Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39e399bf-4bd5-31d7-93eb-a0808fe258e3.roa
File:                     39e399bf-4bd5-31d7-93eb-a0808fe258e3.roa (raw, json)
Hash identifier:          kOdJMuIZuQKq4jHYMAKi08PWvBBaf7+4QUaSoL+NL0M=
Subject key identifier:   6C:E3:EC:D7:5E:2C:2C:A2:EF:D4:B7:19:73:36:4C:3E:B6:1F:D1:03
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F53AC448ADA2FA4C2111B6780
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39e399bf-4bd5-31d7-93eb-a0808fe258e3.roa
Signing time:             Mon 28 Sep 2026 16:54:38 +0000
ROA not before:           Mon 28 Sep 2026 16:54:38 +0000
ROA not after:            Sun 27 Dec 2026 17:54:38 +0000
asID:                     22773
IP address blocks:        2600:8804:f20::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:ac:44:8a:da:2f:a4:c2:11:1b:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:54:38 2026 GMT
            Not After : Dec 27 17:54:38 2026 GMT
        Subject: CN=50528a40-1497-4b76-9bd1-5cf9f882975f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b3:3e:df:04:8c:92:fe:2b:8c:27:bc:7b:bc:
                    e5:93:22:33:24:6f:63:ae:cc:a8:a5:b6:13:9b:7b:
                    7e:aa:76:9b:60:46:c8:eb:5b:1d:1d:45:70:8f:aa:
                    f7:cd:83:57:b4:77:6b:1a:42:3e:dd:1a:32:89:6d:
                    29:78:a3:ab:dc:cd:19:b5:68:88:d7:96:5c:15:5b:
                    67:8c:e5:d6:c6:64:cc:c0:d6:86:bd:f2:18:04:02:
                    49:1c:db:7f:1f:74:c0:61:10:bc:e2:57:4d:cf:c4:
                    58:64:2f:97:09:8d:c2:2b:bc:76:69:7c:f3:80:81:
                    46:88:12:00:03:b6:84:58:5a:ef:2d:d1:76:fa:af:
                    2f:fd:90:57:6d:c4:54:8e:dc:2c:73:37:1d:74:9c:
                    ff:d2:e0:d5:98:f6:33:fd:32:5d:e8:fe:0b:c8:2f:
                    14:e2:5d:b8:f0:d9:58:e1:9e:1f:7f:7e:1d:80:7b:
                    bd:8f:8b:df:88:51:8e:09:ae:07:1e:72:b4:99:5b:
                    48:e2:6f:af:4f:35:04:35:c6:b5:95:f4:7b:61:30:
                    be:af:2a:8d:bf:09:44:ab:e9:43:fa:59:d3:16:9e:
                    76:fc:7b:e3:67:aa:bf:cf:58:a7:c0:7f:b0:a0:8b:
                    b6:bf:b1:40:16:0b:f8:05:b6:b0:b2:8a:8d:68:f6:
                    cb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E3:EC:D7:5E:2C:2C:A2:EF:D4:B7:19:73:36:4C:3E:B6:1F:D1:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39e399bf-4bd5-31d7-93eb-a0808fe258e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8804:f20::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:35:77:e0:ee:23:33:c9:03:5d:ec:dc:d4:ae:6b:53:0a:53:
         ed:9d:28:22:30:53:0f:d8:2b:bb:a7:0e:02:c6:63:e9:bb:bc:
         8c:ed:46:5c:42:a8:39:9a:f0:8b:3b:8c:73:47:cd:5e:bf:f0:
         0d:f6:70:0a:ba:aa:ff:71:6c:10:b0:33:02:3f:fe:41:ec:71:
         eb:b0:b2:b7:1a:7c:41:0a:00:c4:9b:6c:7f:9d:68:3a:29:f7:
         a1:6c:cf:d6:cc:ed:fb:7a:3b:9a:8b:9d:46:19:d0:f7:56:93:
         aa:e9:a9:e9:7b:66:f7:bc:e6:3a:fd:49:0b:ce:a4:cd:f9:f9:
         c4:ba:c9:b6:10:18:b9:1f:05:b6:dc:b8:10:03:aa:d5:ad:08:
         34:e7:c2:e6:88:7f:03:fc:db:25:fd:e3:45:01:48:64:45:9c:
         5c:bb:b4:e9:a2:93:28:8c:9f:77:a6:26:82:eb:52:61:c0:60:
         63:1c:17:dd:bc:b6:79:a5:f4:a3:e1:d7:66:9e:76:10:c5:4e:
         a0:74:5f:6b:a6:04:38:f2:3f:54:4f:e3:64:24:2f:10:39:a5:
         1f:5d:5b:a4:21:e3:7d:6b:50:a5:db:14:23:c6:f8:67:45:fa:
         76:ff:96:0f:60:3b:6b:4b:3b:c1:f1:ab:af:55:7f:f1:62:bf:
         0f:c7:d0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:36:47 2026 by rpki-client