Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/90569177-0a12-31c5-96a3-93d54c0cf664.roa
File:                     90569177-0a12-31c5-96a3-93d54c0cf664.roa (raw, json)
Hash identifier:          xFM67pJggAgxAFU9D9kOhlHs3ZM3huOhw9qmahEccxc=
Subject key identifier:   C7:90:47:E0:5B:65:81:19:03:A7:3D:97:FB:1B:53:61:BF:7F:40:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B9CA22BE0DF104F7A28F36B34
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/90569177-0a12-31c5-96a3-93d54c0cf664.roa
Signing time:             Thu 23 Oct 2025 01:00:31 +0000
ROA not before:           Thu 23 Oct 2025 01:00:31 +0000
ROA not after:            Wed 21 Jan 2026 02:00:31 +0000
asID:                     36628
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:a2:2b:e0:df:10:4f:7a:28:f3:6b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 23 01:00:31 2025 GMT
            Not After : Jan 21 02:00:31 2026 GMT
        Subject: CN=5c9bea82-9e78-4cf0-8106-8a11884da206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5a:47:fd:88:7d:88:be:29:5c:2c:8f:45:7e:
                    9d:3a:ae:da:36:6c:00:f4:8f:ba:17:2a:25:ae:86:
                    9b:fa:95:78:1c:be:d5:d2:a8:4f:e4:f0:b3:63:15:
                    b0:5d:ec:a6:e3:a3:fa:85:67:72:0b:f6:34:9c:b0:
                    49:16:6f:93:ec:72:52:25:74:97:a7:39:60:78:62:
                    9a:29:89:5b:c9:15:25:fe:1c:d8:e2:25:c5:f7:c2:
                    00:a0:ba:ef:f1:3f:0b:c5:b3:ab:81:b7:38:33:ed:
                    b0:d8:ff:73:b0:01:ea:41:62:67:25:b4:88:86:04:
                    4e:57:33:e3:e9:70:d5:ce:da:31:52:fa:e0:2c:5b:
                    09:82:82:ed:5e:a4:b4:29:b1:c9:80:c3:7c:0b:79:
                    f6:ff:99:d0:28:e9:83:18:b1:e5:57:a8:f7:6d:24:
                    e9:18:65:73:f3:61:4b:ea:e1:bf:bd:e2:ec:f0:e4:
                    04:78:12:df:6b:71:26:5a:74:88:02:6e:ab:5d:28:
                    52:b4:ab:92:35:de:07:d3:21:41:e1:dd:66:b1:4c:
                    e2:fa:dc:f7:1d:8b:26:6c:41:b5:23:47:10:22:a9:
                    6d:7d:04:bd:b6:b1:13:95:d3:4d:58:d4:10:d1:67:
                    fa:63:94:de:66:bd:2f:df:52:08:0d:8e:30:b1:ec:
                    3c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:90:47:E0:5B:65:81:19:03:A7:3D:97:FB:1B:53:61:BF:7F:40:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/90569177-0a12-31c5-96a3-93d54c0cf664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:26:ba:b9:78:8e:39:0c:53:50:1f:1e:db:b3:70:e6:28:81:
         2e:f6:8b:7e:65:66:4e:6d:30:b9:0e:d5:90:18:00:07:97:dc:
         6b:6a:1d:63:52:a6:3b:3d:0e:aa:71:d1:a2:07:22:bd:94:e0:
         b2:27:16:0d:a7:ab:0b:29:3d:d1:63:e9:4b:c0:1c:c6:4f:20:
         67:78:91:bb:3e:0b:81:bb:35:31:08:f9:1d:58:9d:40:9d:6f:
         68:82:91:23:5b:39:eb:06:c2:d6:15:92:46:aa:b8:9f:04:63:
         10:b5:33:e4:89:a3:7d:e6:83:ed:2a:e1:bb:e0:f9:4a:98:2c:
         fb:d1:f6:15:07:1b:49:36:bc:90:7f:f0:1a:ec:32:23:2d:2b:
         2e:f9:23:7c:ab:fb:3b:f0:59:6b:0a:b2:76:c1:c7:ec:55:15:
         b0:76:4f:ee:8f:da:b6:fe:04:69:04:f9:1c:b4:10:af:35:6b:
         32:a6:fd:fc:54:0a:4b:df:3d:ca:95:4a:59:c2:a3:6a:52:eb:
         42:d3:64:a7:fc:d3:80:84:e9:20:63:ed:61:72:37:b8:c7:17:
         f7:2c:df:99:af:1f:04:67:05:94:79:b2:f9:c9:8b:a2:4b:53:
         5b:14:52:78:47:44:1c:52:fc:77:44:17:fa:71:08:06:5a:6c:
         b7:9c:c2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:18:31 2025 by rpki-client