Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/585c5afa-862e-31bc-ad8c-27a4fb32cac7.roa
File:                     585c5afa-862e-31bc-ad8c-27a4fb32cac7.roa (raw, json)
Hash identifier:          FGPN1eH/Je5UuEnzDjYhK+cSTRONFkCyUsPHrI6TOGU=
Subject key identifier:   62:AC:DA:43:7D:DC:27:BA:19:8B:0D:84:A9:B7:AC:52:F8:56:3A:62
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D6EDA6C56DFCAF6D17BD20E80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/585c5afa-862e-31bc-ad8c-27a4fb32cac7.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     22773
IP address blocks:        2001:579:e198::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:6c:56:df:ca:f6:d1:7b:d2:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=9e8872cc-4110-47db-b8f9-212cf85f5f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:f5:6a:af:04:52:67:dc:60:1e:58:f2:0c:
                    47:b5:f0:74:3c:d7:54:d5:8d:99:cf:35:83:eb:83:
                    73:60:03:32:4a:85:e3:88:37:38:60:c9:80:4e:de:
                    85:a0:39:76:c6:c1:ef:14:d7:1e:e7:d4:0d:1b:75:
                    ed:d4:11:98:b3:b1:a1:e1:25:02:fd:19:ad:ca:25:
                    52:12:e8:a5:eb:be:aa:48:64:71:48:66:16:85:01:
                    5f:be:83:02:df:12:8a:11:5a:bb:77:2d:ce:54:89:
                    24:0e:78:0f:fc:35:f1:bf:ec:88:49:68:ab:14:bb:
                    7d:24:00:27:03:f9:f6:d1:6c:9a:cf:1d:ca:2a:c1:
                    e0:84:29:2c:b1:ac:48:c3:53:b8:70:54:70:23:90:
                    11:36:0e:3e:8c:49:e9:ee:5d:6c:47:03:c5:7b:be:
                    5c:ee:da:ee:ea:f9:a5:90:37:b2:3a:6b:55:49:2f:
                    a7:14:c3:ee:1f:78:4e:ef:22:24:1f:8e:cb:0e:43:
                    0d:50:6a:27:b8:bd:d2:08:af:12:ea:c4:90:f5:a7:
                    1c:de:e1:19:16:44:0f:7b:82:2d:e5:15:aa:c5:1a:
                    5f:67:8f:37:85:3a:ba:c5:09:0b:b1:b5:28:92:c9:
                    58:c3:d4:4d:84:ce:37:df:d2:7c:c7:94:65:c6:aa:
                    c4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AC:DA:43:7D:DC:27:BA:19:8B:0D:84:A9:B7:AC:52:F8:56:3A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/585c5afa-862e-31bc-ad8c-27a4fb32cac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:e198::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:bf:0a:f1:8e:28:4e:09:37:d0:87:77:4a:d7:9b:7a:1b:dc:
         f8:9e:29:17:4b:3a:d2:cb:84:aa:cb:7d:b3:70:27:a4:f8:ed:
         e8:90:bd:a6:b9:8b:79:18:f8:b3:dc:fe:46:b7:53:c5:22:0b:
         37:08:82:6b:77:66:d2:73:ba:50:02:01:b3:ab:40:30:b8:79:
         b5:88:da:6d:b8:d9:2b:40:71:70:29:31:6e:ed:97:5e:87:96:
         7b:4c:68:8e:35:c3:08:96:e4:79:04:c4:7d:2f:9d:01:71:f1:
         fb:ba:4b:74:47:e8:89:83:c0:7f:2c:a3:a9:50:8f:b0:03:8d:
         b3:31:5a:c2:09:32:d1:9e:ef:86:e7:dd:30:3f:0a:a5:09:72:
         16:de:dd:73:9d:ec:df:ae:be:48:0e:8d:09:59:9f:91:91:d2:
         66:43:eb:7e:a1:9a:02:eb:a2:25:b4:84:9a:30:6f:50:ae:bf:
         53:e6:ba:f7:04:25:72:09:9a:30:06:a9:23:d1:0d:47:e3:9f:
         ac:c1:95:51:44:29:2e:ff:1c:b8:0a:d2:99:ff:41:e4:09:13:
         53:e9:46:b3:b1:82:5e:10:13:83:3f:3a:c5:f4:b5:5e:20:a0:
         a9:1d:23:de:97:94:2b:b9:5a:eb:c6:ea:3f:ad:b2:15:7d:9c:
         a2:e2:33:99
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1u2mxW38r20XvSDoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk
OWU4ODcyY2MtNDExMC00N2RiLWI4ZjktMjEyY2Y4NWY1ZjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzof1aq8EUmfcYB5Y8gxHtfB0PNdU1Y2ZzzWD
64NzYAMySoXjiDc4YMmATt6FoDl2xsHvFNce59QNG3Xt1BGYs7Gh4SUC/RmtyiVS
Euil676qSGRxSGYWhQFfvoMC3xKKEVq7dy3OVIkkDngP/DXxv+yISWirFLt9JAAn
A/n20Wyazx3KKsHghCkssaxIw1O4cFRwI5ARNg4+jEnp7l1sRwPFe75c7tru6vml
kDeyOmtVSS+nFMPuH3hO7yIkH47LDkMNUGonuL3SCK8S6sSQ9acc3uEZFkQPe4It
5RWqxRpfZ483hTq6xQkLsbUokslYw9RNhM4339J8x5RlxqrEIQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGKs2kN93Ce6GYsNhKm3rFL4VjpiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTg1YzVhZmEtODYyZS0z
MWJjLWFkOGMtMjdhNGZiMzJjYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeeGY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD6/CvGOKE4JN9CHd0rXm3ob3PieKRdLOtLLhKrLfbNwJ6T47eiQ
vaa5i3kY+LPc/ka3U8UiCzcIgmt3ZtJzulACAbOrQDC4ebWI2m242StAcXApMW7t
l16HlntMaI41wwiW5HkExH0vnQFx8fu6S3RH6ImDwH8so6lQj7ADjbMxWsIJMtGe
74bn3TA/CqUJchbe3XOd7N+uvkgOjQlZn5GR0mZD636hmgLroiW0hJowb1Cuv1Pm
uvcEJXIJmjAGqSPRDUfjn6zBlVFEKS7/HLgK0pn/QeQJE1PpRrOxgl4QE4M/OsX0
tV4goKkdI96XlCu5WuvG6j+tshV9nKLiM5k=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:00 2026 by rpki-client