Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/19297327-1281-3f5a-afa4-b1f9edd6b0e6.roa
File:                     19297327-1281-3f5a-afa4-b1f9edd6b0e6.roa (raw, json)
Hash identifier:          Qo7DPlirp852uvrInPswXgWmqXgz8hetaJHfL1BGyAg=
Subject key identifier:   E7:BC:E3:65:E9:BC:D5:2B:08:89:AC:82:57:35:89:F3:86:BD:26:9D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4277FEEB9EF7F1AD93599D80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/19297327-1281-3f5a-afa4-b1f9edd6b0e6.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        2600:8800:5674::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:77:fe:eb:9e:f7:f1:ad:93:59:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=ebdfd9a3-3e6d-4ab4-bfa1-ccedb81a4c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:fb:f5:f2:e1:10:bb:48:18:00:d9:26:ee:
                    f8:5c:50:88:9b:26:4e:00:30:d8:c0:fc:f9:06:71:
                    9e:14:6f:88:46:23:7a:fd:3a:4d:f0:8d:6a:84:88:
                    d1:9c:38:41:ef:26:c0:ea:a7:f1:70:0a:63:cd:4a:
                    ad:6e:d3:76:02:b9:2a:6d:4b:bb:26:91:cf:6a:24:
                    4b:4c:6d:31:51:c1:5f:a0:c6:54:eb:d1:79:34:ec:
                    fd:10:0b:d5:74:03:b4:43:69:98:a9:ff:6f:84:64:
                    21:76:94:6e:32:70:f6:8a:d4:b5:48:d9:2a:0e:ba:
                    72:64:dd:e9:ff:01:28:38:99:63:6d:00:4a:82:89:
                    78:52:dd:0a:a7:0e:57:b9:90:70:26:e8:6a:fd:74:
                    fa:03:30:ee:4b:71:00:71:21:62:40:b8:c4:93:9d:
                    0d:34:a0:b5:f7:94:a0:6d:e2:27:cd:e0:3b:76:6f:
                    48:80:f7:ca:39:a7:f5:cc:f3:c8:38:9f:eb:16:c7:
                    2b:3e:0a:b0:39:3e:ce:37:0a:55:49:36:26:45:04:
                    53:1d:31:fc:8a:77:65:25:eb:49:51:76:72:1d:df:
                    0b:ed:c8:9e:69:b5:bd:00:ff:37:25:23:3b:b8:55:
                    a3:80:fa:72:92:4b:75:e1:2d:bf:f3:17:c8:32:9f:
                    2b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BC:E3:65:E9:BC:D5:2B:08:89:AC:82:57:35:89:F3:86:BD:26:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/19297327-1281-3f5a-afa4-b1f9edd6b0e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:5674::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:65:9e:59:fd:17:08:aa:5b:d9:fa:e1:e6:6f:68:51:f0:0d:
         3b:f3:53:0b:5b:3c:df:1b:0d:9f:1a:46:12:c5:64:12:27:f7:
         5e:43:8e:71:cd:26:ab:62:ed:63:e0:bf:45:0d:28:5b:42:e3:
         d2:3a:9f:fe:5e:ca:ff:44:74:b8:98:40:19:7e:e2:54:72:b1:
         21:8e:e6:ae:96:25:b6:0c:cd:5c:a9:79:96:5b:90:c5:89:57:
         ae:f6:ea:c0:94:f0:64:b4:d1:f8:a7:1e:1f:0c:75:af:41:2c:
         20:ef:37:29:3c:08:ac:8f:fe:85:d2:da:39:ba:cb:cb:ff:b1:
         c9:70:af:31:39:3b:13:de:3c:4a:42:9f:56:b7:cf:8a:7e:79:
         9a:17:ee:6e:91:f0:3f:b9:b4:fa:f1:86:e7:a4:73:f5:b4:91:
         a5:84:b6:38:fd:d1:d8:0e:4d:b0:51:fe:af:1f:f1:68:74:64:
         3a:47:c8:7f:82:21:9a:35:c3:1f:64:8b:de:4d:ef:ac:7c:e9:
         4d:85:c0:9a:9d:76:6c:9e:c3:a0:0c:66:35:ec:54:50:8b:39:
         9e:6c:64:4e:72:d1:7f:c6:c3:8a:f6:4a:c4:bb:f8:bd:91:32:
         20:d7:5c:be:7b:2a:4b:b1:37:e8:f8:0a:25:d4:cb:00:06:b4:
         01:69:9a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:33:20 2026 by rpki-client