1:bb:c7:cf:16:12:86:7e:
         77:dc:ec:eb:d6:15:b6:b0:34:52:a1:a7:15:b4:16:68:b9:3a:
         28:04:96:74:ed:13:9c:b3:36:ae:30:c2:d7:91:52:21:b8:f1:
         98:68:f7:cf:d7:29:36:1d:53:d2:2b:e9:b1:d3:7a:46:bb:e7:
         b3:f0:fd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 18:41:32 2026 by rpki-client