Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b6b7eb3-f809-3dcf-9274-c484a699ff05.roa
File:                     6b6b7eb3-f809-3dcf-9274-c484a699ff05.roa (raw, json)
Hash identifier:          kusaqeVbW9dM/v00kEFCu+HcdXNuwwYAirJE3xiHlkE=
Subject key identifier:   04:5A:80:16:F8:DD:F3:A3:8B:1F:93:E8:74:B4:B3:0E:1D:8B:5C:1A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F02045511F82F7BBD13AC68
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b6b7eb3-f809-3dcf-9274-c484a699ff05.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:7f0e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:04:55:11:f8:2f:7b:bd:13:ac:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=3674c1be-12d6-48f4-a43d-dfc596346e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6b:c6:56:50:ab:c3:60:b5:5f:af:b6:9b:90:
                    e7:b1:3f:a0:87:b9:c9:e1:14:60:42:02:da:dd:e3:
                    50:9b:0e:81:ff:9d:87:00:cf:9c:68:f3:37:41:28:
                    c3:49:22:ba:5f:fc:46:83:5e:8d:85:ca:8b:5f:9d:
                    ff:1a:d9:85:ef:47:de:50:86:76:3e:98:01:f7:e9:
                    58:24:61:be:db:7f:d9:d5:ee:0d:81:db:00:f5:ac:
                    ad:7d:28:ff:1d:ec:ab:e5:1c:ed:b5:f7:d1:79:87:
                    8a:84:be:fb:da:02:b0:cb:a5:1b:5b:22:87:94:6a:
                    80:a2:a5:7b:2b:6e:54:a1:90:bf:ae:b2:4f:28:72:
                    9b:fc:27:48:b3:94:c5:5d:eb:d1:36:d5:5c:59:b9:
                    61:a9:b3:6c:66:bb:f3:f9:74:bc:cc:15:67:fd:8a:
                    73:5f:85:6f:b7:93:fd:23:23:de:e1:19:17:29:60:
                    f9:44:9a:b6:34:15:04:8e:8f:b5:ea:87:72:49:56:
                    ff:56:be:63:26:ab:71:56:5c:36:37:de:a5:65:ed:
                    85:3f:21:30:49:ea:25:b2:29:39:96:01:9e:8d:0b:
                    7c:37:3e:3b:3a:04:e6:39:cd:b5:d8:65:a3:f1:20:
                    6f:7c:a4:bd:c6:26:46:3c:d0:92:ae:69:62:5d:7b:
                    0e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5A:80:16:F8:DD:F3:A3:8B:1F:93:E8:74:B4:B3:0E:1D:8B:5C:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b6b7eb3-f809-3dcf-9274-c484a699ff05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:7f0e::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:af:4d:17:2e:cd:79:8f:23:6e:35:6d:ea:2d:c9:0b:90:57:
         fc:d7:e8:bd:b1:23:f9:21:c6:97:8f:74:e3:4d:43:fb:60:33:
         14:1d:15:f3:a4:b6:6e:39:6b:6e:c1:34:65:67:c4:b2:73:a0:
         11:d9:38:2e:5d:39:8a:ca:2f:5f:71:45:98:f4:8a:16:97:71:
         49:9f:2b:80:1d:b4:1b:54:60:0d:00:de:04:6d:e9:f7:b6:f1:
         9a:a8:4a:5a:59:6f:63:d8:98:07:1d:36:f0:21:48:09:e7:10:
         b2:a2:45:27:c8:4d:47:10:eb:b6:f3:cb:53:38:64:9b:16:b7:
         cc:84:f8:0e:25:3e:52:e0:b3:14:3f:aa:5e:47:9f:f0:17:7a:
         24:dd:a6:c1:7f:b7:44:8e:9f:69:3f:bc:9c:3f:75:32:ed:2d:
         a3:c6:b9:ab:c4:d0:4f:b3:fb:9b:cd:ce:55:00:94:49:8f:3d:
         bb:d6:64:e2:70:1b:76:5e:48:ef:bb:39:10:22:4c:4a:fa:41:
         43:35:a6:df:e5:5e:a7:85:67:de:f7:42:be:61:bb:c1:ff:ef:
         ae:5a:b0:a7:44:bb:ce:79:0e:26:47:0a:61:dc:c5:88:77:2e:
         fa:f5:13:60:e1:08:10:0f:8f:27:75:61:2a:87:16:15:d3:e3:
         7a:6f:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:29:34 2025 by rpki-client