Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b2fb6ba-8080-3206-b3e2-59248ffaa43f.roa
File:                     3b2fb6ba-8080-3206-b3e2-59248ffaa43f.roa (raw, json)
Hash identifier:          4E4+T4bb3U22t+TBgjKWkChtXlV+kCTpMUdNb6Xnpns=
Subject key identifier:   A7:0B:30:7A:ED:69:66:BB:FF:45:2D:A4:80:D2:EA:43:36:29:50:B2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F53ACC9368C506745817A6800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b2fb6ba-8080-3206-b3e2-59248ffaa43f.roa
Signing time:             Mon 28 Sep 2026 16:55:41 +0000
ROA not before:           Mon 28 Sep 2026 16:55:41 +0000
ROA not after:            Sun 27 Dec 2026 17:55:41 +0000
asID:                     22773
IP address blocks:        2600:8807:9cd0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:ac:c9:36:8c:50:67:45:81:7a:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:55:41 2026 GMT
            Not After : Dec 27 17:55:41 2026 GMT
        Subject: CN=6fba936c-925c-48de-ba86-630e42d33fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:40:17:26:de:4e:3a:5e:d7:12:72:66:d0:
                    5b:cb:26:56:91:21:0a:f7:a0:da:3d:95:46:13:41:
                    85:eb:3b:2f:18:aa:97:e9:4d:75:e4:bf:7a:e4:66:
                    4b:5b:9d:f3:f1:3c:db:42:66:02:86:9e:e4:e1:b3:
                    62:ed:5e:e9:c6:ce:44:4b:23:05:79:e1:d2:ce:78:
                    a7:73:79:aa:aa:1b:13:bb:04:d8:fa:e2:d3:7c:d7:
                    64:d5:ee:73:f6:1e:56:c3:ee:67:77:10:e2:bb:6a:
                    19:c6:5a:2e:c1:7f:06:7f:e5:36:b2:d2:38:51:99:
                    c0:ca:ef:94:3b:4c:c7:8a:07:29:0c:3f:05:4f:4f:
                    4b:19:a1:4d:9e:49:65:da:60:5f:b3:b1:f4:1d:34:
                    09:95:42:cb:63:21:0c:02:0e:15:ca:38:78:9d:d4:
                    81:d5:ac:0e:74:e9:7b:0d:e1:ce:87:83:aa:c1:4d:
                    46:2d:e4:51:60:63:9a:63:84:a8:9a:47:99:40:92:
                    7f:52:20:81:d8:42:51:97:20:b8:9e:b7:d0:c1:21:
                    5f:fa:42:28:5b:dc:08:d9:80:ec:3e:30:03:8f:7e:
                    87:12:9a:90:b0:23:7c:57:c5:8c:32:1b:36:23:1c:
                    ae:4f:a7:85:1a:59:d7:f5:dd:a5:91:8d:c5:88:65:
                    a4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0B:30:7A:ED:69:66:BB:FF:45:2D:A4:80:D2:EA:43:36:29:50:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b2fb6ba-8080-3206-b3e2-59248ffaa43f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8807:9cd0::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:52:b0:62:58:85:32:78:aa:c7:74:80:69:95:63:cc:00:9a:
         69:f8:f1:99:4a:ec:03:19:49:a2:70:26:ab:2e:0a:cc:13:cd:
         73:49:a8:aa:8c:d9:df:e0:e6:67:a2:c3:98:5b:6f:79:6f:2c:
         45:7e:95:d2:32:89:09:49:87:13:14:ed:07:7d:32:98:81:eb:
         fd:df:cc:21:e6:b2:8e:10:48:d4:c5:0b:0c:71:f0:00:4e:86:
         2e:f5:91:45:d3:6f:dd:17:94:63:f3:d1:dd:69:a6:d8:ed:71:
         13:16:30:fb:04:a3:3c:b4:65:6a:41:46:2a:a1:07:11:e7:6d:
         04:c5:d6:41:bc:63:df:8a:db:fd:29:5b:ee:d1:c5:e8:62:ba:
         28:d1:e3:22:3a:d9:f2:8a:ee:cc:ca:01:31:a5:aa:bb:a3:07:
         4f:f5:c1:70:c1:27:cf:43:cf:8e:93:73:8d:9a:22:b8:3a:e0:
         4f:eb:cb:f7:82:93:97:18:25:97:8f:c9:10:a3:ab:de:14:86:
         e2:f3:61:03:fa:0a:68:7a:d9:e7:0e:33:8c:ed:49:cf:60:cc:
         f8:cf:0d:5c:9b:b9:31:db:da:89:45:33:17:85:c9:a5:01:81:
         42:61:a9:3b:10:3d:a7:65:0a:a6:b0:ed:a8:14:a0:17:d4:81:
         b2:f4:1e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:46:06 2026 by rpki-client