Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68261294-2158-392b-96d2-b8e459d69c8b.roa
File:                     68261294-2158-392b-96d2-b8e459d69c8b.roa (raw, json)
Hash identifier:          qXPzIrhSW0FKhKzL24ndwr64nX1fibxuXp/3GlTCCys=
Subject key identifier:   0C:37:38:61:71:6B:6A:2A:FD:74:EB:E0:DF:F5:3A:A0:D0:87:9A:95
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01F6F3880718EF19C1084A
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68261294-2158-392b-96d2-b8e459d69c8b.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:5200::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:f6:f3:88:07:18:ef:19:c1:08:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=57a6efd7-a480-4899-a213-dbc539c3c5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:79:f2:c9:9f:5c:76:8e:d9:24:06:cf:e7:73:
                    1c:ee:3e:4f:28:23:09:0e:c6:5a:80:96:7b:83:40:
                    20:47:51:24:b6:0b:93:66:bc:fe:3e:a8:d7:bd:1b:
                    f9:14:7d:3e:be:c3:8c:7f:f0:b1:58:f4:d1:1b:99:
                    86:ad:2f:2a:38:f3:8c:57:00:f6:e6:1c:5f:55:5a:
                    c2:7c:82:63:86:2d:be:b7:fe:67:99:da:ac:2f:d8:
                    56:8a:6d:3e:a4:8c:b4:e9:56:aa:9e:15:7c:b9:40:
                    7f:1f:94:7a:86:1c:1a:cb:24:d8:a1:09:3d:fd:cd:
                    d6:7d:c5:d8:da:88:68:72:16:70:c9:6f:6e:19:e3:
                    cd:65:2f:f9:50:44:16:ff:2e:7f:5e:f4:08:7a:c7:
                    c4:a3:ee:96:ec:a4:d0:81:15:62:b1:fb:ea:9e:ef:
                    ea:3a:22:e4:71:5e:39:ad:50:ef:89:5a:1a:46:b1:
                    e5:dd:d3:d6:fc:76:6d:22:24:ab:93:d8:9a:94:94:
                    00:fe:40:c8:39:11:61:3a:00:df:1a:77:4c:76:9e:
                    aa:ef:f5:da:cb:3f:89:d4:2e:ec:a3:90:74:92:65:
                    33:f7:93:70:85:b9:9a:8c:89:aa:8c:40:53:06:62:
                    2f:f0:f7:1e:49:2c:c4:32:66:26:24:77:2f:56:63:
                    ea:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:37:38:61:71:6B:6A:2A:FD:74:EB:E0:DF:F5:3A:A0:D0:87:9A:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68261294-2158-392b-96d2-b8e459d69c8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:5200::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:aa:f8:ed:46:46:48:29:39:81:0a:43:48:30:7a:65:f7:62:
         8a:0f:a5:7b:ad:96:53:5b:0f:c4:95:ac:e6:c9:a3:55:20:f9:
         52:c7:4a:af:3e:c8:0d:50:58:e6:5d:3c:fd:b3:e3:b8:f4:7b:
         37:d9:d2:86:df:f5:f9:0f:7e:33:03:59:75:b1:51:0f:e8:09:
         34:48:97:60:18:42:7d:ec:de:d9:05:16:e9:67:6b:c7:10:17:
         0a:32:1d:be:b3:5b:26:85:08:4d:c4:84:73:94:4b:f5:17:58:
         2a:82:6e:f1:60:ee:04:ad:4b:8d:76:3d:9e:6a:34:3b:06:86:
         05:19:78:2b:c7:bb:8d:35:aa:e2:34:25:77:05:7d:7f:cd:41:
         19:b8:82:65:8e:6c:1b:99:bb:35:7f:28:56:ab:88:e8:1f:5f:
         7b:69:10:7a:2a:38:8d:11:df:28:f1:24:7e:1c:2f:4e:02:8c:
         40:93:0b:81:9a:60:4f:f9:dd:5c:12:73:ad:37:ac:af:45:ba:
         c8:49:1a:e8:df:d4:c8:8d:33:1a:4d:da:a4:ac:99:2f:cc:86:
         a1:ee:a0:9f:32:8f:70:57:13:98:1d:3a:22:77:57:1f:18:56:
         9e:62:eb:46:36:f0:f5:ed:98:9f:80:e0:7f:e1:39:03:b6:62:
         b5:6a:55:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:31:18 2025 by rpki-client