Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/84483c19-c52a-30af-8566-b24551b2645b.roa
File:                     84483c19-c52a-30af-8566-b24551b2645b.roa (raw, json)
Hash identifier:          aJcQjgE/JVC0/RNXwrRD9O01lCuWZxFyocjDixuOx7w=
Subject key identifier:   1E:33:79:D2:F7:DF:5F:E9:1B:48:73:93:C8:56:25:ED:D6:9A:88:6C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F0204315790F0D98AE9C380
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/84483c19-c52a-30af-8566-b24551b2645b.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:7f0a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:04:31:57:90:f0:d9:8a:e9:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=ee26fdfa-ad6f-48a4-b436-49886999df5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:73:e1:31:0a:78:c2:d7:83:70:3f:7c:4c:5e:
                    6c:47:b2:d1:cd:48:a1:8f:f8:07:64:f4:80:de:a1:
                    51:36:ac:df:28:81:6d:f4:06:fd:d3:1c:1c:dc:a9:
                    3a:cc:59:88:95:5a:cc:29:74:51:e7:eb:ac:e0:c7:
                    8c:8a:35:fa:55:1d:2d:6e:7b:02:cc:2b:17:25:65:
                    52:2b:ae:4a:ae:a9:46:1c:84:22:b7:17:22:f3:c0:
                    b0:c2:2a:ab:f4:2b:18:e2:94:80:1e:d8:10:5b:26:
                    ad:e1:5b:27:6f:e0:23:e3:9c:fc:1a:a5:87:c8:cf:
                    93:c9:ec:03:d9:a9:8a:1d:03:ab:86:5f:60:3f:82:
                    4c:97:de:03:14:cb:b5:51:8f:9c:8f:22:e3:67:4f:
                    c8:60:b8:8b:43:23:7b:f2:49:2b:91:20:35:63:b3:
                    23:2e:06:fd:85:4b:d2:f3:c4:12:6d:59:95:db:4a:
                    83:c3:42:f5:bc:2e:7c:76:16:6a:2c:12:1a:d0:ca:
                    d5:a4:c3:af:96:bd:82:f8:41:ae:d4:66:c2:04:fc:
                    7c:6c:f3:e7:ea:4c:c6:e4:9d:49:dd:33:bd:3b:11:
                    f8:db:d0:62:7f:e9:2e:cd:fc:83:7f:5e:4e:5c:e6:
                    29:d7:ea:24:5f:d5:bd:b3:96:85:84:fb:1a:52:d5:
                    7d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:33:79:D2:F7:DF:5F:E9:1B:48:73:93:C8:56:25:ED:D6:9A:88:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/84483c19-c52a-30af-8566-b24551b2645b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:7f0a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:fd:84:31:05:ef:97:a5:5e:52:6b:9f:d3:f5:d6:96:7a:b5:
         82:1a:85:cc:ea:5c:4a:a1:91:b0:da:59:2b:84:7e:39:ed:32:
         e7:5b:82:8b:88:9f:82:9d:f6:3d:dd:c7:de:d9:99:92:e8:5d:
         de:8a:47:c0:7b:d6:b9:e4:a3:10:29:a7:99:8f:20:85:d9:f2:
         01:86:ac:c4:8c:7e:09:4f:ef:9a:3a:be:63:6c:e9:e7:7c:9c:
         61:70:87:2a:0b:e2:c9:01:95:0d:2c:cc:04:42:77:d6:e4:8e:
         71:ee:b0:b1:8c:33:8e:e7:1d:89:79:d5:09:37:ce:f6:a4:33:
         fc:0b:c8:b3:30:fa:9c:29:d4:cf:15:0c:e4:03:db:b7:93:98:
         fa:cc:a0:39:0c:3a:a4:f0:b9:ea:31:62:cf:6f:ac:67:c7:69:
         df:0b:e2:3a:99:f4:06:60:be:73:3f:bc:6c:b7:40:48:49:49:
         55:71:bb:cd:6d:f1:99:c7:ae:52:6d:43:4e:bc:f2:6a:68:d6:
         0a:42:4f:63:42:a5:3d:01:23:c8:e1:86:6c:36:d6:dc:70:34:
         1c:1a:94:43:42:45:5c:a7:1a:b7:f1:ba:8e:cd:a8:78:a6:bc:
         a0:f8:16:53:f4:55:36:ab:db:59:2e:ee:27:92:cc:c3:62:db:
         0c:6c:cc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:39:23 2025 by rpki-client