Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c725ad54-7686-3c9a-8df8-a03f81d6fd75.roa
File:                     c725ad54-7686-3c9a-8df8-a03f81d6fd75.roa (raw, json)
Hash identifier:          KeAlkkrWKNDnXplQP+yMdzlz4CTLj2bh+mDiY5vRcpk=
Subject key identifier:   F0:51:B5:12:FD:7B:5D:73:1A:42:30:16:09:D6:38:ED:EA:F1:E1:57
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F021C4B7C8C69FFEC9CE218
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c725ad54-7686-3c9a-8df8-a03f81d6fd75.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:e082::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:1c:4b:7c:8c:69:ff:ec:9c:e2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=a6666605-8557-40d8-9cef-b5809cc3d056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:e7:e8:40:af:0a:6d:c6:1c:f3:26:a2:e9:
                    4e:c9:25:75:b0:bd:c1:4c:30:8b:b1:0f:b5:eb:7d:
                    99:89:8f:82:2e:58:cd:3f:75:fb:34:8f:5b:16:2c:
                    a0:b8:52:5d:56:ef:76:35:9f:2d:20:e3:f6:44:3a:
                    ce:c4:69:3b:0d:cd:eb:0e:c8:32:7f:f7:69:db:b5:
                    31:73:fb:c8:a7:42:2f:f2:36:dc:22:aa:bb:fe:4c:
                    b3:57:d4:ea:af:d9:66:e9:f4:a2:8f:b9:9d:01:aa:
                    a1:45:5e:d1:21:12:f8:4b:e9:47:dd:35:cb:00:f4:
                    5c:7c:6a:66:89:5f:24:90:22:ae:10:8a:16:92:5a:
                    2d:af:ae:c3:39:e7:10:a2:c2:b9:43:2a:79:02:7a:
                    81:5c:37:2a:94:b7:88:99:b6:7e:c6:26:80:1c:e9:
                    1e:9b:1a:44:0e:78:2e:3a:91:07:08:07:c5:7a:e7:
                    f2:1d:5b:ce:fd:26:2c:ff:92:8f:56:86:ff:03:12:
                    d6:5e:08:fb:32:90:e4:c8:dd:95:98:d0:0c:99:d2:
                    f5:88:41:cb:11:23:4b:d5:03:5c:66:24:8e:f3:7d:
                    7c:a1:f0:37:4c:d3:df:98:08:28:c4:43:ac:83:69:
                    0d:1d:bf:aa:92:85:89:7c:2d:61:64:81:1a:41:2f:
                    18:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:51:B5:12:FD:7B:5D:73:1A:42:30:16:09:D6:38:ED:EA:F1:E1:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c725ad54-7686-3c9a-8df8-a03f81d6fd75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:e082::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:74:03:f2:3c:7b:d3:26:b7:3b:d9:b9:da:8c:d3:9c:15:2a:
         6f:e2:e1:73:b1:ce:ea:8f:72:a2:80:59:63:f5:c1:23:f7:65:
         26:3c:fb:8c:d8:53:a0:96:23:de:ff:3f:f9:cc:d5:e4:35:d3:
         9e:8b:fb:33:1e:2f:e4:4d:9c:34:1b:ad:a0:b5:c8:cd:db:fd:
         90:98:7f:23:70:64:6d:d7:83:5e:d4:71:ca:6b:98:d6:72:8b:
         2d:f0:64:3d:de:dd:74:1b:81:90:c6:08:09:95:a8:c2:7c:ce:
         12:ca:bd:65:e4:68:38:10:d6:60:0a:64:36:b8:62:76:ae:eb:
         d6:18:aa:65:e2:ea:0d:69:da:76:d1:2b:ac:28:45:18:d7:ca:
         41:8f:38:bf:f8:5d:11:e7:00:fa:b4:3e:f0:d7:ae:a7:b5:62:
         dc:06:d9:27:03:28:da:03:3d:13:dc:16:e6:09:18:58:3f:d4:
         cd:eb:d0:00:99:42:66:52:fd:b0:e1:d3:62:8e:7f:61:6b:37:
         3a:03:88:a4:7d:ed:a2:b7:b7:75:ec:7a:d2:c7:31:33:cf:3a:
         d5:67:34:11:5b:63:1d:bc:c0:97:68:96:15:cc:54:72:38:42:
         3e:0d:3a:41:55:c5:dc:8c:ca:40:03:3a:60:c0:c6:ee:ba:94:
         9c:6b:e5:f9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAhxLfIxp/+yc4hgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
YTY2NjY2MDUtODU1Ny00MGQ4LTljZWYtYjU4MDljYzNkMDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbTn6ECvCm3GHPMmoulOySV1sL3BTDCLsQ+1
632ZiY+CLljNP3X7NI9bFiyguFJdVu92NZ8tIOP2RDrOxGk7Dc3rDsgyf/dp27Ux
c/vIp0Iv8jbcIqq7/kyzV9Tqr9lm6fSij7mdAaqhRV7RIRL4S+lH3TXLAPRcfGpm
iV8kkCKuEIoWklotr67DOecQosK5Qyp5AnqBXDcqlLeImbZ+xiaAHOkemxpEDngu
OpEHCAfFeufyHVvO/SYs/5KPVob/AxLWXgj7MpDkyN2VmNAMmdL1iEHLESNL1QNc
ZiSO8318ofA3TNPfmAgoxEOsg2kNHb+qkoWJfC1hZIEaQS8YQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPBRtRL9e11zGkIwFgnWOO3q8eFXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzcyNWFkNTQtNzY4Ni0z
YzlhLThkZjgtYTAzZjgxZDZmZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAOCC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJF0A/I8e9MmtzvZudqM05wVKm/i4XOxzuqPcqKAWWP1wSP3ZSY8
+4zYU6CWI97/P/nM1eQ1056L+zMeL+RNnDQbraC1yM3b/ZCYfyNwZG3Xg17Uccpr
mNZyiy3wZD3e3XQbgZDGCAmVqMJ8zhLKvWXkaDgQ1mAKZDa4Ynau69YYqmXi6g1p
2nbRK6woRRjXykGPOL/4XRHnAPq0PvDXrqe1YtwG2ScDKNoDPRPcFuYJGFg/1M3r
0ACZQmZS/bDh02KOf2FrNzoDiKR97aK3t3XsetLHMTPPOtVnNBFbYx28wJdolhXM
VHI4Qj4NOkFVxdyMykADOmDAxu66lJxr5fk=
-----END CERTIFICATE-----
Generated at Wed Oct 15 21:22:36 2025 by rpki-client