Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ef8a3fc-2ced-36bd-8986-2882ca897647.roa
File:                     2ef8a3fc-2ced-36bd-8986-2882ca897647.roa (raw, json)
Hash identifier:          fi0POcd3U0mPPaFrJFt3UmmP7UWjMREHoe8353J41+w=
Subject key identifier:   8F:49:76:02:26:A8:F6:2A:AB:B8:34:AD:72:A6:E9:18:5E:B7:AA:9B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01EAD4054E657E8940A680
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ef8a3fc-2ced-36bd-8986-2882ca897647.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:2cbc::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:ea:d4:05:4e:65:7e:89:40:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=ab1c496a-71a6-4657-b030-399ee2638963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:33:4d:8d:57:a7:1c:2d:3e:b7:fa:4e:35:b8:
                    43:b6:59:69:6b:11:e1:9d:60:06:a0:40:db:56:0d:
                    fd:a6:bc:47:12:3e:da:ef:2d:06:ab:3f:04:4d:60:
                    15:0d:b7:bd:4f:cd:ba:5e:4a:66:7d:9f:68:c9:07:
                    c1:02:c3:e4:b9:8d:55:bd:93:8c:02:d7:30:df:e6:
                    29:f9:64:c9:5c:8d:5e:21:37:df:62:4d:cb:4a:5e:
                    45:ca:0d:f1:d3:d7:2a:f6:b8:72:54:83:a3:ff:33:
                    52:5d:83:21:b5:2c:8d:c5:12:9a:cf:d8:3c:85:4d:
                    16:7b:69:3d:8a:40:3d:90:c1:60:24:84:e8:15:67:
                    00:b6:c8:ab:18:5e:45:f6:eb:16:b5:eb:a4:a9:44:
                    31:dc:d9:7e:a9:10:ef:0b:2e:c3:b3:77:95:34:28:
                    61:91:fd:bc:6c:b1:cd:60:ab:a3:44:83:28:ba:b7:
                    d6:8e:b1:fa:18:d6:6b:64:0b:b1:25:20:37:85:13:
                    3b:b4:28:49:3d:9d:47:b1:4e:ae:76:78:43:68:d5:
                    e6:de:ca:3d:d4:36:1c:78:90:2a:b1:13:40:1d:78:
                    c7:2a:da:25:2c:6f:d4:37:4d:bc:01:f1:5f:c7:60:
                    c2:98:b4:fa:78:51:26:6c:d1:1a:59:99:00:42:0f:
                    cb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:49:76:02:26:A8:F6:2A:AB:B8:34:AD:72:A6:E9:18:5E:B7:AA:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ef8a3fc-2ced-36bd-8986-2882ca897647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:2cbc::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:65:0c:a8:ac:a3:53:86:29:80:f1:31:27:09:03:8c:05:ce:
         db:a2:c7:7e:91:1a:1f:a3:ee:5e:14:86:74:1b:c0:d0:98:8a:
         40:01:4a:19:73:66:b0:b0:71:aa:1f:3d:85:47:24:58:d2:d0:
         49:d4:9a:c5:37:6c:46:9a:74:c9:0a:89:94:25:4d:a6:7a:74:
         31:af:0f:1e:fc:0b:6f:8d:83:04:7e:e7:01:29:a2:64:ba:bd:
         af:3b:88:7a:23:e0:95:d4:8f:37:41:9f:9e:86:be:50:56:8d:
         d2:45:51:0b:04:c3:ee:ab:82:4f:4b:f9:8e:ea:21:f1:6f:c4:
         03:41:f4:fd:31:56:c7:fe:8e:1e:3a:ee:33:fa:1f:d2:3a:92:
         12:ee:00:68:8c:6a:d3:b9:a5:74:e1:02:fc:30:b5:2a:e1:3d:
         13:fe:21:79:44:3f:4a:5f:67:f4:41:1e:76:7e:70:ec:4c:c1:
         35:9f:c7:54:d9:24:9c:1f:a2:36:a7:fa:65:7d:68:a3:fa:9a:
         7a:05:4d:b2:01:e0:60:c9:71:65:64:53:3c:35:70:96:76:0b:
         c1:0a:21:50:0a:2d:4d:c5:f5:47:0c:2d:5c:5d:20:e2:21:98:
         3e:9e:2e:3e:20:9b:6c:93:55:71:c0:09:98:30:c3:e9:78:56:
         42:1f:f1:1e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAerUBU5lfolApoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
YWIxYzQ5NmEtNzFhNi00NjU3LWIwMzAtMzk5ZWUyNjM4OTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjNNjVenHC0+t/pONbhDtllpaxHhnWAGoEDb
Vg39prxHEj7a7y0Gqz8ETWAVDbe9T826XkpmfZ9oyQfBAsPkuY1VvZOMAtcw3+Yp
+WTJXI1eITffYk3LSl5Fyg3x09cq9rhyVIOj/zNSXYMhtSyNxRKaz9g8hU0We2k9
ikA9kMFgJIToFWcAtsirGF5F9usWteukqUQx3Nl+qRDvCy7Ds3eVNChhkf28bLHN
YKujRIMourfWjrH6GNZrZAuxJSA3hRM7tChJPZ1HsU6udnhDaNXm3so91DYceJAq
sRNAHXjHKtolLG/UN028AfFfx2DCmLT6eFEmbNEaWZkAQg/LowIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI9JdgImqPYqq7g0rXKm6Rhet6qbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmVmOGEzZmMtMmNlZC0z
NmJkLTg5ODYtMjg4MmNhODk3NjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIACy8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABNlDKiso1OGKYDxMScJA4wFztuix36RGh+j7l4UhnQbwNCYikAB
ShlzZrCwcaofPYVHJFjS0EnUmsU3bEaadMkKiZQlTaZ6dDGvDx78C2+NgwR+5wEp
omS6va87iHoj4JXUjzdBn56GvlBWjdJFUQsEw+6rgk9L+Y7qIfFvxANB9P0xVsf+
jh467jP6H9I6khLuAGiMatO5pXThAvwwtSrhPRP+IXlEP0pfZ/RBHnZ+cOxMwTWf
x1TZJJwfojan+mV9aKP6mnoFTbIB4GDJcWVkUzw1cJZ2C8EKIVAKLU3F9UcMLVxd
IOIhmD6eLj4gm2yTVXHACZgww+l4VkIf8R4=
-----END CERTIFICATE-----
Generated at Thu Oct 16 02:03:38 2025 by rpki-client