Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a922942-3602-35ce-ad1a-408fd0022ce9.roa
File:                     4a922942-3602-35ce-ad1a-408fd0022ce9.roa (raw, json)
Hash identifier:          rNnA5c4JwQlOz/a0wqD8WwKtnWLuSCNSdl/EvJdVfhY=
Subject key identifier:   EE:85:00:DD:B7:1C:3A:89:98:84:7C:58:4F:DD:52:C7:DE:81:D9:90
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01E07107208C5CF9A39100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a922942-3602-35ce-ad1a-408fd0022ce9.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2001:579:854c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:e0:71:07:20:8c:5c:f9:a3:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=e1a438a2-b136-4f4e-b35d-3d5cc973e44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cb:d2:15:64:0b:11:09:8f:71:6c:95:f1:e2:
                    18:3f:5d:a5:75:4c:85:20:41:c9:e6:c7:3f:ab:e9:
                    ad:6f:ed:d0:14:0e:b9:ff:b7:03:29:df:55:fd:de:
                    f0:f7:bf:25:85:cc:87:47:62:ff:4c:09:d3:2e:57:
                    8f:ab:df:d1:54:f1:d7:b7:9f:bb:79:d8:9a:0d:ea:
                    85:c6:92:26:ec:e1:18:b6:99:5a:53:ca:48:86:61:
                    73:1a:ad:9b:b6:56:fb:0b:47:c6:68:29:3c:37:27:
                    e4:cd:c3:7e:aa:97:9a:99:d8:da:16:10:04:2a:b2:
                    20:16:ed:a2:fd:ba:56:4b:28:1e:62:55:2b:37:c0:
                    33:58:ed:bf:f6:10:43:69:8f:e9:86:dc:6c:6e:1d:
                    17:1d:10:f6:2e:b2:1a:3c:79:23:31:3b:2d:76:53:
                    99:1f:b7:10:20:61:4c:2a:b7:74:ea:95:d7:c9:5d:
                    21:7f:7e:d4:40:b8:9a:99:f2:d2:45:d2:c6:51:fd:
                    2c:08:82:7e:80:25:e0:0c:c9:07:83:8e:3f:ac:77:
                    e1:e2:48:8d:90:af:b1:d2:0c:98:4a:bd:2f:32:0b:
                    75:99:eb:73:45:6b:12:88:38:2c:75:54:91:c1:f6:
                    c0:f7:70:52:14:ca:27:8c:f4:47:96:5f:b7:55:67:
                    df:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:85:00:DD:B7:1C:3A:89:98:84:7C:58:4F:DD:52:C7:DE:81:D9:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a922942-3602-35ce-ad1a-408fd0022ce9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:854c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:26:68:b4:4a:d4:55:7f:e7:e1:3d:3e:a5:c1:45:51:b5:35:
         31:ba:a7:ed:87:69:a0:a1:07:60:78:78:3d:07:9e:6d:f6:8f:
         ee:3b:c6:c3:a1:09:64:ec:db:b8:b2:07:28:e0:2a:1b:97:89:
         7b:79:93:64:c0:a7:c6:10:79:1c:a2:f8:78:52:d6:00:8a:0f:
         86:61:a2:a2:76:09:2b:3c:21:5f:ca:0b:45:ca:ba:d2:d0:c2:
         49:e0:56:c4:d9:e6:97:e6:90:97:ab:d3:63:68:8c:df:2f:28:
         91:75:3c:65:21:0b:e8:84:07:ab:86:b5:fb:ae:58:7d:64:ae:
         23:c0:d7:c2:58:08:f8:22:0a:e3:86:0a:72:05:34:26:d0:44:
         ab:36:0d:19:6d:e4:ca:40:00:ed:c2:07:82:54:64:ab:7a:8b:
         82:6d:30:36:da:6c:6b:80:4e:87:76:ac:9c:c3:7c:35:4a:a7:
         03:98:6e:df:63:52:98:bf:a0:0c:dc:1a:6c:96:81:b1:48:f9:
         8a:94:29:50:f6:4c:5d:4a:ad:0a:4d:eb:f2:7f:ab:87:4c:fc:
         69:e5:f6:91:43:0c:36:9e:89:2d:8d:82:80:39:40:67:82:3a:
         20:4c:34:04:d1:28:b0:74:8a:34:06:3b:44:62:34:e9:d5:c3:
         35:e9:44:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:23:59 2025 by rpki-client