Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9514df8-098a-3255-aa9c-24bd350ffbb6.roa
File:                     e9514df8-098a-3255-aa9c-24bd350ffbb6.roa (raw, json)
Hash identifier:          MwYFWh7B+yquhPt/Ia2+rgj7R22Wf3XLW9M6GLp4oMI=
Subject key identifier:   77:25:7A:1E:EB:F8:37:A9:23:0A:BE:01:3A:E8:56:FA:25:00:29:29
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D6EDA6D3EDB5A75DAD8B06740
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9514df8-098a-3255-aa9c-24bd350ffbb6.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     11163
IP address blocks:        2001:57b:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:6d:3e:db:5a:75:da:d8:b0:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=4a2901b0-4139-425d-a1c1-bd3e8ebbb2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:02:7d:59:fb:ef:c2:06:73:ab:eb:7a:f6:5b:
                    88:94:7e:1b:91:4d:0f:91:8b:4b:83:62:c5:5e:ce:
                    6c:16:f3:a4:ea:c5:16:cb:d4:b7:03:ef:8b:1f:13:
                    c7:b7:69:51:64:2a:0e:54:35:15:62:ca:3c:6c:1d:
                    e8:ee:73:15:92:75:34:c6:dd:e4:66:cb:97:29:a8:
                    27:bf:a1:72:d2:8d:84:48:ed:49:d1:b5:fc:1c:58:
                    03:76:67:eb:01:e2:a9:f0:83:6a:05:c1:02:4b:9b:
                    5e:a4:86:bc:48:a2:fc:40:5f:79:09:01:ca:9f:5a:
                    8a:e1:e6:a2:9a:ae:aa:60:2f:7a:f3:8a:56:b4:23:
                    f7:5b:84:ed:aa:2d:96:05:21:e1:bc:a8:79:af:5b:
                    5b:11:fb:fe:04:90:6d:f2:c3:cf:a2:67:90:22:e6:
                    3a:74:4a:dc:a2:53:57:10:5b:b9:b7:ee:95:99:4e:
                    da:e3:fb:05:f4:f2:06:55:ff:bf:b2:68:c5:79:9e:
                    ed:91:f2:0c:ae:44:99:12:61:90:95:eb:74:25:0e:
                    2d:33:ab:9b:cf:37:28:da:40:2a:07:73:2f:5d:00:
                    df:89:2e:0b:2e:03:67:3f:cb:f1:99:dc:a5:eb:88:
                    d6:af:f0:e9:76:78:63:77:dc:61:9a:d6:c5:b2:b6:
                    61:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:25:7A:1E:EB:F8:37:A9:23:0A:BE:01:3A:E8:56:FA:25:00:29:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9514df8-098a-3255-aa9c-24bd350ffbb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:57b:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:03:2c:e3:c6:77:44:40:60:3d:ed:e1:75:2a:85:cc:74:13:
         e2:fe:8d:a9:e1:9d:b1:10:c3:ec:30:71:68:b6:60:e7:82:73:
         60:29:13:60:2c:1a:41:27:c6:ef:78:44:70:2a:44:b7:dd:af:
         e2:6a:c3:9e:1e:1f:c3:d4:ad:13:1e:44:f7:95:fc:72:d0:67:
         ef:af:d2:97:38:5c:5c:1b:89:16:9c:dd:07:56:a5:14:f6:fa:
         d4:db:d3:65:bb:9f:25:64:97:9c:9c:08:a5:87:24:c8:64:87:
         3c:83:1a:d2:86:e0:95:9a:66:99:06:ff:b5:de:1d:c3:a6:4c:
         fc:4f:eb:90:7b:b5:50:a6:0e:09:c5:a2:f5:88:46:fd:ec:8f:
         01:51:13:54:fa:36:bf:d6:19:c4:8a:e7:1c:63:df:b0:e5:8a:
         3d:76:de:d4:a8:0c:18:96:37:83:09:85:51:56:c1:87:61:2a:
         b4:1f:21:4b:21:86:8d:b1:ed:c2:4e:57:c5:eb:47:0e:30:97:
         94:db:58:7e:e8:c1:8b:11:f0:ba:eb:ee:6b:81:7d:b4:72:ab:
         37:3a:a0:dd:47:c9:92:39:42:e9:64:83:43:6d:4a:0b:09:81:
         fb:88:cd:ef:6c:ff:e5:9c:54:ea:a4:30:dc:23:b7:40:79:f7:
         5c:93:68:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:19:47 2026 by rpki-client