Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01e6a20a-cb28-35a0-80bb-e795fa181873.roa
File:                     01e6a20a-cb28-35a0-80bb-e795fa181873.roa (raw, json)
Hash identifier:          qKdtZjQv2iMQSppwHt5CMudeC/Cm8Bw1nLWbsCKiFCE=
Subject key identifier:   DF:C4:69:A5:E5:1B:C8:22:AD:8A:45:85:4C:D2:EA:4F:CE:27:66:D6
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F53A9D4BFC848B496A69D02C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01e6a20a-cb28-35a0-80bb-e795fa181873.roa
Signing time:             Mon 28 Sep 2026 16:49:44 +0000
ROA not before:           Mon 28 Sep 2026 16:49:44 +0000
ROA not after:            Sun 27 Dec 2026 17:49:44 +0000
asID:                     22773
IP address blocks:        2001:579:8044::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:a9:d4:bf:c8:48:b4:96:a6:9d:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:49:44 2026 GMT
            Not After : Dec 27 17:49:44 2026 GMT
        Subject: CN=33de4a22-d66b-4d42-9f5f-c1c7d407df6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d7:81:04:ae:a2:57:b0:9f:24:83:d4:29:b3:
                    f9:61:98:90:c6:99:d1:59:cd:09:36:b9:17:7a:5e:
                    7d:f0:d9:90:98:e2:82:59:7a:04:be:09:b5:45:45:
                    61:10:34:d8:7f:22:65:38:a6:96:43:54:3e:d1:a8:
                    c0:fd:91:d4:3f:f7:90:fb:c2:4e:71:e7:c2:8c:4d:
                    e9:64:07:e8:fd:22:fa:2f:42:44:e6:a1:ea:dd:ac:
                    f7:2f:7a:37:28:14:ff:c9:45:36:de:32:5f:1c:49:
                    8b:cd:7d:70:dc:33:c9:d8:1d:73:ed:ac:17:c6:32:
                    f6:3e:e1:d2:e8:20:d6:02:2b:5e:33:68:2b:38:05:
                    ea:2d:86:64:64:9d:ac:61:3d:a1:f4:f1:a0:be:ff:
                    c0:6b:de:9d:52:eb:39:c9:6b:5d:24:9b:30:b2:9e:
                    ee:84:4e:da:84:05:7a:94:6e:be:4c:0d:af:d9:8b:
                    86:d7:b1:21:80:92:cb:02:0a:ca:81:02:04:45:a4:
                    79:b6:17:91:4c:a4:e4:5c:b6:e2:d6:03:15:b5:d8:
                    ff:e3:01:e5:43:f3:8c:9c:48:1a:ec:ef:c0:af:d1:
                    8c:06:cd:44:a5:98:5c:5e:3d:08:cb:80:5b:a7:a5:
                    49:fd:69:ac:92:02:cc:21:88:60:d0:e1:ce:20:56:
                    1f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C4:69:A5:E5:1B:C8:22:AD:8A:45:85:4C:D2:EA:4F:CE:27:66:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/01e6a20a-cb28-35a0-80bb-e795fa181873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:8044::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:73:a2:a6:c4:3b:68:b4:08:e6:11:bb:3b:91:36:9f:26:b2:
         39:16:96:ba:92:4c:9a:92:de:55:74:19:07:8e:0b:9e:e4:e3:
         14:5f:bf:19:f9:65:cb:56:08:ee:28:6f:e1:5c:ec:58:7f:02:
         c9:4c:6b:f4:72:82:0a:02:ee:12:00:d8:d2:be:e8:93:59:b8:
         22:42:b5:05:fd:53:de:1a:f8:da:76:7c:93:61:52:50:0d:58:
         e1:5b:1b:9f:12:c1:29:ed:81:ca:20:53:c0:25:9e:51:c7:7f:
         ba:9b:2a:1b:b9:13:be:56:dc:a3:1f:23:2c:5e:e8:1d:10:3d:
         9e:f1:f1:bc:0d:69:c1:d0:a2:d5:13:5f:bd:2f:6e:5c:60:18:
         d0:b9:d6:ea:a9:5d:76:00:86:eb:45:68:69:6f:9f:a5:a5:0b:
         27:6b:3e:6c:a9:31:ec:36:90:ca:88:38:a4:80:3b:68:e9:6d:
         f2:49:b3:e0:21:96:9f:5d:84:82:9b:18:b8:42:3c:5a:75:69:
         97:bb:d5:01:90:49:c1:43:0e:5c:4d:0e:c3:c2:02:72:d1:38:
         3a:79:81:bb:54:68:e1:2e:57:30:79:a0:34:a6:0a:10:d4:e1:
         ff:d5:f0:87:51:68:47:2c:5e:aa:ce:08:d0:9a:29:ca:02:9c:
         1d:3d:b8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:56:06 2026 by rpki-client