Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b1a1608-7e0a-3b6f-9815-89fe748f7a4d.roa
File:                     0b1a1608-7e0a-3b6f-9815-89fe748f7a4d.roa (raw, json)
Hash identifier:          FvFnzLt0S6/6L7XANwiRVlGbPy5aDScCC6uSH4Rt4FA=
Subject key identifier:   1A:FD:C4:91:D2:1C:4A:EE:DA:0E:1C:89:44:02:07:35:11:82:91:19
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EA0154E36734D2EBE16CEBA00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b1a1608-7e0a-3b6f-9815-89fe748f7a4d.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     22773
IP address blocks:        2600:8800:8e3c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:4e:36:73:4d:2e:be:16:ce:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=01da806a-c357-4b38-9bac-6c9092ec967c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:27:5c:d8:48:df:e7:b2:14:02:98:d1:88:6f:
                    f9:4c:b7:b4:af:da:0e:90:0c:da:65:32:46:43:98:
                    ac:4e:a9:2e:bd:c0:92:6a:97:b5:8c:c7:f5:b2:3b:
                    15:8c:75:72:b5:71:7f:b9:47:bc:02:82:34:e5:74:
                    7b:95:6d:ae:38:43:55:11:02:83:36:a3:88:1b:7b:
                    a9:88:a8:b4:fc:81:a1:cd:91:87:4d:2c:15:55:e0:
                    f6:f6:93:db:68:f8:ee:0e:cd:15:f0:76:54:8d:bf:
                    02:66:cd:68:49:90:3b:1e:cb:ba:6c:dd:6f:1c:cc:
                    92:fd:22:5d:65:79:0a:25:6f:05:4a:5d:4c:b0:a1:
                    09:5d:6f:a9:a5:8f:a7:d2:af:e7:67:2a:03:d0:3b:
                    1c:05:2b:9f:e4:8e:61:bc:e0:01:ba:26:d0:18:ba:
                    b8:6e:30:e5:2f:e5:f4:6e:6c:29:61:03:af:80:08:
                    be:af:4a:66:3d:28:6f:6e:0c:04:00:8c:83:e2:fd:
                    2b:4d:cd:e7:6e:13:13:65:73:f5:d3:11:63:be:a7:
                    d5:b9:0a:3b:10:8d:62:a4:69:ad:07:9d:65:5f:fa:
                    ed:73:e7:cb:ca:eb:d0:f2:77:21:56:dc:b9:da:f1:
                    ba:fe:dc:a8:39:3d:d7:65:44:7c:15:e0:d2:c5:df:
                    ef:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FD:C4:91:D2:1C:4A:EE:DA:0E:1C:89:44:02:07:35:11:82:91:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b1a1608-7e0a-3b6f-9815-89fe748f7a4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:8e3c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:2d:9a:2f:e6:aa:ee:78:99:96:fd:36:26:ae:57:76:86:c4:
         f8:a3:f6:d0:49:0b:e2:99:4b:0e:fa:c0:6f:d0:b9:17:8b:26:
         25:ee:2d:0f:1f:15:e9:31:b9:ed:79:9a:33:cc:4d:82:ab:61:
         0a:df:02:d0:17:38:b3:7f:6f:41:bd:b4:27:0e:6e:15:79:02:
         55:cb:ee:77:da:80:51:c2:f9:90:9c:dd:72:38:da:86:ee:dc:
         4f:34:69:20:c0:2b:bd:5e:59:7f:df:32:af:a7:0b:a8:32:cc:
         e8:33:e1:06:08:61:da:2e:d7:a1:2f:33:08:28:8e:6c:10:52:
         d7:57:0e:be:13:67:6b:1b:4d:a7:05:c5:c2:d0:98:74:a4:58:
         a5:5f:07:49:47:ee:23:5d:b0:aa:ff:b6:be:c1:78:2d:5d:fb:
         bf:5c:08:a7:a5:81:85:64:b6:6d:d2:2b:85:80:05:76:34:ba:
         c9:b7:b9:98:66:ed:72:cb:d6:9e:70:04:1f:9b:f6:e6:cf:21:
         ab:ef:8d:54:12:c7:05:fb:33:92:5b:fe:8d:9e:95:61:3c:ee:
         76:8f:b1:19:ae:a1:20:b0:1c:1b:d7:47:22:92:9d:34:92:c7:
         84:54:08:82:41:cc:da:bf:6d:a3:3e:b5:f6:04:30:9f:af:49:
         1a:77:0f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:22:22 2026 by rpki-client