Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad7080a6-56b5-3f47-b848-aca27953d32e.roa
File:                     ad7080a6-56b5-3f47-b848-aca27953d32e.roa (raw, json)
Hash identifier:          np+jRUFdi/vMjCkVgTkVkdy1S3l+45BBe7VFK6cMw+8=
Subject key identifier:   27:9A:E4:F8:E6:D2:7B:20:A8:A0:F4:37:83:36:66:D2:B6:D4:50:87
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01EB64C2AFBB7A039BF780
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad7080a6-56b5-3f47-b848-aca27953d32e.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:2ec0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:eb:64:c2:af:bb:7a:03:9b:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=bd7cdca0-d141-4790-bcc3-e7fef584ecf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4a:42:ea:48:c4:38:c3:55:dc:d3:cb:1b:cd:
                    9f:f2:5d:93:ff:1c:6b:69:75:40:4c:98:e5:c4:ff:
                    c7:87:4b:d5:9b:76:64:f1:c7:ee:2c:5b:88:5e:ce:
                    d4:72:a7:f8:cf:e8:90:6c:21:b8:a8:56:d0:ce:a3:
                    48:d9:18:2e:88:76:00:ec:7d:2d:32:76:4a:b4:c1:
                    a4:13:1c:69:c9:fb:b5:d2:50:63:57:c4:3a:9f:4a:
                    a7:ec:7a:3e:b4:12:6b:31:91:2c:db:e8:7a:5f:b1:
                    fe:0f:ba:a8:a3:e5:d1:47:8f:69:15:02:25:ba:08:
                    0f:5b:8f:a0:3f:8b:7a:c2:30:9c:db:52:c7:08:4e:
                    13:a4:3f:06:fb:64:b5:b8:c3:df:c5:ad:88:1a:f9:
                    22:c4:d6:03:bb:eb:6b:ca:50:df:3f:0d:32:2d:02:
                    6f:e4:f9:ee:89:bf:32:f7:c1:93:52:93:e8:3a:3b:
                    99:24:d5:64:64:29:25:3b:9d:11:31:09:cf:19:77:
                    d1:df:66:b3:93:84:14:e8:b7:51:8a:9f:76:9f:c4:
                    b4:3a:80:6e:48:7d:8c:68:75:aa:a3:f8:2c:14:e9:
                    6f:c6:b1:2e:9d:4e:ac:17:db:da:bb:e3:84:63:29:
                    2c:03:6c:05:80:58:8d:30:26:fa:9b:dd:01:57:4c:
                    7d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9A:E4:F8:E6:D2:7B:20:A8:A0:F4:37:83:36:66:D2:B6:D4:50:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad7080a6-56b5-3f47-b848-aca27953d32e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:2ec0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:39:8c:46:20:eb:70:88:6e:b7:65:a6:7e:a1:11:bd:59:00:
         06:df:29:23:7b:1d:03:37:75:b4:2f:f5:05:0d:6f:aa:b0:10:
         33:a5:4e:b9:3d:f8:21:8a:e5:3a:bd:66:59:71:43:d2:9d:c3:
         5c:f2:38:16:6d:9c:72:be:4c:21:76:0e:7e:5f:bb:48:7c:7e:
         18:3c:28:bb:9f:68:90:3a:ed:9b:15:b9:e3:d1:36:ad:45:39:
         70:f1:c2:8b:55:54:04:49:93:6e:c8:fa:9c:c7:64:0d:2a:e2:
         bd:07:28:15:f0:5e:4e:5c:92:14:36:e3:18:fb:93:e6:20:8d:
         58:04:1c:a6:83:2c:94:90:9f:64:39:90:48:66:52:8f:a1:cd:
         38:21:d6:3d:57:37:e8:9c:33:15:6d:fd:b3:0e:b3:00:14:18:
         5a:25:6a:c5:66:9a:c7:42:cf:e2:9a:5f:8e:af:f1:df:7d:0b:
         76:fe:14:c2:b4:f4:16:f5:59:bd:82:32:eb:df:c7:2f:c1:e2:
         ab:83:01:5c:54:c3:e4:5d:5f:25:1a:bf:73:d6:10:b8:53:78:
         73:22:df:a9:34:23:4c:f2:41:00:29:19:ae:1b:d5:3d:26:c9:
         f3:37:39:9e:c1:c0:23:0a:2d:dc:48:d0:81:61:23:95:81:20:
         c5:85:20:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:29:41 2025 by rpki-client