Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/972d0f9c-f5e2-35ca-9fac-b39240c0f881.roa
File:                     972d0f9c-f5e2-35ca-9fac-b39240c0f881.roa (raw, json)
Hash identifier:          8yJgRgWA+dF9VvPYRTCzVL0cvj8P19pCxK6sRapDR/A=
Subject key identifier:   94:04:A4:81:45:4D:11:74:E7:EE:71:64:C2:45:31:FE:D4:80:47:1C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01DCA3F97696AC8C6EB400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/972d0f9c-f5e2-35ca-9fac-b39240c0f881.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2001:579:8330::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:dc:a3:f9:76:96:ac:8c:6e:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=471e0ae0-c75b-434c-be76-23cf43f3535d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:58:ee:c2:d2:f6:67:c5:c3:ef:cf:87:04:b4:
                    52:fd:31:2c:94:3d:b7:23:81:d6:69:db:13:15:dc:
                    0a:f3:50:1c:04:06:5d:93:da:4d:86:d4:d1:1f:f8:
                    9c:a6:f8:c3:5e:e5:4a:25:01:a0:ca:55:34:88:6e:
                    f1:53:69:70:5e:39:f1:c2:1d:27:91:e7:e8:32:16:
                    ae:17:5d:c5:d4:30:e0:f6:7e:3b:54:a1:74:ff:1a:
                    a1:7d:7e:eb:e8:52:fc:07:f5:e6:17:3f:a8:08:ba:
                    64:88:8b:e3:46:4d:ad:6b:46:2f:b4:a3:85:03:3f:
                    b4:21:31:e3:88:7d:ab:7f:a7:e2:c8:fb:48:f2:64:
                    ab:08:82:f0:cb:22:5f:d3:a8:85:58:30:18:de:2b:
                    20:94:47:18:5a:50:04:bf:0c:f5:74:0a:ec:90:3a:
                    94:1c:d5:48:70:39:55:fd:c3:07:da:3f:0f:c9:5b:
                    63:f0:a5:e7:ac:15:5f:b5:5c:5f:b0:30:da:6a:ad:
                    b5:29:cd:da:00:db:2c:55:42:c7:c9:85:26:ba:d4:
                    7f:8b:30:39:ab:35:32:1a:23:1d:5d:da:50:fb:2b:
                    fa:b8:cb:49:da:ab:31:f4:2d:1f:0e:57:c2:ae:75:
                    60:1b:ad:3f:e6:9d:6c:cb:c6:cb:c2:5b:b4:94:8d:
                    ef:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:04:A4:81:45:4D:11:74:E7:EE:71:64:C2:45:31:FE:D4:80:47:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/972d0f9c-f5e2-35ca-9fac-b39240c0f881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:8330::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f5:80:f0:bf:06:5f:42:94:f0:d1:00:30:7c:47:20:47:84:
         25:ce:80:4c:09:79:1f:57:38:ef:c9:49:2f:88:49:4a:aa:aa:
         4a:74:f9:94:18:34:53:a5:b7:ab:a7:73:12:5f:23:bc:40:04:
         d0:ff:c0:e3:e0:a1:85:69:4b:01:46:70:ba:30:80:c2:2a:5d:
         86:4c:9e:96:1f:96:6b:93:ab:19:34:9b:39:01:6a:85:0b:71:
         60:c2:ae:82:31:d2:72:0a:0f:83:77:cb:d0:74:29:f5:41:37:
         c8:a4:c8:1f:d7:f7:98:20:88:13:92:42:46:ca:fb:48:70:54:
         8b:59:ac:56:6b:db:5b:5c:be:1f:c4:20:2e:52:3d:bd:59:cd:
         89:5d:68:13:af:3b:07:a5:ee:10:97:18:f6:cf:a6:24:d2:fd:
         a6:b4:ff:4f:df:5f:1a:b6:38:3f:ab:c4:0d:f2:36:eb:75:21:
         2a:27:85:b9:a9:26:9c:e8:84:e6:c1:14:cc:40:d5:f7:13:10:
         05:aa:76:84:9f:2f:f2:7e:25:54:3d:56:1b:91:64:1d:f6:4f:
         b5:35:c4:d5:a6:e3:47:0a:0f:c2:e8:62:d1:6a:dd:f8:47:07:
         8c:67:34:f0:25:d9:12:b6:2c:34:a0:3a:e2:bf:3a:9e:d7:c4:
         64:97:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 02:00:57 2025 by rpki-client