Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f6b10b05-6ad3-3982-aea9-23491a5d1327.roa
File:                     f6b10b05-6ad3-3982-aea9-23491a5d1327.roa (raw, json)
Hash identifier:          P565GTm/1/0roPmDvkmHfhRrv+XY0j0Cx8w0hSRSQzw=
Subject key identifier:   0C:E2:02:BC:9F:7F:41:5B:73:7A:F5:EC:D2:F8:DA:7E:41:95:A7:A2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F020FE2C7769736714F18E0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f6b10b05-6ad3-3982-aea9-23491a5d1327.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2600:8800:9c02::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:02:0f:e2:c7:76:97:36:71:4f:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=ca671108-b8b7-4c8f-acdf-375271fe5a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:5d:2b:ae:80:38:e9:4b:61:35:18:d2:bf:
                    f6:8f:7d:61:56:b8:c9:2d:2c:55:6e:6e:7b:ae:d5:
                    73:9b:f2:44:fa:5e:e7:88:4d:a3:c8:33:5a:a8:c2:
                    da:22:df:21:11:26:53:27:99:11:e7:aa:c6:77:13:
                    b7:65:ed:35:da:4e:f1:87:bb:72:b1:62:aa:22:dc:
                    84:f1:79:fe:04:86:59:65:e8:2b:68:10:08:c5:69:
                    13:6b:b4:23:c9:69:08:c6:f7:2d:3d:87:0f:0c:92:
                    f6:71:ca:c8:78:8a:e8:d8:ee:ac:71:64:5b:7d:73:
                    f1:e5:2e:12:61:71:32:02:cd:a5:83:25:13:b5:30:
                    20:36:1d:ad:a0:22:cd:7a:cd:eb:52:54:6f:cd:36:
                    6f:c1:1f:66:d5:88:33:8a:44:8d:31:8b:bd:25:50:
                    f3:fb:1e:4f:7b:85:cf:d4:7d:cf:61:65:1e:c4:83:
                    2f:b2:5c:6b:51:7c:e6:89:80:58:e8:cc:5c:17:c1:
                    f2:79:e0:53:2b:46:15:43:ef:47:96:e0:40:52:4f:
                    ff:a4:d0:72:92:bb:0e:cf:0d:ea:99:d0:9f:ae:76:
                    cc:fa:87:26:b9:a8:6d:c6:9b:dc:2f:55:82:5a:df:
                    be:56:40:3c:b0:95:a6:4c:7d:89:48:77:02:fb:8a:
                    a2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E2:02:BC:9F:7F:41:5B:73:7A:F5:EC:D2:F8:DA:7E:41:95:A7:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f6b10b05-6ad3-3982-aea9-23491a5d1327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:9c02::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:1e:6c:1b:3c:5f:7c:60:08:09:37:1f:bb:4d:17:8e:55:89:
         20:08:ce:e3:56:bb:1e:f2:ec:38:0f:37:da:e5:5f:c7:5c:5f:
         90:48:02:1a:12:34:8d:c1:d5:87:9c:83:17:c4:04:7e:2b:d3:
         0f:b0:f1:91:22:cd:2a:72:f3:fe:9b:62:09:bd:49:00:41:8c:
         8e:6c:c9:d5:1a:ae:16:16:b4:5d:f3:80:52:ef:89:9a:54:92:
         90:89:67:ee:48:12:ad:99:99:e7:d4:32:67:44:85:ae:eb:76:
         8d:2e:14:74:0e:b3:66:06:db:01:a1:d4:bf:1c:0f:81:60:52:
         21:3a:f8:39:c0:35:38:ea:b6:f7:e1:72:dc:18:5e:07:1d:ec:
         36:d7:ba:0c:96:eb:77:0f:ac:4b:e1:7c:52:1c:8c:d3:96:09:
         69:88:fb:d7:76:ee:31:5e:2f:1d:a9:b9:c6:e2:77:06:f4:3c:
         0e:ad:cc:9a:1e:1b:5f:b5:50:4a:c2:7b:ce:23:e8:e2:99:78:
         67:4b:77:1c:37:eb:03:29:44:9d:6e:b9:c0:65:7a:ca:ef:d2:
         5f:2a:fd:26:59:52:c6:89:8b:fd:66:7c:31:22:3e:d6:c7:c1:
         72:e7:13:dc:be:9f:d4:79:eb:27:6f:a2:df:0b:9e:b4:89:04:
         c1:e9:b2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:26:57 2025 by rpki-client