Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3efa0a6-771a-396c-8abe-c0d58bdf5056.roa
File:                     b3efa0a6-771a-396c-8abe-c0d58bdf5056.roa (raw, json)
Hash identifier:          nwAfpfP2V8jalPsLLUw/DPT9vnTnogPKGkZ/LLoGZjk=
Subject key identifier:   B0:60:AF:08:E3:36:CE:74:3C:94:12:E8:A8:47:F2:3F:E1:4D:4B:62
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F021ECC3F348C661D5B012F
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3efa0a6-771a-396c-8abe-c0d58bdf5056.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:880a:18::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:1e:cc:3f:34:8c:66:1d:5b:01:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=ceaeeb79-8528-426b-a2ed-8807dd93d21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a8:92:6f:a3:54:41:93:3e:7d:43:a6:af:13:
                    70:05:c4:e6:79:0b:df:dd:96:36:b1:7c:88:45:7c:
                    ba:c2:ae:67:d8:8f:97:a9:c7:a4:7f:af:23:3e:ec:
                    c6:80:b0:ea:35:cb:0e:f4:21:8c:10:22:6d:da:42:
                    b7:54:84:28:3e:31:39:41:1e:98:11:3f:14:1e:95:
                    0d:78:5f:46:4b:c2:a4:b7:6d:3e:23:90:10:b4:71:
                    2c:8a:a4:90:b5:ae:79:24:07:6a:ae:73:fb:b5:90:
                    95:b2:26:63:3f:08:25:f4:b6:7a:13:66:c5:61:da:
                    e5:c2:1b:bb:ad:38:dd:86:da:bf:1e:8d:5d:f0:03:
                    fa:c3:54:02:fd:4c:6f:83:d2:75:55:78:ae:4a:33:
                    b8:f6:88:92:ee:51:90:42:28:ba:72:ee:56:6d:eb:
                    4e:33:b3:c4:b5:f1:9c:c0:2c:da:81:e4:55:3e:97:
                    09:fa:b0:34:fe:44:7b:48:17:a7:ba:8d:ad:ec:d3:
                    a0:46:ac:11:55:6a:f7:7f:e2:9e:75:00:a6:73:01:
                    4e:d2:7a:94:de:aa:3c:db:3c:a0:7a:a3:39:00:9e:
                    4a:27:7e:8f:62:eb:1d:b9:dd:41:ec:48:fd:01:6f:
                    9f:fa:b4:77:a9:b0:a7:0d:02:b6:c3:a9:da:a5:cd:
                    ee:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:60:AF:08:E3:36:CE:74:3C:94:12:E8:A8:47:F2:3F:E1:4D:4B:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3efa0a6-771a-396c-8abe-c0d58bdf5056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:18::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:d1:ed:80:47:3d:99:16:2a:22:5c:80:8d:cb:ad:cd:c3:a7:
         74:ec:1d:d5:bf:4b:5d:49:f9:67:66:ad:65:58:58:ab:62:64:
         87:ad:a7:87:0c:d5:ed:87:60:67:a3:b7:78:da:0b:05:65:6c:
         01:58:3b:cc:8a:e8:0e:cd:92:2f:3d:ba:a7:5a:23:da:b7:b3:
         77:52:92:f4:e0:78:11:8c:97:34:34:22:ba:b0:66:2e:f8:6d:
         fe:d0:cc:4d:6c:cc:ce:a9:ad:a8:7d:a2:21:a8:f5:f3:4e:0f:
         d6:22:7a:25:67:03:86:41:1d:9d:d2:eb:1f:d6:88:7c:37:91:
         7a:7c:4f:fc:90:bb:d2:3c:46:10:dc:29:8e:2c:10:8a:ab:a8:
         93:d3:7a:89:a9:07:09:4c:3d:fe:74:ba:e1:da:19:69:0e:be:
         80:e3:ad:aa:3c:92:2d:bc:cc:27:05:b2:e5:f8:f0:bf:bb:1c:
         2b:17:c9:50:27:42:7f:a7:03:60:36:d2:7e:bf:0b:ea:5d:d1:
         b2:d2:b4:28:33:b9:3f:b7:67:a0:dd:f4:62:ee:e5:50:41:64:
         ae:6c:19:aa:d2:4b:be:02:f9:00:bd:31:a5:dc:71:00:2a:ba:
         b8:95:3f:43:9b:56:50:30:c3:21:e7:e1:89:cd:cd:04:da:50:
         d3:ba:ad:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:42:33 2025 by rpki-client