Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b011c52-3d92-3e65-9661-64cfb9779a37.roa
File:                     4b011c52-3d92-3e65-9661-64cfb9779a37.roa (raw, json)
Hash identifier:          P6W3hxd/41uKVDbO2p/xFGERmUH37I7pqSFmIXryaR4=
Subject key identifier:   B3:B3:73:39:82:DA:3D:17:7C:3F:26:A1:F0:60:33:2C:3A:11:EC:AD
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F021D763B963814BB25EE80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b011c52-3d92-3e65-9661-64cfb9779a37.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:f800::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:1d:76:3b:96:38:14:bb:25:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=96882be4-f13c-4d7b-be22-79606e1d83db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:db:5d:5e:a6:de:0c:59:a1:96:84:c9:c6:2d:
                    6c:62:85:1e:a0:b6:3f:58:c7:d3:f1:27:e5:c2:02:
                    a0:4a:31:bb:7f:c1:dc:b1:e8:12:dd:f2:c7:dd:90:
                    27:76:42:3c:e3:d0:e2:10:f9:d0:39:8d:f7:40:2b:
                    67:9c:81:43:db:5a:f4:b1:7f:77:be:03:ec:db:d4:
                    01:10:9b:0c:fc:79:d6:ea:1e:f5:00:c1:fa:9d:fc:
                    cb:9b:63:f7:3c:31:5c:58:00:2d:5b:10:51:fc:81:
                    76:3a:32:21:b2:95:6f:1f:db:8a:7f:16:b2:7c:87:
                    4f:4d:60:76:25:4d:07:33:b9:eb:be:ed:08:58:1f:
                    e4:a6:cf:eb:14:dc:28:6c:ab:9d:89:39:78:d4:63:
                    45:44:e1:1b:5e:0f:e5:20:75:dc:bd:e8:3b:50:4c:
                    72:5a:44:59:9e:f2:f6:43:b8:cf:8f:67:3e:e1:9f:
                    1f:ec:ea:4b:b2:59:8e:7b:30:79:4f:e2:12:25:22:
                    10:4c:ef:02:07:db:03:3a:86:2e:8c:d9:52:3c:8b:
                    82:2a:04:8d:fd:53:10:a5:b3:e2:09:54:31:f0:5b:
                    03:28:ac:af:9f:1e:1d:be:2f:bf:37:f9:17:56:cb:
                    ec:38:0e:67:a3:0f:63:da:08:05:cc:03:09:5c:d7:
                    01:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B3:73:39:82:DA:3D:17:7C:3F:26:A1:F0:60:33:2C:3A:11:EC:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b011c52-3d92-3e65-9661-64cfb9779a37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:f800::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:74:db:ce:a6:38:4a:0e:39:03:c9:23:ad:1a:eb:e1:d5:e6:
         a4:24:dc:60:8a:b7:25:63:dc:dd:a8:9d:79:d1:be:f6:28:5c:
         16:71:31:f1:a8:bd:ad:82:41:d5:3f:81:04:55:82:5c:fe:dd:
         ac:96:94:f4:5b:54:4e:6f:2b:61:c6:e2:f1:34:16:48:47:09:
         82:b9:4a:d4:c9:09:d5:c3:3f:83:b5:c7:e6:ff:c1:7c:b8:2d:
         56:f4:22:eb:ab:db:ab:45:a5:4f:38:6e:0c:80:ed:49:de:39:
         93:d6:66:ce:ca:56:ad:79:7f:cb:73:82:9c:b7:a0:ef:4e:ce:
         6e:66:4b:ba:9e:48:18:3a:4d:96:37:e8:a1:94:2d:db:84:cc:
         75:dd:13:da:c4:e9:92:58:1e:5a:11:6c:ad:4c:a0:a1:7c:08:
         67:c2:7a:c9:9b:cd:9e:ef:d7:ca:de:b7:1c:9a:6f:64:4d:c1:
         2f:a1:a4:bd:dd:e9:db:79:35:97:a8:e9:ec:42:24:08:01:e6:
         2a:c5:a5:a4:39:06:a0:b4:ca:77:7e:c0:1f:b4:76:1b:70:73:
         7b:40:b8:ee:1f:5f:3c:2b:eb:69:23:98:77:a4:b7:fe:a9:e6:
         8b:24:de:60:4e:95:c7:83:06:dd:c5:48:df:2b:97:68:6c:19:
         2c:41:f0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 02:06:51 2025 by rpki-client