Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b507f48-cd3a-3ec7-aef7-fa91a2087b3d.roa
File:                     9b507f48-cd3a-3ec7-aef7-fa91a2087b3d.roa (raw, json)
Hash identifier:          kJ4rzgOBQEiHAk7UrHq6ki73RET9uzfOlQd7LFd+dtg=
Subject key identifier:   97:87:3A:48:25:2B:C3:EB:A9:4E:A8:46:24:05:72:D9:77:8A:B4:ED
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584AA1617DA0E2AE7BFBDA2D3AC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b507f48-cd3a-3ec7-aef7-fa91a2087b3d.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        2001:579:114c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:7d:a0:e2:ae:7b:fb:da:2d:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=86c3ac0c-5165-4185-a480-a6d55a11b063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:37:2c:64:4f:ba:12:d9:30:21:fe:e4:03:8d:
                    a9:02:2f:a5:7e:df:15:9a:98:66:53:b4:f5:0d:a2:
                    08:0a:1c:27:7d:e2:b9:a4:2d:3a:da:42:f0:0d:24:
                    c5:14:21:05:b9:cf:bf:c0:de:17:4d:c4:37:18:ee:
                    d8:e4:b2:92:48:fe:6a:d9:c0:89:64:27:89:2e:84:
                    cf:40:4a:30:ec:d4:fa:f3:08:82:c5:76:a7:b1:f2:
                    99:d4:0e:e8:26:0e:f8:88:59:e3:71:4c:17:88:93:
                    f2:bb:7a:a5:8b:85:f4:23:17:04:b3:70:f3:4e:de:
                    54:2d:ee:84:5f:32:59:45:21:9d:9d:c6:86:a1:db:
                    27:a5:1a:3b:7b:87:72:a8:f1:a8:bd:59:37:06:b7:
                    f1:f4:92:be:4d:71:dc:4d:5b:6d:d8:1a:72:74:9f:
                    3b:a7:46:05:3d:3f:f6:d9:e6:e5:60:9c:7f:92:8a:
                    d4:45:51:96:18:dd:72:de:44:c9:98:03:b8:65:b0:
                    8b:4f:d2:a3:42:fa:bf:ea:d3:a9:f4:51:8a:20:b9:
                    67:78:23:17:c9:1d:7b:a8:62:33:17:de:57:82:59:
                    7d:68:94:d2:7d:92:dd:c2:3f:81:cc:80:57:da:37:
                    1e:39:24:57:93:a4:e1:36:74:db:43:61:0d:3d:c2:
                    9f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:87:3A:48:25:2B:C3:EB:A9:4E:A8:46:24:05:72:D9:77:8A:B4:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b507f48-cd3a-3ec7-aef7-fa91a2087b3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:114c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:aa:be:97:a9:08:7b:e2:f1:d0:a6:e4:64:5e:b9:df:cc:9d:
         09:ee:49:06:87:d5:ef:05:be:2e:a1:32:73:02:5f:0e:df:f9:
         a9:a9:2c:24:0e:22:e7:49:52:6c:bd:0a:92:83:2d:72:e4:36:
         74:c6:62:b9:3d:6b:38:c2:aa:72:66:38:50:f7:59:7e:2a:a4:
         b2:0f:7c:9b:39:2e:3d:e0:40:a3:64:9c:03:6d:9b:86:ba:de:
         72:fc:fb:d1:ff:df:fa:8e:66:a1:6c:22:48:c9:8f:5f:bf:10:
         a7:53:65:b5:9f:6c:93:69:e1:a0:f4:6f:98:3e:d3:fb:85:ce:
         3b:aa:41:ae:05:7f:b9:81:9b:bf:9b:92:ea:ee:c1:fc:dd:29:
         54:d2:18:79:70:2c:93:fc:ee:f1:e1:83:93:41:bd:e1:23:c9:
         10:d0:7b:d4:4e:fe:5e:13:be:35:69:d0:e3:19:21:d7:9a:c2:
         be:9d:57:8f:19:56:14:d4:37:72:44:7e:f0:4a:ce:97:5a:04:
         d9:04:ea:0d:63:47:f8:6f:a5:6a:c1:89:77:9f:42:50:0b:cc:
         1e:b9:94:cc:41:60:c7:3e:82:85:a3:5a:62:1d:4d:1c:0c:d1:
         a6:fd:51:e9:18:22:f8:b8:8f:d4:53:91:61:7c:40:e6:fd:1c:
         0a:c0:9e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:57:41 2025 by rpki-client