Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bc1e058-784f-355d-8cc6-a83c3fd24abd.roa
File:                     3bc1e058-784f-355d-8cc6-a83c3fd24abd.roa (raw, json)
Hash identifier:          BI/IBPbB2Rn/sxMACDPIsUBh5SvUrN+Pa/9Qmk1eXMo=
Subject key identifier:   06:F9:72:1D:ED:18:32:79:7F:48:88:8F:84:4E:0A:6C:68:85:EF:30
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D20AF78244E4D190C57DE2AC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bc1e058-784f-355d-8cc6-a83c3fd24abd.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        2001:57a:4122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:78:24:4e:4d:19:0c:57:de:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=b61640c5-125c-4324-b822-a0a22ee3dcc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6e:05:a2:6f:33:8a:fb:70:82:86:ce:7e:33:
                    7d:8d:42:12:a5:f2:15:99:56:d1:dc:98:09:62:a7:
                    5a:e4:47:ab:87:5c:e2:ec:19:3b:c8:44:26:42:bd:
                    86:11:e3:57:77:0c:39:29:9f:5e:9a:4e:82:87:7a:
                    54:bb:82:22:5c:2a:10:99:54:f8:b3:3b:26:33:29:
                    ac:af:6a:dd:65:18:23:e4:ec:05:dd:f5:d7:ee:55:
                    07:c6:4f:82:86:82:66:54:c9:d2:05:13:11:91:c2:
                    f9:dc:ec:1e:2b:c1:85:42:ba:94:59:31:6e:92:9b:
                    50:d8:05:44:d0:62:2c:43:71:eb:30:f7:db:f6:3f:
                    75:65:c4:d7:3f:80:d8:57:5a:d6:8f:c3:d3:a1:b7:
                    97:2a:87:10:8e:eb:13:0a:7f:9c:8f:9c:33:52:ea:
                    fc:2d:cf:2c:04:fa:4b:f8:61:3d:33:0e:c0:74:06:
                    ad:82:42:95:2a:7a:5e:af:9e:93:f3:df:a3:a6:1a:
                    17:db:2b:ac:19:53:99:99:6c:57:91:1d:08:01:a5:
                    17:29:81:2c:7d:fd:e3:d2:62:a4:7d:5b:10:b6:76:
                    9c:6e:6a:9d:39:06:74:36:d1:09:9c:10:b5:f6:17:
                    fe:ee:3d:9d:75:55:5c:14:36:49:3d:27:fc:70:38:
                    3c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F9:72:1D:ED:18:32:79:7F:48:88:8F:84:4E:0A:6C:68:85:EF:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bc1e058-784f-355d-8cc6-a83c3fd24abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:57a:4122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e6:b4:52:f7:0d:72:2e:a3:1e:d9:94:f1:a1:fc:c6:ce:8c:
         49:e1:e5:33:72:2b:fe:0d:07:b4:9f:8e:d2:2b:b1:b4:8d:71:
         d6:a4:e6:14:ba:bf:17:63:89:50:c0:9d:a1:ab:50:19:37:75:
         85:0c:e8:d0:99:b5:7b:cd:30:ff:af:31:4f:62:6e:40:52:b6:
         c5:24:6e:85:13:e3:23:a5:1b:f4:df:ac:84:63:5a:3c:27:6c:
         aa:e8:ed:8d:1b:29:58:38:2e:c6:a7:94:33:f5:fd:3f:4d:22:
         27:38:e1:ce:c2:05:7e:cb:cd:cd:45:1c:aa:81:15:6c:04:8b:
         70:40:19:fc:84:9f:95:e2:97:9e:00:5f:84:8a:31:eb:d0:d7:
         23:66:4c:44:26:14:ec:35:43:dc:30:29:39:4d:70:c7:4d:3c:
         b3:10:e6:ff:33:3b:f2:bd:4d:c3:16:ed:02:79:45:41:b6:dc:
         2b:59:0d:c2:4e:9d:0e:00:8b:42:25:00:31:3e:4a:a4:b7:bc:
         65:eb:67:ae:9c:42:ff:6a:c0:a3:57:55:29:a8:fe:6e:a5:a3:
         e5:a8:38:ee:9b:c5:fc:a5:2c:34:2f:5e:a3:c6:bc:7d:36:73:
         68:3e:e4:c8:88:c2:9a:ba:cc:54:d8:86:f6:d7:9b:04:2b:e8:
         d7:9d:c7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 06:56:23 2026 by rpki-client