Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d1141ab-6073-3252-824c-51f5bbec5487.roa
File:                     0d1141ab-6073-3252-824c-51f5bbec5487.roa (raw, json)
Hash identifier:          g2eS0iW++zi07SBnQd6JhyfJjuavhAei/8WKV8usMTs=
Subject key identifier:   83:83:B0:FB:10:F7:D7:16:CF:67:D3:BA:FB:E0:07:E6:AE:CC:21:BE
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F53AACA874797A8EE489941E0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d1141ab-6073-3252-824c-51f5bbec5487.roa
Signing time:             Mon 28 Sep 2026 16:51:40 +0000
ROA not before:           Mon 28 Sep 2026 16:51:40 +0000
ROA not after:            Sun 27 Dec 2026 17:51:40 +0000
asID:                     22773
IP address blocks:        2001:579:be05::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:aa:ca:87:47:97:a8:ee:48:99:41:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:51:40 2026 GMT
            Not After : Dec 27 17:51:40 2026 GMT
        Subject: CN=d1796c55-c624-4bef-878d-ef75edb81dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0b:80:d1:9d:9a:7b:a3:ef:d9:ef:14:95:2e:
                    6c:c1:2d:98:ba:a1:36:b5:8f:f4:d3:c6:e6:80:36:
                    87:4c:df:93:37:53:c9:9e:13:a0:6e:34:41:16:b5:
                    56:cb:cf:5b:6c:9a:3a:d2:dd:24:6c:7c:74:01:74:
                    92:71:3b:af:92:cf:a1:7e:1c:83:11:ff:db:8b:b4:
                    7c:dc:0c:85:b2:56:6c:42:a7:02:5b:41:a9:b9:d4:
                    34:71:bb:24:b8:7f:a3:0d:6c:1c:f2:59:5a:b2:e1:
                    81:a7:e7:a8:b8:92:ac:3c:8f:61:3e:13:1b:9e:7e:
                    fb:81:fb:fb:be:c1:af:cb:5e:73:b3:a1:7d:33:ba:
                    a5:e8:f6:29:0a:9c:6e:7d:fa:27:f8:ef:1c:65:bb:
                    7e:b4:14:5a:b0:f3:f4:db:fa:cf:6f:2f:7b:49:e3:
                    7a:14:5d:0a:82:4e:a8:6f:b2:ee:18:35:22:90:34:
                    01:44:6b:a9:ad:44:00:ae:28:8f:0d:d8:66:96:da:
                    f4:3f:ff:1d:d9:23:57:5a:63:62:2d:c4:99:d1:d6:
                    55:6f:cf:01:38:db:5d:06:cd:ce:6d:a5:ec:63:5b:
                    5b:9e:89:df:c6:90:6f:b8:7a:7e:de:23:7f:f0:f7:
                    51:ee:40:03:7e:36:5d:c0:a0:b9:51:1a:9b:4d:40:
                    e2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:83:B0:FB:10:F7:D7:16:CF:67:D3:BA:FB:E0:07:E6:AE:CC:21:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d1141ab-6073-3252-824c-51f5bbec5487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:be05::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:5b:bd:06:0a:54:a2:72:0d:7c:ae:90:66:7b:09:79:98:ca:
         43:ea:1f:1a:17:97:98:f9:73:c3:29:34:c1:79:0b:02:41:16:
         54:0c:9c:f3:e1:0f:4e:7c:64:ae:26:5d:d6:e0:ed:ba:e4:6f:
         f2:a9:8b:ce:d0:04:0d:24:1b:57:3e:fd:60:c8:56:4f:f5:b6:
         5e:30:6a:28:21:34:60:64:36:cf:af:dc:29:2b:67:cd:3a:27:
         2e:39:0c:ed:c7:db:0b:d8:26:ea:e9:fb:ea:df:54:69:81:05:
         07:52:f3:79:53:73:a1:7b:ff:67:1c:ba:49:55:0b:a8:2d:b7:
         3d:5e:3a:a4:bd:3e:a3:fc:80:44:6b:7f:c3:27:94:12:d7:31:
         7a:50:2a:4b:d5:dd:1c:a8:5b:04:99:ea:7c:dc:12:c0:48:47:
         21:88:40:4a:b1:d8:97:95:b3:da:ea:af:c7:fe:72:6a:5a:94:
         da:31:c0:f0:e7:34:18:7f:3d:81:85:93:f2:81:9c:b5:96:a7:
         f2:d0:df:45:10:19:d6:78:98:bc:72:97:14:43:2e:8a:45:ad:
         a7:36:ce:c7:34:1a:ed:f2:aa:54:9d:34:8f:e1:b8:2f:92:9a:
         55:04:bc:fb:6e:3d:bf:f6:da:b2:7f:f2:ce:eb:f7:68:f5:ca:
         e0:b3:74:38
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9TqsqHR5eo7kiZQeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDkyODE2NTE0MFoXDTI2MTIyNzE3NTE0MFowLzEtMCsGA1UEAxMk
ZDE3OTZjNTUtYzYyNC00YmVmLTg3OGQtZWY3NWVkYjgxZGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAuA0Z2ae6Pv2e8UlS5swS2YuqE2tY/008bm
gDaHTN+TN1PJnhOgbjRBFrVWy89bbJo60t0kbHx0AXSScTuvks+hfhyDEf/bi7R8
3AyFslZsQqcCW0GpudQ0cbskuH+jDWwc8llasuGBp+eouJKsPI9hPhMbnn77gfv7
vsGvy15zs6F9M7ql6PYpCpxuffon+O8cZbt+tBRasPP02/rPby97SeN6FF0Kgk6o
b7LuGDUikDQBRGuprUQAriiPDdhmltr0P/8d2SNXWmNiLcSZ0dZVb88BONtdBs3O
baXsY1tbnonfxpBvuHp+3iN/8PdR7kADfjZdwKC5URqbTUDi3QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIODsPsQ99cWz2fTuvvgB+auzCG+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGQxMTQxYWItNjA3My0z
MjUyLTgyNGMtNTFmNWJiZWM1NDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeb4F
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKtbvQYKVKJyDXyukGZ7CXmYykPqHxoXl5j5c8MpNMF5CwJBFlQM
nPPhD058ZK4mXdbg7brkb/Kpi87QBA0kG1c+/WDIVk/1tl4waighNGBkNs+v3Ckr
Z806Jy45DO3H2wvYJurp++rfVGmBBQdS83lTc6F7/2ccuklVC6gttz1eOqS9PqP8
gERrf8MnlBLXMXpQKkvV3RyoWwSZ6nzcEsBIRyGIQEqx2JeVs9rqr8f+cmpalNox
wPDnNBh/PYGFk/KBnLWWp/LQ30UQGdZ4mLxylxRDLopFrac2zsc0Gu3yqlSdNI/h
uC+SmlUEvPtuPb/22rJ/8s7r92j1yuCzdDg=
-----END CERTIFICATE-----
Generated at Thu Oct 1 23:28:45 2026 by rpki-client