Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f5a73d7-fcc4-36c0-84b5-6f3a838a7766.roa
File:                     2f5a73d7-fcc4-36c0-84b5-6f3a838a7766.roa (raw, json)
Hash identifier:          jK9+Agn1V8pWGZM0wY9WYeA4Sel030kJDu8GmctYKRI=
Subject key identifier:   70:31:10:72:D5:A3:EA:47:7C:FE:82:B9:61:36:5E:98:41:54:6A:5F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F53A97C10935558AB45242900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f5a73d7-fcc4-36c0-84b5-6f3a838a7766.roa
Signing time:             Mon 28 Sep 2026 16:49:02 +0000
ROA not before:           Mon 28 Sep 2026 16:49:02 +0000
ROA not after:            Sun 27 Dec 2026 17:49:02 +0000
asID:                     22773
IP address blocks:        2001:579:6098::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:a9:7c:10:93:55:58:ab:45:24:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:49:02 2026 GMT
            Not After : Dec 27 17:49:02 2026 GMT
        Subject: CN=f2cb9461-ea34-4c56-94b6-3def4bbc33d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:48:90:6e:71:c7:c8:f8:86:34:57:8f:1a:
                    5e:a1:d3:0e:30:0b:f8:e6:b3:4f:3e:44:da:ab:53:
                    f9:9a:16:f2:8d:f8:b7:a3:b1:d9:a5:08:50:04:87:
                    e1:89:5c:06:80:49:46:7c:27:ba:98:8b:a0:45:0d:
                    05:1e:d5:be:e2:01:b8:81:79:6a:fa:6a:06:a1:8b:
                    d6:52:fe:c8:f2:8f:00:9b:91:17:26:7b:cf:0d:49:
                    6c:a0:8f:f2:e5:c7:b2:da:e0:bf:4f:5e:7c:df:99:
                    da:32:5f:41:61:f3:db:e0:a9:cb:1e:c7:68:c5:fc:
                    4c:2a:0a:7a:a6:eb:c8:a5:c6:4d:5c:52:06:f3:dc:
                    34:b9:2d:8d:2b:e6:47:8f:a5:3d:b5:db:56:41:4e:
                    8e:50:02:00:27:09:17:45:d0:7d:5f:3a:21:fb:92:
                    80:6a:c8:16:e2:ef:9a:83:db:7c:dd:b7:af:93:b3:
                    af:31:c0:0c:70:2d:86:31:61:8a:11:bd:e4:1c:6f:
                    16:f4:cf:0d:05:1e:4c:6d:a2:98:d8:48:a5:b0:77:
                    22:bd:ac:42:34:58:47:06:9e:8a:ab:dd:b4:59:e7:
                    2a:a9:44:b7:ac:86:df:9a:b4:04:9d:f4:76:84:a1:
                    21:ad:22:c0:8c:53:67:91:48:da:6e:b7:9c:61:04:
                    60:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:31:10:72:D5:A3:EA:47:7C:FE:82:B9:61:36:5E:98:41:54:6A:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f5a73d7-fcc4-36c0-84b5-6f3a838a7766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:6098::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:05:9f:69:16:57:8b:c7:09:57:a7:33:b5:e3:bb:df:68:74:
         93:a8:de:13:64:85:ce:6e:88:df:ea:1e:c2:10:9f:86:e9:2a:
         24:86:da:82:b6:bd:d3:ca:c2:3f:d6:79:bf:a1:60:a6:bf:c9:
         d5:52:21:88:d5:e6:84:02:77:57:e2:ed:b3:24:06:0b:67:22:
         5c:f5:9f:01:19:76:a7:db:95:ac:dc:a3:7b:e2:12:9d:93:1f:
         a3:1b:c4:30:3a:d1:02:7b:0f:d0:8d:50:f5:c3:fb:c4:d3:61:
         28:c3:9a:d0:0c:39:63:4b:5a:eb:08:f1:8d:34:78:23:66:83:
         b9:21:1d:25:92:b5:a8:24:10:5d:ef:52:04:01:b1:31:78:88:
         be:ae:89:2c:7e:8f:7d:21:cd:ad:71:36:27:a3:92:88:3f:88:
         35:4a:de:13:36:ca:55:b4:3f:66:3c:89:b9:fa:fd:1e:9e:e8:
         a9:71:29:e5:92:97:08:c6:35:d9:ed:be:b5:df:eb:4b:57:43:
         23:88:f2:f3:97:57:47:75:60:50:bd:42:ea:e1:dd:b9:f4:0b:
         e0:18:80:73:3f:43:67:36:57:22:ca:b8:a6:b4:df:04:56:fc:
         e3:d5:fb:dd:bb:30:60:7a:d0:f5:db:07:cb:77:9f:68:62:b8:
         26:4f:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 07:13:38 2026 by rpki-client