Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/55f024cc-6c7e-3e3b-8d59-374bac9dc766.roa
File:                     55f024cc-6c7e-3e3b-8d59-374bac9dc766.roa (raw, json)
Hash identifier:          iIBDw1idwwwwIW0mHCGnGOAE7J4OqXjTJPt/VxhwE6c=
Subject key identifier:   0C:1C:BF:CE:83:F9:DC:3F:70:29:B7:74:F5:70:DD:77:C7:E7:68:12
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E66DA21AE3AA3CC0ABCD91040
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/55f024cc-6c7e-3e3b-8d59-374bac9dc766.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     22773
IP address blocks:        2001:578:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:21:ae:3a:a3:cc:0a:bc:d9:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=390d5123-5fcb-4fe6-b82a-feaa179d684f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2f:22:a8:cc:8f:11:01:1b:8d:69:d7:cb:75:
                    da:a6:bf:8b:1e:fb:82:5a:f5:c4:5b:cf:78:e4:0c:
                    76:75:22:f9:72:4b:e4:db:10:cd:8c:6f:62:9e:2f:
                    68:8b:51:ed:7c:b3:a1:5b:83:e6:6e:f7:b4:f0:52:
                    48:0e:96:02:e8:d6:64:c7:92:1c:37:bc:ee:12:99:
                    13:a3:fa:6a:84:ca:17:34:c9:8c:74:8c:93:b8:3a:
                    02:bd:fd:2f:89:cb:68:b2:ce:a8:80:be:b5:9e:24:
                    7f:45:15:7a:93:a9:34:9a:5c:67:13:d0:c3:33:62:
                    eb:19:e0:00:36:64:5f:cd:91:d5:78:06:f3:80:d0:
                    4d:96:09:c9:06:da:82:76:83:8b:f2:1a:97:bc:1f:
                    1f:1d:5f:6d:ad:f7:9a:06:69:65:94:3a:27:ef:33:
                    89:2a:91:21:ff:d7:f6:48:76:a0:33:cd:3f:7a:33:
                    19:54:e4:57:3d:4c:1a:0f:01:dd:cf:f6:55:be:75:
                    4e:ed:30:a3:c1:9a:a5:4f:de:75:2b:a5:1f:62:e4:
                    ba:ab:34:d4:8b:7f:04:5d:ba:83:32:a8:35:a9:fa:
                    db:f2:d8:d1:43:a9:6e:fe:3e:27:f1:16:b7:47:ba:
                    34:fa:c3:6e:cb:7f:d4:d9:34:f7:28:03:5b:18:25:
                    af:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1C:BF:CE:83:F9:DC:3F:70:29:B7:74:F5:70:DD:77:C7:E7:68:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/55f024cc-6c7e-3e3b-8d59-374bac9dc766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:578:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:e6:4d:d5:62:15:06:62:ee:5d:24:17:cb:c6:5b:f4:be:a2:
         f4:56:24:2f:31:fa:3d:24:c2:a6:eb:1f:ed:ad:59:e8:91:7d:
         a2:fe:6f:ab:8a:7c:36:81:51:d8:38:f5:8c:16:0e:96:db:2e:
         26:75:10:8e:ce:2b:a7:ba:6c:9f:2f:85:85:a8:ef:9c:15:79:
         e6:0c:26:69:c2:e7:13:58:d6:e9:7d:97:a4:88:8e:6f:8a:f0:
         40:c1:7e:20:88:04:2c:7d:90:76:26:d1:0a:ff:24:3e:f6:e5:
         d3:b3:35:69:2c:00:51:a2:a9:53:a5:6f:e0:df:74:68:9a:0a:
         8a:a5:29:14:fb:ef:b7:05:2b:07:1b:bb:a1:93:f3:64:ed:b4:
         d1:91:08:e2:ff:d8:63:cc:57:c1:89:75:0a:18:40:84:b6:99:
         c1:dd:9f:86:2b:85:73:36:9a:71:96:c8:46:9e:fe:6c:61:c8:
         4a:99:3b:c7:be:2c:8a:02:63:dd:0a:69:5b:57:db:64:57:04:
         c2:43:4a:59:da:f6:55:14:14:7e:96:e8:1a:40:d1:63:5c:a5:
         c6:3c:79:9a:7e:8a:4b:dd:52:57:5f:56:29:8f:33:76:8b:fc:
         86:c5:af:9f:f6:d6:84:8b:76:e3:44:5d:23:58:80:a7:22:13:
         a9:0c:f6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:08 2026 by rpki-client