Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a0c15ac-9151-3a2f-a74c-60149f6bea01.roa
File:                     1a0c15ac-9151-3a2f-a74c-60149f6bea01.roa (raw, json)
Hash identifier:          I8uqhUmHPtqt3+OkgpmuHAoWgWijV5Z8lzVjeR6q4W0=
Subject key identifier:   7F:64:8D:09:DB:EC:26:EC:1E:67:31:D3:5C:32:D1:02:89:85:30:F3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EA0156D2460DF319EE25F3180
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a0c15ac-9151-3a2f-a74c-60149f6bea01.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     22773
IP address blocks:        2600:8800:5408::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:6d:24:60:df:31:9e:e2:5f:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=0ba830f2-f777-4c1c-b773-bb533e826657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ed:a4:6b:76:e0:06:13:c6:c7:e9:08:3e:44:
                    5e:27:c0:05:1e:fe:af:41:44:32:42:40:c1:28:c3:
                    51:b5:e0:b0:e5:19:c7:77:f4:c1:3a:0b:dd:d6:0c:
                    95:08:e4:78:8c:f5:66:6b:1c:94:c0:27:84:3d:14:
                    9e:48:e0:18:2e:19:ac:37:1b:d9:44:42:78:8c:30:
                    92:ba:a0:59:bb:75:e1:2c:32:6b:b1:b2:e7:3d:31:
                    3a:42:ad:95:c8:fd:24:25:c2:b7:dc:bf:21:1f:ea:
                    e3:d2:d1:e9:f4:d8:89:74:2e:a8:82:0e:d6:9c:8f:
                    eb:c9:32:78:0c:98:6e:41:e2:36:56:07:33:b3:e0:
                    b6:a9:e4:a7:4c:d0:f1:1c:8e:45:7c:89:4a:95:ea:
                    cd:e8:b1:42:da:f7:58:1e:06:45:99:b9:14:8c:7a:
                    2a:70:b7:f1:9e:ef:d5:32:23:ef:50:00:e8:c6:c0:
                    2c:85:18:07:69:0e:ed:48:43:75:ca:20:4b:37:41:
                    d7:3a:48:6f:c9:11:bb:59:07:cb:ab:ed:16:47:f9:
                    94:36:ae:8b:6c:ce:ed:a8:03:8d:8d:90:47:1b:89:
                    93:75:cf:c3:a6:ef:c6:8f:11:e8:46:42:6c:4c:e5:
                    a9:94:d5:00:25:82:5b:f4:d9:d4:bd:51:1b:0c:c6:
                    33:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:64:8D:09:DB:EC:26:EC:1E:67:31:D3:5C:32:D1:02:89:85:30:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a0c15ac-9151-3a2f-a74c-60149f6bea01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:5408::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:b4:84:28:f9:98:2d:97:08:91:61:0f:72:d8:0a:c1:6d:d3:
         6c:43:5a:2c:8d:89:25:41:a1:2c:7a:ae:0e:43:5b:c6:40:20:
         8b:3c:de:f1:92:92:dc:e2:b3:ce:1f:68:05:91:85:a8:89:9a:
         e6:fb:54:b2:cd:17:35:e1:c2:eb:02:8c:f6:6e:7c:33:6f:fd:
         85:91:cc:0b:5e:e0:65:0b:2e:b9:90:05:5d:73:2c:04:18:10:
         4d:38:9b:5f:69:e6:10:7f:1b:64:f3:f9:2d:7e:2f:a5:e4:be:
         d6:e8:ce:37:78:eb:a6:34:93:9c:c6:e4:ca:60:21:cc:c3:68:
         28:da:74:9c:85:f1:65:5e:b9:ff:6e:79:27:5a:1a:70:e2:dd:
         63:be:15:9d:ab:4e:60:b2:f7:a7:14:c0:e2:a0:26:71:5b:44:
         1f:34:5f:7a:37:53:71:e7:8e:7e:40:9f:b4:7f:f5:0b:7f:88:
         9a:41:5a:2e:08:e4:e5:06:65:3d:68:9d:0b:9e:94:a7:1a:44:
         3c:65:63:22:9a:a2:1e:04:7d:f7:cd:9d:76:30:2c:11:95:c9:
         73:4d:f0:d9:d0:d8:87:36:72:af:ed:ba:e2:c9:c8:ba:34:20:
         3b:ac:32:ab:e4:58:b1:18:42:81:11:6c:48:c7:16:0a:34:7f:
         f8:16:9c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:59 2026 by rpki-client