Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/589796a0-67c0-38a3-a2de-452305dcfba2.roa
File:                     589796a0-67c0-38a3-a2de-452305dcfba2.roa (raw, json)
Hash identifier:          yaMvVc3nHu5/8pQaJ/rUZpktez6k7Jz2Y0HRsLyKsF8=
Subject key identifier:   34:F5:1C:D7:68:08:48:75:A9:B7:9B:96:C2:C2:70:AC:25:D3:F9:39
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DBFD061408F35194B3D2C7680
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/589796a0-67c0-38a3-a2de-452305dcfba2.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     22773
IP address blocks:        2600:8800:7412::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:61:40:8f:35:19:4b:3d:2c:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=f09e2bab-2a80-4c8a-b7c6-e17d13ac8c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:26:4b:1b:70:67:44:21:8f:30:f6:ef:6c:06:
                    73:db:ae:01:c4:0d:17:7f:da:98:8d:3e:f1:eb:b9:
                    6a:55:7b:e0:6c:30:c0:97:43:86:c0:f7:79:e8:b0:
                    d4:2c:b2:04:f3:b2:bc:0b:ce:1d:d6:61:7a:37:d9:
                    b4:e5:51:35:f2:d9:a3:6e:8f:08:51:de:a9:74:f1:
                    a9:1c:ce:a7:e3:d1:73:9c:d8:4d:31:fd:27:34:88:
                    6b:5b:d9:88:2d:e4:d3:1e:de:ec:08:58:a8:f4:57:
                    43:d5:3f:bd:40:79:77:44:ff:5e:f4:d0:bb:8d:1c:
                    4e:d1:fb:9d:a1:86:05:45:2c:65:a0:1e:c3:09:8c:
                    2c:e4:89:8b:03:88:a8:7d:e3:8f:78:97:05:eb:6a:
                    b4:23:43:f0:52:de:5f:37:6d:0b:80:57:d6:a8:34:
                    69:39:99:fb:3b:9a:8b:e9:27:79:ee:75:fc:62:ae:
                    c6:05:c0:47:2b:75:f6:7f:67:87:17:33:89:98:67:
                    68:e6:2a:93:11:7b:3b:13:03:b7:f0:c2:70:45:fc:
                    1b:c7:b9:d3:a0:f1:82:b3:d2:fc:a8:32:38:14:15:
                    e0:ca:da:06:48:17:28:a5:ea:60:77:54:ef:7e:7f:
                    8e:5e:52:48:48:04:2e:d7:4d:27:79:40:5a:6b:6d:
                    9a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F5:1C:D7:68:08:48:75:A9:B7:9B:96:C2:C2:70:AC:25:D3:F9:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/589796a0-67c0-38a3-a2de-452305dcfba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:7412::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:14:58:5d:da:c9:73:15:85:95:be:0a:bc:a2:0f:12:e1:ce:
         3d:2a:35:36:17:55:4d:41:cd:df:f2:5e:95:4f:eb:70:9b:d7:
         5a:2c:e4:40:20:0a:76:ee:7c:ef:1b:fd:a1:aa:78:4c:ec:05:
         8e:c9:61:03:7d:e2:50:9a:5c:a9:cb:f6:8d:39:8b:5d:2a:90:
         14:07:1a:49:e2:62:4e:74:75:fa:f7:e6:97:96:56:ca:a0:c7:
         38:00:6c:d1:6d:ab:75:0f:7b:2a:17:fa:85:b3:89:ca:85:f0:
         52:0b:ba:d8:e2:d9:39:de:89:7c:71:1d:90:db:73:d6:71:26:
         61:4e:f3:46:83:12:81:0d:4b:85:13:50:4d:5c:c8:ed:58:55:
         e1:f7:85:90:51:b2:2c:60:da:aa:07:68:50:06:db:4e:0f:8e:
         94:b9:90:42:93:07:b0:2a:c5:46:e1:68:7b:57:42:fc:1c:69:
         2b:4e:17:8b:09:11:1f:c6:27:2e:bf:42:4f:b2:ae:5a:20:b1:
         43:33:c5:49:d9:5f:1a:72:70:26:82:7d:14:7b:c0:e2:e8:fd:
         5a:2e:90:01:11:2c:d4:44:53:5f:fa:1a:0e:51:14:a5:86:c3:
         95:f2:c3:14:f9:27:59:df:48:f7:a7:c1:97:61:39:75:16:db:
         fd:37:6a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:32:15 2026 by rpki-client