Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/740faf1c-abc8-3135-8e08-da46e9f5daaa.roa
File:                     740faf1c-abc8-3135-8e08-da46e9f5daaa.roa (raw, json)
Hash identifier:          Eq1WRwZJeju1q/O4RS30116XGvu0zX4ut+M/vuM2iSo=
Subject key identifier:   49:AF:30:1A:12:AE:F1:6D:90:BF:E0:17:6D:C5:C0:C0:3D:C0:ED:D0
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01D37001908B0AD503EF80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/740faf1c-abc8-3135-8e08-da46e9f5daaa.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2001:578:821::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:d3:70:01:90:8b:0a:d5:03:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=b80bbac4-4a82-400d-92ee-d4c685dfc87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f1:d4:28:7a:f1:0f:fb:65:47:15:b4:82:2c:
                    93:f8:d4:ae:76:02:63:1f:a9:5d:3d:45:6d:01:36:
                    85:89:8d:ad:ca:7a:28:2d:05:f0:78:3e:25:3b:bb:
                    0c:2f:84:72:c3:6b:93:be:83:48:c4:7f:0f:fa:e6:
                    8a:ee:88:12:46:29:8d:b4:16:8e:6f:36:70:55:02:
                    ca:90:ef:84:38:1e:be:7e:ff:23:9b:56:60:29:5c:
                    8b:17:13:28:08:29:ce:9d:e8:58:aa:ae:e9:39:06:
                    dc:c1:4d:90:42:ee:b0:23:fd:9b:8b:8e:d8:a6:45:
                    74:c3:2a:d1:61:78:94:17:79:02:f0:23:69:54:c3:
                    c4:a0:44:d2:e5:4b:4e:fa:cc:77:86:31:d8:8b:b1:
                    98:47:f2:41:90:b8:17:3f:82:e0:fa:19:aa:99:ff:
                    5d:f1:f6:f3:1d:64:97:1a:37:82:ed:70:8f:6c:a5:
                    30:80:53:9f:73:30:a3:51:bc:08:0f:7a:e4:7e:15:
                    2c:d6:cb:3d:92:51:3a:52:fb:ee:c0:23:44:9b:e9:
                    01:a8:fd:c5:84:94:38:bf:d3:4d:36:a6:fa:0b:f3:
                    62:ed:53:0a:28:1d:9b:73:7e:ef:8b:4d:f6:a3:12:
                    ba:3a:e9:72:8f:14:8a:7f:4d:3d:74:46:be:4f:16:
                    5f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AF:30:1A:12:AE:F1:6D:90:BF:E0:17:6D:C5:C0:C0:3D:C0:ED:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/740faf1c-abc8-3135-8e08-da46e9f5daaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:578:821::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b1:3e:09:93:ec:50:82:bf:98:c0:33:95:5f:3b:e3:58:6b:
         d2:5f:20:cf:ea:e0:d6:a2:83:06:81:94:75:82:21:30:a3:6e:
         51:88:cb:8a:95:9a:0c:04:a1:75:08:1d:01:f4:52:8b:54:da:
         7d:dd:bf:6b:37:4f:89:ee:a0:54:c1:4e:f6:58:ce:5a:7b:17:
         d2:0e:cc:f6:70:95:e3:d4:c2:ef:da:09:62:03:34:c4:f6:2c:
         84:8d:9a:2c:be:75:8f:68:07:9c:61:fc:08:16:d0:39:f0:50:
         df:dc:cf:39:b7:c7:35:ed:52:70:73:5a:43:e4:c7:a9:de:0f:
         c0:3f:6a:ef:10:7b:7b:02:b1:2a:65:c7:bd:a6:2c:d6:0d:1f:
         94:f3:f3:6a:ad:20:2e:1b:fd:f2:16:bd:2b:af:45:d6:e2:1e:
         63:58:c9:00:b1:34:ef:83:a3:bf:7a:40:78:c7:2d:0a:ee:2e:
         2d:af:dd:cc:41:9e:f9:3d:57:e6:95:2e:1f:26:97:70:ce:3c:
         52:31:8e:5d:ab:82:80:01:22:d9:00:fd:41:5c:1c:f9:22:e4:
         fa:4e:53:3e:58:29:c8:ea:f4:24:cb:29:11:47:69:52:40:f5:
         40:b6:fa:3d:63:86:00:eb:00:0d:42:b3:97:fe:01:c1:11:f8:
         c7:38:fc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:35:52 2025 by rpki-client