Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2a0e1c7-d577-3509-b642-35b80504511a.roa
File:                     d2a0e1c7-d577-3509-b642-35b80504511a.roa (raw, json)
Hash identifier:          J/zLBilEHWZeWUdBt/8cRQYbTw80ZdxqwgAyEG79bMc=
Subject key identifier:   05:28:7E:27:4D:97:7B:D9:7C:1C:08:AD:83:41:9F:E5:4A:52:88:EC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01E3B60608ED0227C3B140
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2a0e1c7-d577-3509-b642-35b80504511a.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:1200::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:e3:b6:06:08:ed:02:27:c3:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=a73b3abd-8afb-4462-acf7-6f46cfb68d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:28:70:1b:74:b6:38:d2:7b:aa:e1:47:4a:d2:
                    78:5d:48:cb:ea:70:d6:3b:cf:54:f9:f8:af:3d:5f:
                    e9:70:f4:2a:2e:5b:bf:36:68:05:d9:25:ca:52:a0:
                    84:3a:69:26:af:fe:70:5a:16:a8:55:f7:ea:75:cc:
                    43:3f:4f:b1:d2:5b:98:39:97:a5:6e:ea:1f:8f:47:
                    ed:62:36:4c:f5:a8:3c:50:2c:59:bb:4e:af:dc:83:
                    f9:6b:f8:57:0b:8a:c8:fa:fa:25:fe:28:3d:d4:69:
                    64:12:42:f1:b3:cb:be:dd:76:16:68:cb:c5:90:7b:
                    27:0c:ba:a6:e6:76:09:a8:52:9e:a4:12:93:20:92:
                    8f:54:4a:4e:d1:e7:92:e7:5f:b0:71:44:76:17:a4:
                    97:4f:3b:dd:ad:30:e8:9e:7c:44:19:a1:7a:6d:7f:
                    54:b4:bd:d4:42:ec:f8:d9:d8:b7:a0:11:49:a3:ca:
                    31:9e:18:14:37:9e:1a:d2:dc:33:8d:56:18:3a:d3:
                    78:e3:d9:e5:f6:16:6a:e4:af:f1:d5:4b:c1:82:d2:
                    f5:29:59:3f:13:cd:74:9b:a3:64:2d:8f:c9:7c:f9:
                    03:09:99:b5:be:bd:65:ed:7f:4b:15:92:98:81:12:
                    73:da:2d:d0:2c:1a:32:e9:ac:ed:3a:06:b0:31:f1:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:28:7E:27:4D:97:7B:D9:7C:1C:08:AD:83:41:9F:E5:4A:52:88:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2a0e1c7-d577-3509-b642-35b80504511a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:1200::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:1f:4d:1d:35:dd:38:5f:22:42:0c:f2:b8:9a:bc:16:df:be:
         d9:db:3d:86:42:4e:46:27:71:89:7e:0c:2c:b2:38:8d:6a:2a:
         b2:71:e4:f6:d5:37:61:62:2c:8d:2e:75:f6:b0:c2:21:02:d9:
         65:60:a2:ff:8a:2d:c7:39:e0:a3:62:ae:12:e1:56:28:38:ad:
         c7:59:ce:f5:11:78:9e:15:43:4f:78:ec:69:18:b0:3c:f3:2b:
         33:ea:da:0d:01:85:f5:de:44:b8:80:3e:9e:42:4d:44:56:81:
         c3:27:d2:7f:75:f9:4f:6a:60:9d:c8:b3:ea:bc:ff:de:e2:c0:
         ba:c8:1d:cb:ad:0b:36:3d:70:55:5b:30:d4:cb:d8:44:68:10:
         2f:23:4d:2c:52:2e:61:04:c4:82:92:21:da:43:cc:2a:81:0e:
         28:7f:e5:37:85:d2:0b:c1:3d:c9:3d:3a:a0:e3:60:17:a3:5e:
         39:b6:c2:dc:4c:b2:e8:27:cf:ed:4b:91:a7:87:99:af:e1:51:
         6b:65:67:dc:54:40:f8:97:6d:bf:8f:1b:ee:09:ce:e3:ad:70:
         63:69:93:b4:49:ec:cc:b0:b9:73:85:55:0b:26:85:7d:be:7a:
         88:c8:f1:42:ec:17:d7:b2:91:74:c9:16:1b:88:1f:7a:af:19:
         58:21:de:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:29:48 2025 by rpki-client