Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/270c4c71-80b9-34b2-9453-90424c97536b.roa
File:                     270c4c71-80b9-34b2-9453-90424c97536b.roa (raw, json)
Hash identifier:          KlUjHpL0iJJ1X8xNj8C8KbCPXAH1x40GUk9dCnjjCco=
Subject key identifier:   9D:D2:14:67:FA:B1:EE:2E:13:42:A4:61:53:6E:2D:03:DA:C8:5C:C2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F53AA94A13715A88CF7EA3800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/270c4c71-80b9-34b2-9453-90424c97536b.roa
Signing time:             Mon 28 Sep 2026 16:51:14 +0000
ROA not before:           Mon 28 Sep 2026 16:51:14 +0000
ROA not after:            Sun 27 Dec 2026 17:51:14 +0000
asID:                     22773
IP address blocks:        2001:579:b0d4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:aa:94:a1:37:15:a8:8c:f7:ea:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:51:14 2026 GMT
            Not After : Dec 27 17:51:14 2026 GMT
        Subject: CN=f505396c-5d47-4225-b69e-85b92acdbf85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:4f:ee:bf:3f:da:de:d0:37:56:01:26:b8:
                    cb:8a:09:14:bd:5e:15:32:55:9c:1f:d7:a9:86:22:
                    56:97:6f:d2:13:4f:48:73:a1:5d:a0:fa:56:4d:33:
                    eb:cd:48:e0:b2:9a:8a:de:86:d2:d2:a5:0e:b5:f1:
                    1c:84:01:60:a3:2a:5c:6e:a9:cf:ce:9d:ee:c7:59:
                    38:96:be:2f:aa:4f:e3:d3:6b:b8:5b:b0:1f:08:7a:
                    f4:d8:05:03:cd:7b:25:36:46:07:11:1c:f2:ac:5b:
                    26:6a:8a:22:6a:91:8b:85:49:51:d7:15:ed:f7:91:
                    b8:f4:f7:21:23:0f:bc:67:2f:79:9f:e2:34:b8:2f:
                    f3:0d:fe:bd:33:b9:10:9d:97:44:1a:3b:89:14:4c:
                    2d:a6:7a:d0:50:f3:d7:bd:1d:4d:84:36:0d:e6:27:
                    63:ea:19:bb:07:e6:6f:4a:ff:8b:ce:81:b0:58:1e:
                    27:00:cb:ce:b0:96:56:66:20:42:98:21:fb:5b:42:
                    89:4d:ed:00:de:43:fc:8e:a1:68:47:39:97:17:8a:
                    d2:60:1e:85:52:88:3b:49:4e:ce:0f:76:f0:ad:88:
                    e1:4f:2f:ae:eb:74:ab:95:34:51:2e:97:11:ac:e6:
                    97:e8:e7:ad:a1:ab:22:41:ae:f3:c3:55:df:98:9a:
                    fa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D2:14:67:FA:B1:EE:2E:13:42:A4:61:53:6E:2D:03:DA:C8:5C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/270c4c71-80b9-34b2-9453-90424c97536b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:b0d4::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:11:7f:91:86:d2:ac:6a:62:a0:98:8c:d5:93:44:ec:2a:84:
         91:33:2a:ce:e8:9f:13:f5:72:61:a6:92:f9:ee:7f:1b:51:6f:
         a9:3d:80:1f:18:be:98:1c:00:43:9a:27:8a:d7:b8:65:a4:d9:
         0a:25:4c:b3:a6:e1:ae:21:3f:fa:69:7c:1a:51:54:4f:3e:46:
         c8:48:9a:a0:61:78:b0:65:ba:a1:92:23:8f:ca:9d:df:52:21:
         8f:53:b4:fb:5e:78:36:f2:09:c6:de:e6:91:40:56:f9:17:ba:
         f6:63:0b:3c:82:d7:4e:26:50:18:42:b0:5b:c7:fb:5a:bb:05:
         9d:cd:12:e2:ab:41:dc:49:9b:ca:12:a5:05:a8:90:c2:32:1b:
         6b:41:dc:d4:f6:c3:6f:36:4c:ca:cb:13:ee:44:9a:96:0c:8b:
         d0:bb:d5:9c:7f:a3:d0:62:af:ae:aa:18:84:0d:9f:6d:02:fa:
         27:c5:ed:2d:af:b9:ba:47:e0:31:98:66:00:af:e5:d9:83:a6:
         d4:08:5c:7b:2d:cd:9b:b6:eb:5b:8d:a6:be:e3:a6:00:be:c1:
         29:a8:43:f1:7a:46:98:11:32:72:b3:40:3f:23:56:d9:05:92:
         e2:68:11:30:d7:36:f2:dc:e0:6a:f3:0a:4a:0b:e9:a7:ff:36:
         65:cb:14:1c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9TqpShNxWojPfqOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDkyODE2NTExNFoXDTI2MTIyNzE3NTExNFowLzEtMCsGA1UEAxMk
ZjUwNTM5NmMtNWQ0Ny00MjI1LWI2OWUtODViOTJhY2RiZjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVpP7r8/2t7QN1YBJrjLigkUvV4VMlWcH9ep
hiJWl2/SE09Ic6FdoPpWTTPrzUjgspqK3obS0qUOtfEchAFgoypcbqnPzp3ux1k4
lr4vqk/j02u4W7AfCHr02AUDzXslNkYHERzyrFsmaooiapGLhUlR1xXt95G49Pch
Iw+8Zy95n+I0uC/zDf69M7kQnZdEGjuJFEwtpnrQUPPXvR1NhDYN5idj6hm7B+Zv
Sv+LzoGwWB4nAMvOsJZWZiBCmCH7W0KJTe0A3kP8jqFoRzmXF4rSYB6FUog7SU7O
D3bwrYjhTy+u63SrlTRRLpcRrOaX6OetoasiQa7zw1XfmJr6rQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ3SFGf6se4uE0KkYVNuLQPayFzCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjcwYzRjNzEtODBiOS0z
NGIyLTk0NTMtOTA0MjRjOTc1MzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFebDU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFURf5GG0qxqYqCYjNWTROwqhJEzKs7onxP1cmGmkvnufxtRb6k9
gB8YvpgcAEOaJ4rXuGWk2QolTLOm4a4hP/ppfBpRVE8+RshImqBheLBluqGSI4/K
nd9SIY9TtPteeDbyCcbe5pFAVvkXuvZjCzyC104mUBhCsFvH+1q7BZ3NEuKrQdxJ
m8oSpQWokMIyG2tB3NT2w282TMrLE+5EmpYMi9C71Zx/o9Bir66qGIQNn20C+ifF
7S2vubpH4DGYZgCv5dmDptQIXHstzZu261uNpr7jpgC+wSmoQ/F6RpgRMnKzQD8j
VtkFkuJoETDXNvLc4GrzCkoL6af/NmXLFBw=
-----END CERTIFICATE-----
Generated at Wed Sep 30 19:51:11 2026 by rpki-client