Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4beb0e90-3326-3d65-abdf-13b97e96b33b.roa
File:                     4beb0e90-3326-3d65-abdf-13b97e96b33b.roa (raw, json)
Hash identifier:          IF1VqAFrvUq8sAtED1QG6Kf8YgfEuqg5IW1Tvo1/n8Q=
Subject key identifier:   95:C8:A7:36:3B:9E:34:8A:4C:E8:98:BD:E5:81:2D:51:8E:FB:DB:FB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01FF752AFD5442C2C04380
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4beb0e90-3326-3d65-abdf-13b97e96b33b.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:6c16::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:ff:75:2a:fd:54:42:c2:c0:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=d0574898-80c6-4dea-b1ef-b7bf880f0248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e1:8e:fb:f7:23:90:ee:82:98:09:47:fc:11:
                    59:f2:0c:ad:53:ac:eb:e8:ee:6d:1c:ab:2e:09:f2:
                    e6:bb:90:1b:0d:79:0b:96:01:c4:17:3a:9e:03:5c:
                    9f:dd:24:bb:54:a3:cf:a3:9e:96:fb:ae:13:ae:3d:
                    b2:bd:15:5a:2c:eb:69:7f:74:1f:48:01:a9:3b:34:
                    cc:5e:ec:7a:09:8e:2e:ff:59:d9:d9:ae:61:03:d8:
                    c3:b7:47:b7:45:5c:c0:98:17:33:28:f6:54:6e:5e:
                    70:d6:dd:c0:98:a2:72:8b:bb:07:17:b0:5f:2e:65:
                    27:c9:7a:23:82:85:88:6f:86:2d:61:3e:cd:4c:af:
                    92:e0:e2:f6:69:40:f9:4e:1f:a8:f3:c5:d2:36:fa:
                    3e:51:9e:8f:6a:74:c5:32:bd:95:3f:ba:79:e1:cb:
                    2a:b5:c5:f7:5c:d3:2e:3f:7f:dc:cc:24:0c:68:58:
                    55:e6:fa:62:e2:d4:cf:bd:fa:2c:44:7b:d1:00:dd:
                    2e:b4:fb:2a:b7:dd:0b:c3:c1:2a:ad:ce:ae:c0:f9:
                    e0:b7:13:59:99:e2:bd:ff:f0:99:f4:c1:04:66:b6:
                    32:e0:bf:bb:2f:18:0f:cb:08:dc:e1:38:59:02:b9:
                    79:58:14:86:d4:8b:55:fc:1c:6a:d3:03:b5:67:41:
                    0d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C8:A7:36:3B:9E:34:8A:4C:E8:98:BD:E5:81:2D:51:8E:FB:DB:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4beb0e90-3326-3d65-abdf-13b97e96b33b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:6c16::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:07:cc:50:4f:af:ab:7c:3f:2e:58:c7:92:25:0c:c5:fa:51:
         fe:ce:ae:95:79:56:99:18:e2:2c:a0:02:37:b2:e7:56:e6:af:
         22:18:22:90:2e:d5:c5:73:75:e1:33:fc:35:86:31:e0:2c:aa:
         8c:29:5a:4f:37:4a:4f:d8:a4:32:9b:3d:c4:1d:60:05:d0:86:
         9d:bf:ef:f0:a8:ac:c3:0d:ff:b6:78:10:5b:cb:0f:59:28:a8:
         1d:f4:c0:37:ee:b7:01:3f:6e:a5:fa:b3:f2:b6:68:e6:24:36:
         37:ea:14:d3:fd:47:6c:6b:03:93:2c:95:bb:72:11:d5:f1:ad:
         64:60:d0:89:f1:2b:2e:ac:a2:4a:6f:8b:27:76:83:8a:d9:58:
         bd:0f:b9:a8:21:50:d3:d7:63:fb:f2:08:7a:6f:4d:a5:a1:c4:
         c0:82:dd:81:39:59:60:f1:57:b2:5d:04:b2:91:0e:1d:3c:c8:
         03:47:e8:6e:b2:55:69:5c:49:a7:9e:d3:41:41:51:38:f2:61:
         4f:4c:f1:f1:74:e6:dc:86:e6:64:7f:e3:5f:08:08:62:8f:91:
         8f:4d:b7:13:4e:38:a5:3f:7c:ce:f9:c2:eb:f7:c1:04:b6:94:
         4e:6b:38:7e:1a:41:4e:70:e7:60:a4:66:a2:1f:64:fc:a6:fb:
         8f:b0:ca:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:19:54 2025 by rpki-client