Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16620d86-42f9-30c4-9c8a-fa3e07decfef.roa
File:                     16620d86-42f9-30c4-9c8a-fa3e07decfef.roa (raw, json)
Hash identifier:          ijfrYxC/Exw2MHougAc39AzZ1IzT3rjiSJ7Ja2xQAXE=
Subject key identifier:   15:56:8C:48:D6:F8:39:80:1C:AE:2C:1D:E3:18:4F:80:8F:D6:95:08
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F94D32C1A2D00236E4DC0D280
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16620d86-42f9-30c4-9c8a-fa3e07decfef.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     22773
IP address blocks:        2001:579:b259::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:2c:1a:2d:00:23:6e:4d:c0:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=64fcb6d9-7e54-43e8-9112-e6f4a7ef5586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:c6:98:d2:8f:34:a0:69:67:52:e3:46:0d:
                    93:04:eb:3b:07:b6:29:88:5c:45:e4:f0:3f:f7:9f:
                    b3:a9:9d:90:3f:83:65:ae:8d:e0:72:d4:48:73:22:
                    98:e2:ab:c4:be:0a:ba:b8:79:7c:ce:ea:b1:b5:f4:
                    b8:a5:58:42:a7:75:3f:d9:62:ee:97:11:f3:58:3e:
                    56:5b:c9:ac:6e:a0:21:c9:77:39:54:d9:a9:71:b3:
                    69:f9:1e:14:84:00:1d:03:8f:d7:03:b9:6a:e8:1d:
                    25:9e:f7:a5:bd:8b:bb:96:29:fc:23:10:6c:00:76:
                    86:67:30:50:65:47:3a:0f:86:65:26:af:90:e8:95:
                    ed:26:cf:3d:e3:29:ef:b0:94:0b:2c:7e:21:bd:7d:
                    24:7d:56:d6:10:72:9b:af:1d:f7:34:52:31:76:6b:
                    21:84:e2:79:67:69:94:f0:5f:28:b6:ef:53:f7:d4:
                    32:ae:16:43:22:31:c5:07:7e:eb:c7:7f:bb:be:f4:
                    7e:78:86:58:a5:8b:75:76:b2:bf:c0:35:93:42:ca:
                    94:33:fd:4d:0c:de:fd:be:98:5f:d4:4a:dd:ca:7b:
                    34:c6:57:02:32:09:34:f1:53:96:f5:6a:3a:c0:10:
                    6a:69:bb:b3:e2:ee:f0:c9:7a:1f:7e:52:40:c6:fa:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:56:8C:48:D6:F8:39:80:1C:AE:2C:1D:E3:18:4F:80:8F:D6:95:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16620d86-42f9-30c4-9c8a-fa3e07decfef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:b259::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:51:ae:7f:9e:99:81:be:bd:08:65:e5:e5:78:72:9f:e8:fc:
         0b:d4:12:14:01:de:0e:c7:b2:47:92:72:41:21:e2:94:a3:ca:
         8e:80:2c:fa:b3:5b:d0:2b:ab:f8:14:49:98:98:7b:f9:d5:c2:
         b6:29:64:ef:53:2a:8e:01:73:5c:5d:35:31:4f:72:25:b1:ab:
         2a:2e:c1:9e:21:eb:71:fa:c1:9b:32:f6:3a:3a:11:bd:46:2c:
         13:e7:75:27:ed:25:67:e2:dd:b1:0e:83:6f:ec:e0:8f:cf:98:
         84:42:c8:43:db:41:02:8e:eb:a7:13:ee:fa:74:e6:db:4e:71:
         ec:42:05:1b:86:2f:bd:b5:3e:b4:8d:fb:a3:16:76:70:e7:50:
         7e:8d:a5:b5:bd:e9:82:d0:f1:43:d7:b4:46:7d:1c:68:78:88:
         5b:a3:2f:5b:66:7b:03:5a:71:15:61:3f:13:57:91:8c:a8:d8:
         7d:15:d5:0c:96:81:b3:5d:6e:f1:eb:00:7e:39:44:23:ba:61:
         49:f6:9b:8d:74:8e:a6:5f:38:a7:8b:43:5b:96:76:9a:c4:26:
         a1:72:26:f8:d5:61:a0:17:aa:b2:f5:a6:4e:fc:e4:52:30:6c:
         2d:6a:c7:79:b0:bd:9f:1a:f4:af:b6:69:7c:04:39:e0:13:a6:
         c8:e2:ff:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 08:23:09 2026 by rpki-client