Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78dc7ce8-4fad-32ad-acfd-fd7e4569a204.roa
File:                     78dc7ce8-4fad-32ad-acfd-fd7e4569a204.roa (raw, json)
Hash identifier:          5i2khJPI1XrsIjbQp8Kkae42QRHfjlOfs9Au3hXxPJg=
Subject key identifier:   B6:88:EF:5C:64:89:16:9C:E4:64:9C:08:33:B2:EA:E2:50:E6:64:25
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F0220C580BD03C0E8EA3400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78dc7ce8-4fad-32ad-acfd-fd7e4569a204.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:880a:414::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:20:c5:80:bd:03:c0:e8:ea:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=608d4f0f-fe89-4696-a6ab-33da1eec2dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a3:c3:00:09:ee:20:ff:9a:3b:08:31:69:a3:
                    cf:cf:3b:d8:71:c7:06:48:17:00:b7:77:af:f0:23:
                    85:bf:e6:78:ee:5e:8c:2e:f8:bb:aa:63:69:9c:80:
                    d3:7f:13:2c:b4:e4:7f:e3:39:24:58:df:12:33:83:
                    a4:69:62:4c:0c:fd:50:d5:0d:28:7e:05:4f:96:02:
                    ec:35:c8:ea:e7:c0:ec:d2:26:ee:1c:9f:1f:d6:3a:
                    4f:d7:93:15:bf:42:a3:84:d4:18:ef:c9:ed:fe:a5:
                    b5:b3:e7:a9:ec:d0:1b:cb:25:4d:bd:98:17:6c:fc:
                    51:87:38:a7:0a:d9:ee:47:f3:f3:21:29:8e:09:f1:
                    90:14:45:88:c3:80:7b:b9:4f:d9:49:6d:48:77:73:
                    ef:0f:c6:53:6e:8c:8b:23:d6:47:e5:aa:ee:7d:9a:
                    bd:55:93:a1:82:4a:f8:65:0d:c6:08:64:55:9b:95:
                    9c:c3:c9:50:a9:56:92:e7:18:a8:c4:a4:b6:63:e6:
                    e1:e3:89:b5:ef:f0:75:03:7a:65:2d:bb:c1:df:32:
                    63:32:c2:08:8f:2d:31:62:f5:df:70:39:85:c6:bf:
                    fe:f5:9d:9f:1d:8e:c5:48:ee:7b:fd:2c:1e:2a:f4:
                    b5:77:c7:a8:b0:ca:bc:78:95:2f:59:07:26:d2:b6:
                    6f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:88:EF:5C:64:89:16:9C:E4:64:9C:08:33:B2:EA:E2:50:E6:64:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78dc7ce8-4fad-32ad-acfd-fd7e4569a204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:414::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:50:82:e9:80:68:57:9d:01:b7:a7:ed:c1:9b:29:ca:b9:2a:
         91:73:a5:78:8e:de:64:1b:6b:b5:57:59:e9:fa:91:d5:2f:1b:
         3e:05:f3:07:0d:50:74:f0:ea:58:5f:ef:4f:a8:c9:57:6e:4b:
         c9:33:a0:14:81:bb:5a:c7:ca:64:79:7e:25:70:81:e8:17:31:
         96:ca:ce:73:4c:a7:cf:d6:f0:72:8b:4b:e9:1c:60:df:db:0d:
         86:4e:b3:5a:a5:7a:88:d5:a0:3b:06:83:c0:95:46:2b:ea:86:
         9d:1a:25:ca:88:3a:d9:c6:1f:8d:ca:4e:8e:dd:01:d2:4f:a2:
         37:ac:a1:b8:b9:72:22:6a:c6:32:a6:bd:96:c7:e2:7e:68:a4:
         d8:fd:3a:e6:11:1b:8e:0d:eb:d2:79:c5:58:b1:75:0e:5b:55:
         a7:36:e5:38:8c:e9:56:dc:8a:ca:aa:fb:8b:5e:b8:a9:5b:6c:
         20:b3:cb:df:93:1b:22:69:9f:59:58:f7:2c:77:7f:5d:5d:d6:
         67:73:98:ae:d0:27:a1:6e:9d:64:88:81:56:10:99:0f:56:bf:
         d3:44:1d:74:3d:72:2e:dc:ed:fd:f4:c4:d0:f9:95:8e:28:ad:
         69:50:6a:a1:4d:3c:4d:56:9f:1b:2d:ab:55:da:3c:2f:f6:59:
         bc:f3:00:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 02:03:53 2025 by rpki-client