Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3c6326ac-53a0-3856-b896-aed6e3f34aca.roa
File:                     3c6326ac-53a0-3856-b896-aed6e3f34aca.roa (raw, json)
Hash identifier:          frz1B/rWMroCOrML823nDnuo0TMA6lLaseCXEG8ajS4=
Subject key identifier:   40:18:31:9D:64:12:6E:86:4D:75:7C:13:99:53:46:AD:E2:7E:48:E7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F53A99621E0108CA8423C8800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3c6326ac-53a0-3856-b896-aed6e3f34aca.roa
Signing time:             Mon 28 Sep 2026 16:49:14 +0000
ROA not before:           Mon 28 Sep 2026 16:49:14 +0000
ROA not after:            Sun 27 Dec 2026 17:49:14 +0000
asID:                     22773
IP address blocks:        2001:579:61ac::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:a9:96:21:e0:10:8c:a8:42:3c:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:49:14 2026 GMT
            Not After : Dec 27 17:49:14 2026 GMT
        Subject: CN=41ecb654-e412-41f2-85e2-eae882f9c4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f5:b7:21:d1:a6:10:e7:80:6d:a9:57:ea:81:
                    25:a2:f3:b2:3d:3d:c6:92:1f:d7:84:89:9b:cc:21:
                    54:b7:9f:cc:4d:dd:78:56:82:32:6a:f1:2b:da:70:
                    1e:a9:3d:d6:72:3d:c4:4b:6e:78:db:c7:22:b5:de:
                    fc:34:ae:fc:02:44:cd:fe:87:c6:31:eb:30:45:39:
                    49:16:e1:a6:8d:87:50:34:0b:9d:45:3f:c5:d5:0d:
                    09:e7:91:21:a6:b0:ec:d3:10:fc:bc:95:88:73:1b:
                    b5:e0:c5:72:a9:b1:86:db:f9:0d:8b:8f:51:71:b2:
                    11:fe:20:95:4f:ec:04:28:79:b1:8a:59:63:76:11:
                    7f:ba:eb:49:7d:c7:55:7a:28:51:e5:ae:7d:c8:9f:
                    07:67:38:0c:eb:46:8e:f0:80:e9:de:86:5e:71:c9:
                    fc:fd:2a:5c:e1:70:54:29:ad:9f:76:c7:77:62:7a:
                    83:22:2f:bd:44:a1:d8:02:07:e5:80:85:b0:b4:15:
                    fb:72:86:bc:61:49:49:9f:27:4b:15:62:07:ee:d2:
                    55:65:c8:a7:94:9d:74:4a:fd:ca:f7:11:b7:3b:d2:
                    11:25:e3:a3:8c:5e:5f:68:4d:02:f4:46:96:37:e6:
                    d1:01:97:de:fd:13:3f:ca:85:ba:64:b2:2b:62:a1:
                    69:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:18:31:9D:64:12:6E:86:4D:75:7C:13:99:53:46:AD:E2:7E:48:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3c6326ac-53a0-3856-b896-aed6e3f34aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:61ac::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:57:4d:1b:1a:3c:49:de:a5:cf:a3:2a:e7:f0:ee:4d:cd:28:
         29:3d:88:68:26:da:b5:6b:03:5c:3a:f2:67:50:af:b4:3b:91:
         f9:ef:79:95:3b:d6:83:ee:16:e6:2a:3e:f7:0b:46:f2:f3:44:
         c2:b7:f2:44:48:b3:f8:fc:ff:31:58:e1:b3:58:a1:b8:9d:de:
         60:de:0f:fb:e1:7f:cc:74:d5:c5:8b:f9:5c:fa:f7:88:4d:4b:
         df:81:dc:f5:9e:34:ff:08:ed:ff:19:67:4b:55:d9:f4:ba:f9:
         2a:80:02:ba:9d:eb:20:16:e2:c5:4e:08:83:3d:a8:87:a9:a6:
         50:e0:cd:63:96:be:e0:26:fe:e1:4e:5f:e5:83:97:d6:be:aa:
         93:96:cf:38:7c:15:99:bb:bf:15:c2:5a:2a:78:0d:65:0c:a0:
         a2:0d:1d:4f:1d:57:49:cb:80:1b:d4:79:21:6e:86:e2:56:f5:
         e7:a4:ce:1e:a9:cc:83:8e:68:5d:7e:dd:84:a8:43:9f:5f:71:
         15:56:03:d7:29:56:9b:a4:f8:66:bc:6a:f5:fe:6d:b6:7b:ea:
         74:85:c4:23:dd:18:37:84:13:17:f6:40:b5:c5:06:66:52:c8:
         e5:01:dc:1e:df:5e:f5:fc:3b:3b:8f:97:57:e8:8f:03:c6:6f:
         6c:2a:9e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:51:13 2026 by rpki-client