Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ceb54af2-67ab-38bf-aac4-925c88aca251.roa
File:                     ceb54af2-67ab-38bf-aac4-925c88aca251.roa (raw, json)
Hash identifier:          V6GJLk7yWu1CUqg+VqiiQlDI7E1lhhQO8pBsPJaWUL0=
Subject key identifier:   58:F1:E7:DF:28:FB:1A:19:D4:9D:BE:1D:C7:D8:C3:91:DE:A5:53:58
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F0220601F52EEFA3886A460
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ceb54af2-67ab-38bf-aac4-925c88aca251.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:880a:330::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:20:60:1f:52:ee:fa:38:86:a4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=595cabf5-cfd6-4fa3-b806-1403887490f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:72:1b:ac:a4:d3:1c:d5:0c:59:cd:9c:5b:
                    d2:53:6d:f3:35:0b:1d:7b:17:be:9c:11:23:2c:e7:
                    88:d7:42:ac:9e:2d:23:25:fc:6f:fc:ee:89:19:d4:
                    9a:fe:2e:18:1c:c2:80:6a:ec:fd:66:fa:94:81:ce:
                    75:5c:c2:af:ac:77:36:f3:58:ea:c4:68:b3:29:33:
                    26:00:4d:4e:a6:ce:1a:63:e4:3d:1b:55:5b:ee:d8:
                    41:b6:11:e2:e5:10:2f:68:26:4b:e2:ca:bf:7d:c4:
                    9d:9f:70:a2:3a:b9:e5:ef:a6:3f:a5:e0:aa:18:9f:
                    97:89:2e:d3:28:08:67:cf:43:60:bb:33:c5:53:19:
                    eb:b3:e8:9f:2c:ed:64:b3:ef:a0:60:e4:fc:0a:db:
                    1d:fa:94:f9:98:cc:e2:2c:3f:30:5d:02:9c:bf:19:
                    45:e0:5e:b5:13:ba:d7:0e:f6:c3:ee:72:2e:0f:e7:
                    83:04:9e:3b:8d:bc:7b:34:e6:70:2a:c8:a8:84:02:
                    a5:83:63:04:48:3f:23:27:30:a0:f1:78:f4:cc:8d:
                    6a:e5:6b:19:cf:05:14:b8:35:0d:63:dc:2a:0a:7a:
                    98:96:29:bf:13:d7:90:b1:23:fc:53:8f:21:75:c8:
                    75:fd:89:93:80:e2:ee:fd:b2:57:e2:7e:70:df:6e:
                    78:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F1:E7:DF:28:FB:1A:19:D4:9D:BE:1D:C7:D8:C3:91:DE:A5:53:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ceb54af2-67ab-38bf-aac4-925c88aca251.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:330::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:4f:53:b3:41:46:50:a0:b4:4a:0b:b4:7f:83:08:26:84:34:
         a3:b5:c4:65:0c:bf:f3:a6:cb:13:fd:1b:bb:32:90:3a:0e:58:
         5f:c6:f4:06:9c:40:5e:0d:5d:df:71:9f:64:e3:1c:60:a2:0b:
         f7:13:38:c6:53:27:18:37:c4:f1:04:7f:ee:09:b2:83:d4:3e:
         d8:c0:ae:6f:91:07:97:31:00:0c:fc:47:53:80:cc:8f:78:10:
         f4:34:76:e0:07:44:fd:1a:4c:e2:8a:04:c2:b6:c0:59:04:ab:
         69:6b:1f:22:f9:5e:c9:62:62:b6:22:0d:e1:40:b9:0d:72:f0:
         b2:88:0d:55:e8:af:6d:5a:62:5c:f7:f9:40:e6:ff:e2:e3:a2:
         70:a1:24:ac:49:25:7d:c0:d2:a2:33:d4:b4:41:f3:66:00:a0:
         73:37:a8:09:f7:12:1e:86:43:20:7d:ee:5a:58:de:b2:0e:da:
         d7:d3:26:7d:7c:ed:92:da:78:5b:03:6a:13:d2:d5:be:ba:2f:
         e6:27:9a:b4:f4:b7:84:b2:2f:57:78:03:88:52:2b:0f:6b:80:
         7a:24:2b:57:1e:8d:41:ad:1d:db:4b:69:38:4e:80:0b:91:bb:
         1c:71:65:02:06:2f:95:61:b8:31:83:c3:b6:80:74:14:94:3c:
         42:b9:aa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:26:24 2025 by rpki-client