Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/189a0996-37e5-364f-8efd-fb0b6d460c27.roa
File:                     189a0996-37e5-364f-8efd-fb0b6d460c27.roa (raw, json)
Hash identifier:          QTvADjNIOwwv5ccO5ND1lcG9pqBE2F5/X/n1KyZAnv0=
Subject key identifier:   56:5F:18:6E:05:A9:86:D6:E4:F8:41:4A:66:22:41:41:9D:8C:83:A3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F53AC1E3A9A45AE61189BD240
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/189a0996-37e5-364f-8efd-fb0b6d460c27.roa
Signing time:             Mon 28 Sep 2026 16:54:20 +0000
ROA not before:           Mon 28 Sep 2026 16:54:20 +0000
ROA not after:            Sun 27 Dec 2026 17:54:20 +0000
asID:                     22773
IP address blocks:        2600:8804:280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:ac:1e:3a:9a:45:ae:61:18:9b:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:54:20 2026 GMT
            Not After : Dec 27 17:54:20 2026 GMT
        Subject: CN=c6a280f7-1cc3-4f5c-a377-3d42abb0a391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:7d:b8:d2:f4:b6:bd:f3:d3:d4:04:e7:2b:
                    9f:41:ed:7e:b7:3c:cc:12:26:82:a6:72:6b:3c:66:
                    38:2e:ad:43:d9:f1:ff:80:65:c9:35:08:4c:35:9a:
                    fc:f5:d4:74:19:80:97:89:27:9a:26:30:61:d8:c2:
                    af:05:41:57:d3:77:97:e8:62:64:f1:ac:0d:fd:00:
                    48:a9:ea:12:77:9a:37:25:95:e6:da:20:21:8e:7b:
                    56:83:2e:eb:a6:61:26:0f:dc:2c:f7:34:9d:33:0e:
                    d8:ab:be:1e:44:f9:b8:59:60:a8:2d:8c:94:65:6d:
                    d4:86:aa:59:76:1e:1e:29:da:61:82:6e:90:91:64:
                    47:5e:d3:4f:51:5c:cc:cf:96:54:c0:4d:ae:d2:82:
                    be:b5:23:38:3c:91:a3:f9:93:7c:5c:0e:79:a3:6b:
                    b8:ed:ea:f0:74:c7:a1:c8:dc:05:ca:1b:59:82:62:
                    7b:3d:67:28:af:2b:17:30:78:90:7f:7a:74:1f:cb:
                    cb:05:dd:75:4b:ef:56:89:46:32:51:7e:25:7d:1c:
                    af:66:14:fe:14:ed:34:12:11:47:c7:c2:cd:ae:b5:
                    98:45:bd:ea:ed:24:6d:ba:31:32:24:dd:2d:47:83:
                    f9:6f:fb:dc:69:8a:62:9d:26:13:26:a2:50:b4:dd:
                    5d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5F:18:6E:05:A9:86:D6:E4:F8:41:4A:66:22:41:41:9D:8C:83:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/189a0996-37e5-364f-8efd-fb0b6d460c27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8804:280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:1e:b3:ad:7e:c9:5b:ce:de:1b:9d:fa:a2:56:64:cb:37:0e:
         f0:c4:61:c3:e7:07:9e:17:fd:15:ba:ba:a8:0b:96:cf:42:a1:
         04:b7:a7:0f:bd:b5:cf:35:28:97:45:cb:5b:0a:2e:82:93:89:
         c3:54:a4:95:c6:28:d3:0c:9b:1c:40:3b:d1:7d:c4:88:68:3b:
         db:4e:74:c8:79:4a:d1:67:5a:98:40:7d:0f:52:88:c2:bf:7d:
         a2:a9:1b:50:fd:1e:b4:c8:ba:60:44:91:73:a7:74:86:ef:1b:
         4e:7d:05:62:96:a2:b5:93:64:e2:63:8e:84:7b:b0:4e:24:50:
         9d:30:3f:b1:fc:8d:62:cf:8a:9f:62:06:b6:d2:9d:2b:5b:45:
         7c:51:1f:ae:0e:1d:e8:58:23:e5:bc:f7:f6:98:f0:c3:86:e8:
         46:8c:31:7e:0d:af:3f:b1:d2:9d:9d:77:75:af:01:61:05:87:
         83:92:9c:b3:06:41:37:86:8b:aa:e1:c6:ca:0f:02:50:69:58:
         b4:f6:63:23:06:dd:bb:b7:48:80:5d:29:7b:f6:d3:62:73:94:
         f8:b0:9a:2c:84:d2:74:e6:81:2d:97:a0:55:17:5d:91:a4:59:
         31:bd:fe:bd:d3:92:f2:fc:0e:85:b4:30:a2:ca:57:74:da:a1:
         91:03:4d:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9TrB46mkWuYRib0kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDkyODE2NTQyMFoXDTI2MTIyNzE3NTQyMFowLzEtMCsGA1UEAxMk
YzZhMjgwZjctMWNjMy00ZjVjLWEzNzctM2Q0MmFiYjBhMzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ip9uNL0tr3z09QE5yufQe1+tzzMEiaCpnJr
PGY4Lq1D2fH/gGXJNQhMNZr89dR0GYCXiSeaJjBh2MKvBUFX03eX6GJk8awN/QBI
qeoSd5o3JZXm2iAhjntWgy7rpmEmD9ws9zSdMw7Yq74eRPm4WWCoLYyUZW3UhqpZ
dh4eKdphgm6QkWRHXtNPUVzMz5ZUwE2u0oK+tSM4PJGj+ZN8XA55o2u47erwdMeh
yNwFyhtZgmJ7PWcorysXMHiQf3p0H8vLBd11S+9WiUYyUX4lfRyvZhT+FO00EhFH
x8LNrrWYRb3q7SRtujEyJN0tR4P5b/vcaYpinSYTJqJQtN1dTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFZfGG4FqYbW5PhBSmYiQUGdjIOjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTg5YTA5OTYtMzdlNS0z
NjRmLThlZmQtZmIwYjZkNDYwYzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIBAKA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAges61+yVvO3hud+qJWZMs3DvDEYcPnB54X/RW6uqgLls9CoQS3
pw+9tc81KJdFy1sKLoKTicNUpJXGKNMMmxxAO9F9xIhoO9tOdMh5StFnWphAfQ9S
iMK/faKpG1D9HrTIumBEkXOndIbvG059BWKWorWTZOJjjoR7sE4kUJ0wP7H8jWLP
ip9iBrbSnStbRXxRH64OHehYI+W89/aY8MOG6EaMMX4Nrz+x0p2dd3WvAWEFh4OS
nLMGQTeGi6rhxsoPAlBpWLT2YyMG3bu3SIBdKXv202JzlPiwmiyE0nTmgS2XoFUX
XZGkWTG9/r3TkvL8DoW0MKLKV3TaoZEDTRQ=
-----END CERTIFICATE-----
Generated at Wed Sep 30 06:16:27 2026 by rpki-client