Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9323f62f-583c-3e4a-868d-f7ffd7fd26b3.roa
File:                     9323f62f-583c-3e4a-868d-f7ffd7fd26b3.roa (raw, json)
Hash identifier:          wFm/0ulTVkuN6GaWFDav86EHTsKPQnYfLCnzMo28VXM=
Subject key identifier:   3C:BF:24:B4:F9:8E:47:99:8F:7A:21:22:E2:5F:2F:31:97:6A:39:5D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF328B4B6AC0FBDBBD92CE00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9323f62f-583c-3e4a-868d-f7ffd7fd26b3.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        2600:8800:564a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:8b:4b:6a:c0:fb:db:bd:92:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=06158f8e-67fd-452c-8e9a-ca60ea385793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:59:8d:ec:0f:8e:f0:39:8d:94:56:1a:d5:38:
                    50:01:b6:52:ae:fb:19:3d:cc:9d:2c:86:14:1a:90:
                    e6:78:a9:15:cb:5d:45:e5:12:33:4a:06:0c:30:a0:
                    86:f4:81:e8:e9:72:cf:5c:47:8e:71:35:a3:34:5b:
                    ad:86:e3:50:a3:f6:3e:dc:a6:44:c4:77:fe:f2:d4:
                    97:0c:85:8a:3c:83:0f:a5:e4:5f:87:26:9d:7b:db:
                    0b:1a:04:a7:ce:de:bd:43:41:8f:46:19:1c:9a:7d:
                    c5:ba:a8:69:9e:40:75:52:7d:8b:68:05:5a:db:1e:
                    10:b5:57:37:eb:42:4a:f9:2a:36:23:cf:ce:36:f0:
                    37:90:38:84:49:94:b7:b6:79:6d:87:09:c9:85:3d:
                    c7:55:f3:33:5e:0b:69:b0:2e:8f:34:13:d0:89:f1:
                    f2:65:e2:43:ce:3e:87:67:fa:e5:71:23:15:44:25:
                    6c:eb:80:a8:55:0c:58:ea:50:a7:c8:1f:16:02:8b:
                    64:7f:f2:0d:db:42:17:c2:98:68:3a:ff:c5:bc:68:
                    b2:8b:86:c8:7e:29:4f:16:8e:8b:62:0a:28:39:ae:
                    25:3b:5b:51:39:e0:0f:d4:92:b3:f8:c1:70:1a:8b:
                    09:d0:71:e5:79:ab:28:7a:3f:43:a2:aa:09:ed:cc:
                    0e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BF:24:B4:F9:8E:47:99:8F:7A:21:22:E2:5F:2F:31:97:6A:39:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9323f62f-583c-3e4a-868d-f7ffd7fd26b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:564a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:d4:63:ea:57:35:b7:d1:03:de:2f:f5:45:b6:00:ed:8a:be:
         e4:b4:3a:95:2f:da:53:84:3f:33:ec:b3:2b:77:1c:f7:dd:e3:
         10:5e:e5:f7:aa:f9:f8:e8:4e:3e:dc:6d:0b:46:e7:b4:19:8e:
         e8:99:83:97:eb:3a:a5:6e:38:e3:b9:44:e4:19:a9:50:b2:3c:
         7d:ce:af:b9:f5:38:00:4e:0d:dc:ad:97:74:e2:30:69:8f:ac:
         d5:57:1e:d8:12:e5:f3:42:f9:e2:b0:84:b4:bc:6d:35:cd:47:
         e7:56:6a:fc:59:38:16:01:c4:ad:93:6f:94:98:14:99:63:bb:
         9d:24:40:77:81:df:ab:d7:19:2c:eb:fa:0f:5b:f0:bc:87:d5:
         d0:e2:c5:d9:cc:b2:c1:2e:05:a9:22:f7:13:44:a4:87:20:1a:
         3b:a6:d3:9a:31:02:a8:3d:14:5e:4f:ac:86:cb:9d:f9:6f:c5:
         ad:b0:8a:fd:81:9b:3b:34:28:59:e9:81:0f:e6:7a:30:13:10:
         18:a4:c9:61:bc:bb:4a:16:4d:03:8e:cc:7e:34:09:9e:4c:dd:
         e8:06:ed:a9:39:b7:2b:5d:a7:62:8d:aa:3d:b5:c2:a8:a9:f4:
         cb:99:d2:c1:13:72:da:85:0d:d1:d4:8b:50:31:09:ef:76:be:
         2c:b5:ab:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:09:57 2026 by rpki-client