Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/90d49a3c-6bdc-3822-ae6f-0a9f8f916a74.roa
File:                     90d49a3c-6bdc-3822-ae6f-0a9f8f916a74.roa (raw, json)
Hash identifier:          Pvo2sNdZdlBC0hPevQ+sgyB8g3mpKJMJ77fEjOUIN2c=
Subject key identifier:   FC:A1:4A:3F:93:2D:B7:29:B7:4C:93:DE:37:EE:BB:B7:43:B6:3D:84
Certificate issuer:       /CN=969446db-6a2e-47bc-a33b-2dd883bfb899
Certificate serial:       010D0C9F4328584C602BD7D248459FBA50F1B200
Authority key identifier: 8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/90d49a3c-6bdc-3822-ae6f-0a9f8f916a74.roa
Signing time:             Thu 01 Jan 2026 02:00:31 +0000
ROA not before:           Thu 01 Jan 2026 02:00:31 +0000
ROA not after:            Wed 01 Apr 2026 01:00:31 +0000
asID:                     33309
IP address blocks:        2620:106:800e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:60:2b:d7:d2:48:45:9f:ba:50:f1:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969446db-6a2e-47bc-a33b-2dd883bfb899
        Validity
            Not Before: Jan  1 02:00:31 2026 GMT
            Not After : Apr  1 01:00:31 2026 GMT
        Subject: CN=ab1ae09b-2830-47ed-900a-44a29b13a1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b9:06:54:a2:e5:92:04:62:e0:6f:48:12:57:
                    06:be:b3:ac:9a:a7:c0:e1:1b:93:17:73:87:d9:94:
                    62:61:6a:67:d3:b1:d3:54:1d:5a:12:11:bd:1b:90:
                    8e:9b:04:1a:d4:b3:75:f4:ea:cb:d5:52:34:70:2b:
                    50:b0:4d:d2:6c:92:95:99:c1:73:a6:d1:6c:88:f9:
                    32:cd:bc:4a:20:90:ce:14:5d:ca:48:57:7a:67:61:
                    a8:4b:65:f9:ec:09:0b:c1:54:0c:ba:41:e7:0a:21:
                    6d:52:23:6e:a6:f6:58:f0:19:5a:86:cf:65:89:66:
                    18:b7:10:cd:e5:72:38:fe:1e:17:1b:f5:b1:fd:85:
                    41:7c:8b:8c:8f:73:d9:67:37:ed:bb:97:d8:7b:09:
                    33:60:93:f0:f1:0e:80:a9:48:de:83:c6:09:bb:5e:
                    61:e1:84:53:0e:a9:fc:36:64:9b:23:1c:7e:16:fa:
                    57:e8:8f:2d:13:4a:5d:6f:7a:44:94:cd:ad:6a:d1:
                    a5:39:7e:6d:5c:5c:64:0f:9b:e6:79:82:15:fe:ea:
                    2d:8b:de:f3:b8:22:3b:1e:69:9e:d3:b0:da:a9:b4:
                    72:6e:d4:ce:de:8d:20:e0:1e:fd:3f:3f:2e:89:0c:
                    1a:3d:2e:a5:33:94:64:b2:e8:bc:b6:bc:56:fd:6f:
                    67:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A1:4A:3F:93:2D:B7:29:B7:4C:93:DE:37:EE:BB:B7:43:B6:3D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/90d49a3c-6bdc-3822-ae6f-0a9f8f916a74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl

            X509v3 Authority Key Identifier:
                keyid:8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:106:800e::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:be:87:7c:ee:b5:9b:89:6a:5f:6b:9f:05:0e:4a:38:66:cb:
         cd:b7:b0:4f:a7:b2:e5:81:33:72:de:29:6c:c4:46:e5:12:ba:
         31:c9:1d:d0:8e:6a:ee:7c:f9:b4:f2:6b:b0:ed:11:94:81:1a:
         fd:de:60:54:bb:f0:70:f9:c1:81:ae:7c:e4:06:8c:d0:96:9f:
         85:29:47:ec:e3:46:86:46:7d:af:1a:f5:ba:80:79:6f:e9:60:
         cc:be:f8:32:48:d5:b1:4f:22:4a:5c:b3:7e:3f:91:01:66:57:
         2a:a7:00:d2:ec:ef:d8:f6:d4:69:ae:6f:af:43:74:75:5a:c0:
         89:7c:8a:07:69:60:16:12:4b:84:e0:75:5e:34:59:ce:8f:2c:
         51:85:e6:4d:00:8b:66:cb:61:eb:8c:1f:e0:d0:80:fc:58:0f:
         f3:3c:1e:0c:05:e1:58:b1:b0:45:9c:bc:26:29:0f:01:4a:32:
         c2:87:c6:a0:cd:44:4e:2e:17:d6:f7:97:42:e2:5c:18:92:51:
         ff:d4:d3:0c:74:40:fc:6c:d0:5b:03:49:f8:c2:96:ef:cb:25:
         c0:51:8e:f0:eb:ce:c0:b1:e4:ce:4a:9f:95:4d:73:fa:9d:17:
         9e:16:b2:7d:56:2f:5c:8a:1c:65:bf:5b:59:e4:77:6f:35:4c:
         2e:25:d8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:14:23 2026 by rpki-client