Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/843dbe5d-0f23-3449-98d9-7d767a9efb9d.roa
File:                     843dbe5d-0f23-3449-98d9-7d767a9efb9d.roa (raw, json)
Hash identifier:          OuHgsRZkr/3ILa6/E+ttofXuEJLluPSQZZWYRO/pBuc=
Subject key identifier:   71:1E:85:BB:1D:60:1E:8C:86:F5:99:71:33:D9:23:6C:CA:C5:5C:52
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DAC45929377486C33E4606600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/843dbe5d-0f23-3449-98d9-7d767a9efb9d.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     22773
IP address blocks:        2001:579:a01d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:92:93:77:48:6c:33:e4:60:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=605f3815-c7a2-4891-bc0b-538da7ad544e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:4a:34:c1:93:8a:38:2a:12:cf:9f:72:63:
                    f0:5b:43:d7:33:af:4f:f1:3e:0f:5d:cc:c3:f1:a4:
                    9b:c1:c5:95:c2:bd:de:b9:5c:30:ff:4f:c2:07:ae:
                    1b:3f:4a:41:dc:0c:36:29:b8:e9:6f:16:0f:98:6d:
                    28:ba:2d:7b:df:e3:c6:1a:0b:56:9b:77:34:df:30:
                    60:d1:d1:47:ca:ca:73:36:0e:ff:87:f8:a1:9a:a5:
                    19:35:93:3f:4d:4e:69:e5:d7:ab:c6:04:f9:0a:6f:
                    af:e9:0d:30:97:3a:24:d7:e5:54:f3:9a:67:72:1b:
                    99:9d:3c:45:8a:d5:e9:7c:91:fd:41:97:50:b7:75:
                    96:18:b3:e0:cd:cb:4c:f4:18:62:43:47:dd:81:17:
                    6b:13:52:3f:5a:23:fc:35:3d:da:08:f0:43:2e:83:
                    19:3f:a0:09:0f:29:fe:e5:93:ec:c5:db:09:d4:c9:
                    9f:6e:c1:7c:30:31:ca:fb:32:1c:96:a9:b5:63:53:
                    c7:1b:59:45:60:8d:11:65:d6:bd:4a:e3:ed:7f:84:
                    93:98:a7:67:a6:bd:6f:88:c3:da:18:a9:3e:7c:41:
                    7b:8f:78:27:c9:03:af:72:0a:f4:7d:b5:e0:17:03:
                    9a:5c:80:c1:6d:89:64:84:ff:79:2e:46:00:07:5d:
                    df:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1E:85:BB:1D:60:1E:8C:86:F5:99:71:33:D9:23:6C:CA:C5:5C:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/843dbe5d-0f23-3449-98d9-7d767a9efb9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:a01d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:0d:b5:21:d0:20:2a:51:07:bf:6a:e7:c8:c3:7f:c3:20:ca:
         03:d0:f9:4e:2e:22:4b:c3:64:f4:f8:03:52:8e:55:9d:7e:4f:
         46:3d:4f:bb:7d:d9:ce:f8:c8:f2:57:49:90:0c:8f:fc:b3:c5:
         f6:d3:1d:21:64:32:9f:b5:27:67:fb:12:c6:28:aa:73:8c:a3:
         f4:60:30:d9:7f:cc:71:56:4e:d0:99:d6:e4:6e:2a:74:b4:fc:
         bb:2b:dc:33:29:71:aa:b1:a6:d2:f0:dc:49:c5:db:38:ac:f0:
         a7:9c:46:59:cb:23:bb:ef:1b:90:94:b8:dd:6a:31:5e:dd:a3:
         7a:d5:16:ab:06:78:ba:c1:07:13:49:ae:25:8f:50:15:42:37:
         58:0f:08:7d:51:ba:12:9a:b0:bd:f5:41:8f:ee:30:27:ea:67:
         89:e1:40:39:cd:ce:17:31:8e:17:40:82:f0:83:40:3c:b7:94:
         77:09:1a:6d:75:6c:db:ae:38:4c:33:9c:55:8d:3e:19:bc:6f:
         b3:50:15:02:99:a2:5e:e2:cf:fa:fb:16:a7:c3:62:c0:b0:98:
         d2:3a:25:38:2c:0c:67:f7:16:8f:1d:db:85:b8:20:d5:52:0f:
         0d:32:3f:85:05:67:de:18:3e:50:74:4c:67:ee:9c:0d:8c:7d:
         dd:bf:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 22:36:43 2026 by rpki-client