Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/912d8449-5dcb-3cbb-ae99-1e93a0f7ba09.roa
File:                     912d8449-5dcb-3cbb-ae99-1e93a0f7ba09.roa (raw, json)
Hash identifier:          IXsritHKnRdy9Y62TjEJmaB+K9x7dBxdjtDGEgxIG20=
Subject key identifier:   FA:CF:F4:F0:76:46:F7:8C:5B:4F:C4:B4:F9:61:78:E6:1A:A4:7B:03
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01E962D8FD936DE77E9D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/912d8449-5dcb-3cbb-ae99-1e93a0f7ba09.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:2800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:e9:62:d8:fd:93:6d:e7:7e:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=9568b71b-cc63-4743-b861-0261b9e0a0e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:cc:c7:d2:af:3b:a1:45:86:fb:85:d2:7e:
                    c0:72:33:94:e1:29:f9:48:2a:87:c6:92:34:75:ce:
                    b8:d0:5b:55:d5:21:fd:2a:7d:a1:3b:e4:18:b8:1e:
                    19:e3:b5:f0:51:d4:34:33:81:f4:19:48:6a:16:05:
                    e7:02:ea:27:76:90:f0:30:f5:7a:2b:e8:6c:83:97:
                    d7:bc:d3:31:37:24:f3:1f:a6:bb:ff:06:b2:82:74:
                    cc:c1:c3:3a:f0:dc:47:b2:e4:da:1a:39:a6:7a:84:
                    db:ff:7d:0b:a3:d4:eb:2a:c8:19:b3:88:10:eb:99:
                    97:ac:0c:26:cf:c8:bc:d6:97:e3:4d:f3:04:88:27:
                    14:2a:91:10:c2:1f:9d:61:b4:ec:72:96:df:5a:82:
                    69:35:3e:e8:66:d8:21:0b:2c:3d:4e:19:59:e9:de:
                    b7:07:19:49:bb:45:13:d5:20:38:1d:60:dc:d4:95:
                    fd:f8:0e:d1:46:c3:b2:c4:06:76:b7:84:dc:88:8b:
                    55:f4:21:c1:8f:de:73:fc:b2:de:17:ca:95:0e:58:
                    2b:7e:c9:f9:60:4a:02:3f:84:7e:36:6c:61:c4:a1:
                    05:47:13:23:cc:88:2d:bf:dd:ac:bc:d3:b9:43:22:
                    09:3f:24:10:71:77:2b:ef:6e:39:dd:d0:d3:88:74:
                    5b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CF:F4:F0:76:46:F7:8C:5B:4F:C4:B4:F9:61:78:E6:1A:A4:7B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/912d8449-5dcb-3cbb-ae99-1e93a0f7ba09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:2800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:19:58:c2:f6:2a:b3:e1:5c:03:4f:a4:1a:9e:f9:69:2e:e0:
         7f:4a:c8:2a:fd:71:77:19:10:5b:86:05:0e:7e:03:9f:3e:71:
         d7:94:c7:bb:62:1c:3c:ef:a0:da:fd:1d:84:db:97:1c:ae:68:
         21:50:9d:8d:27:37:66:ef:92:18:fb:c7:3f:f7:de:38:26:54:
         4e:8e:ef:38:fa:d7:ff:c7:ca:a1:58:9e:bc:d2:55:3c:c0:dd:
         4d:48:54:e2:34:f6:54:ee:ed:81:e3:69:30:70:c5:0c:b5:d4:
         61:c2:ff:36:2a:7c:e9:0d:31:e7:48:0b:93:0e:2f:e0:44:90:
         1a:65:c9:8b:b3:0b:ce:ff:55:d5:da:2c:33:53:7c:5b:4d:f1:
         82:91:13:d6:e5:5d:49:03:70:49:35:39:88:f5:ae:8a:78:9d:
         04:5e:fd:04:3a:08:e6:f9:e1:6a:82:50:24:fe:eb:1c:c7:61:
         ea:27:95:a3:3d:30:35:9d:a9:e4:67:6b:61:11:ce:08:74:d6:
         91:18:f3:d2:e6:42:47:d3:53:21:9e:13:59:ea:22:f9:55:04:
         d6:f6:ca:53:c3:9c:e7:54:8a:ba:c7:9c:7c:b8:f3:0c:3c:8c:
         fb:ab:88:c1:2b:2a:29:a1:c0:c6:8e:b2:09:27:58:5a:03:cc:
         fa:63:e9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:34:57 2025 by rpki-client