Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/946b1c00-f36c-3863-8bf3-ce8c9e39c497.roa
File:                     946b1c00-f36c-3863-8bf3-ce8c9e39c497.roa (raw, json)
Hash identifier:          EzqBMrq0Z/vmBl/mIvKvDSmBOBPpxPk8ataW9uKokBo=
Subject key identifier:   85:C7:7E:9D:4A:72:A0:59:55:E1:54:95:4B:17:0D:07:1C:62:FB:8D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A19FABC3079B3DCF55D519D40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/946b1c00-f36c-3863-8bf3-ce8c9e39c497.roa
Signing time:             Fri 06 Jun 2025 13:01:04 +0000
ROA not before:           Fri 06 Jun 2025 13:01:04 +0000
ROA not after:            Thu 04 Sep 2025 13:01:04 +0000
asID:                     22773
IP address blocks:        2001:57a:7204::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:19:fa:bc:30:79:b3:dc:f5:5d:51:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun  6 13:01:04 2025 GMT
            Not After : Sep  4 13:01:04 2025 GMT
        Subject: CN=88128a30-8c4e-4c3a-813b-2e6cef7de199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d1:6b:e9:2c:cd:dc:1b:03:83:e1:e7:c7:f7:
                    e7:1d:c2:0d:6e:92:f2:ba:74:42:b1:e0:fe:79:e7:
                    f2:8a:48:c6:6b:a7:1d:bb:72:ad:aa:16:b3:a6:7a:
                    6e:ad:02:76:c4:2e:ea:ba:47:78:7a:a3:57:0c:9a:
                    59:07:34:76:84:0c:b9:28:e9:9e:89:a5:53:d8:2f:
                    5b:00:21:d8:c7:08:81:d5:d7:fa:8c:72:1c:8c:69:
                    b6:f7:e3:34:bc:be:8b:b1:dc:a1:b7:17:42:eb:41:
                    36:66:74:ae:f3:81:66:a7:22:38:32:7d:86:2d:8b:
                    90:83:13:32:15:ee:97:ab:7e:80:2b:00:e2:a9:6a:
                    01:3a:66:44:91:21:d9:1e:28:e2:00:07:6a:ce:04:
                    17:8f:5f:5d:23:7a:b7:79:13:6c:db:ac:b7:ef:a1:
                    bd:5c:f2:a8:e5:b7:b6:5a:40:57:0b:e1:d3:8c:75:
                    36:a2:da:96:79:44:c0:68:65:b6:f4:74:7c:eb:02:
                    77:25:87:eb:d5:ee:cb:a8:7d:ca:84:69:41:a9:18:
                    ba:ca:53:e5:83:d9:68:2e:a7:ae:7e:ef:af:6c:71:
                    f1:a0:ec:83:e0:fe:b9:73:e6:c8:9f:e0:2c:3a:ea:
                    3f:71:64:6e:19:71:66:82:85:50:a4:d2:6c:ad:50:
                    e8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C7:7E:9D:4A:72:A0:59:55:E1:54:95:4B:17:0D:07:1C:62:FB:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/946b1c00-f36c-3863-8bf3-ce8c9e39c497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:57a:7204::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7a:6d:cf:41:73:6d:b8:b6:ea:d5:68:33:fd:07:06:ec:5c:
         02:9a:fc:51:b7:ea:3d:19:96:f1:4f:c4:0f:ff:49:25:f6:85:
         72:11:3e:fc:a0:14:99:58:91:8b:07:89:d1:cf:85:a5:92:ff:
         99:88:66:60:5c:28:6c:e2:c1:f4:84:55:ed:2f:d9:6d:f2:e7:
         7d:24:63:4c:0f:10:8f:47:1a:31:3c:21:ad:22:77:a8:2c:08:
         84:96:a2:c2:bb:0c:76:35:0b:b8:0e:c0:e9:6e:01:00:b1:0f:
         44:3d:9c:ab:45:75:0e:dd:77:ab:2c:2f:73:39:a8:26:8b:68:
         ef:9f:d7:c9:c4:72:26:6e:f5:07:68:e9:25:41:a7:26:e3:66:
         6d:14:63:3c:d1:b1:2f:be:4a:44:37:26:d4:fc:c0:19:7c:1c:
         25:7f:70:35:a8:78:fa:73:b6:03:f5:5b:4f:1c:2e:86:84:ae:
         6c:f1:ca:ee:4a:60:63:a8:45:b4:48:d5:e4:86:8b:76:12:a1:
         8d:fa:e9:05:27:25:17:a6:93:e5:a1:cc:83:d9:d4:d3:58:27:
         e1:24:25:1d:1d:27:75:cf:4a:42:da:b9:bc:4e:f9:38:de:c2:
         1e:d3:b0:41:4d:8c:58:59:45:09:f4:9e:95:98:ed:59:f4:4d:
         43:a0:48:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:54:47 2025 by rpki-client