Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40b7dcb3-1855-3f47-920e-345361c1b3d4.roa
File:                     40b7dcb3-1855-3f47-920e-345361c1b3d4.roa (raw, json)
Hash identifier:          OJViQ9xtT8oY40J3ylR9tfQNbwCVI3VtoLSmxlL8f0s=
Subject key identifier:   EA:66:B5:D0:27:E9:8B:CF:1E:8C:67:E3:4F:86:12:10:88:38:CB:D4
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01DA9FDC1DE0BEB6C71600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40b7dcb3-1855-3f47-920e-345361c1b3d4.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2001:579:8214::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:da:9f:dc:1d:e0:be:b6:c7:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=46262a2c-99d2-40c6-b274-ef79c841e583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c7:0c:17:bd:9e:df:9b:79:be:06:40:12:12:
                    4b:9a:df:ef:55:8e:bd:57:df:f9:f4:03:fa:e5:0e:
                    5a:53:f8:d7:1e:15:e2:c0:69:ae:73:61:20:08:ec:
                    15:c9:23:d5:f4:34:57:82:3d:9b:16:ac:e8:4c:44:
                    f0:9e:ab:3b:a8:9b:56:5a:63:29:96:d6:2a:94:b6:
                    58:02:9b:97:9c:df:7b:e6:d0:d0:61:d7:8a:f8:af:
                    af:5b:8e:0e:92:31:3c:02:85:8e:d3:6e:10:f1:95:
                    6c:22:96:25:c8:2e:d2:5f:d2:4b:4f:5e:30:38:ad:
                    9d:76:25:3d:19:30:ba:88:e9:0b:5e:7d:a5:15:14:
                    d8:8e:14:0d:ee:7f:7e:ed:e7:d6:d4:dd:ed:9d:e5:
                    a9:4f:27:2f:83:c2:ee:37:27:22:29:3d:2f:ce:b9:
                    18:a4:bd:9a:11:13:00:fa:6a:0a:a3:8b:41:4b:a8:
                    b4:70:55:1e:09:3c:b9:00:c6:02:5b:41:9a:1b:fa:
                    1e:63:94:d4:94:bd:7b:e9:c5:44:5c:c6:e4:2f:08:
                    da:be:83:10:33:37:1a:5e:d3:05:51:1a:fa:f1:79:
                    02:a0:44:62:25:40:92:94:8d:59:b1:66:32:68:4b:
                    22:dc:fe:e4:75:33:d1:67:5d:06:09:80:9d:b4:6b:
                    d9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:66:B5:D0:27:E9:8B:CF:1E:8C:67:E3:4F:86:12:10:88:38:CB:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40b7dcb3-1855-3f47-920e-345361c1b3d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:8214::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:d3:e3:12:4e:e6:8c:0b:79:a9:75:c7:39:f1:8b:0d:80:e8:
         f1:e0:8f:cc:e1:7e:10:d8:22:69:e9:f8:74:16:0f:9d:e2:1b:
         53:3f:d3:27:6c:97:61:e8:c1:5b:b2:70:cd:54:f9:ed:29:f1:
         7b:96:4b:89:01:5d:d4:42:c7:b4:f5:e3:5c:2f:ee:4c:3a:9b:
         08:48:20:ed:70:06:15:e9:83:0e:f6:9e:c9:4b:fe:b6:e9:83:
         08:ff:26:94:94:fa:f2:ac:06:6c:df:5f:7e:e7:b5:33:fd:7d:
         81:7d:5c:4a:0c:9a:eb:66:d3:1a:3d:e1:61:36:f6:53:85:da:
         bd:c4:da:f6:ae:cf:41:0b:34:46:05:e8:2b:6b:f6:a7:60:d7:
         ad:bd:d2:0f:59:b0:f7:fc:5f:13:62:8b:09:58:71:d3:be:93:
         48:e9:79:93:ab:45:72:2a:91:b6:07:78:9f:59:ae:4e:67:9e:
         5f:43:9f:5f:2c:cc:35:91:5b:09:cc:1d:76:df:96:97:90:46:
         0c:b9:a0:b8:1a:28:31:96:6c:99:77:35:f6:18:c9:1f:fb:18:
         56:b8:53:fa:e4:35:01:14:cb:e2:bf:38:88:aa:21:0d:78:69:
         90:c0:8b:e0:17:f0:43:a8:14:b6:64:c4:a6:e4:99:4c:e3:93:
         34:86:8f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:31:51 2025 by rpki-client