Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/162c28c0-e7e8-3ccf-8c19-8114e52603f3.roa
File:                     162c28c0-e7e8-3ccf-8c19-8114e52603f3.roa (raw, json)
Hash identifier:          LjeW4dWnwdoR8yJHbrVe3joZIUrDDiKBSPqOFBu6VqU=
Subject key identifier:   28:83:5A:09:C7:2A:85:E5:BD:DB:1C:9B:51:16:44:2D:D3:B0:25:27
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F42780FD07AC8776DAA90A9E0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/162c28c0-e7e8-3ccf-8c19-8114e52603f3.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        2600:8800:2724::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:0f:d0:7a:c8:77:6d:aa:90:a9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=7a84d1df-ef45-4895-877f-6cf20ecae2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a8:bf:71:ae:89:d7:19:d0:65:ca:a1:c0:03:
                    65:ec:e6:f9:e0:a8:94:91:5a:0c:81:70:d5:a7:e2:
                    de:93:63:cb:e2:5b:12:22:8d:1a:fa:b3:74:a6:b6:
                    00:6b:53:02:29:a7:39:69:a8:b4:2a:69:97:89:8a:
                    41:f4:33:e8:3d:26:61:9d:55:aa:a8:de:8f:8c:82:
                    9c:fe:60:bc:9a:73:db:c1:62:3f:1a:19:76:71:85:
                    c7:57:23:81:1f:0e:48:52:cf:61:68:19:f6:e7:1a:
                    bd:fb:03:f0:ac:23:f1:d0:f9:4d:aa:6b:af:55:d9:
                    1d:f3:e5:f1:3c:43:ca:9f:c0:90:47:82:09:cf:15:
                    c7:9f:e9:e8:c7:2e:74:b3:40:ae:a7:7d:16:47:c1:
                    8f:8a:e3:8f:f2:8f:10:bb:29:fc:c8:c3:9d:9d:e2:
                    13:d2:40:47:e2:51:84:f6:c2:c0:e5:69:a7:5f:40:
                    5f:3b:c6:7c:4e:65:98:99:22:60:02:db:03:f4:2f:
                    80:0e:1a:f7:d9:b5:94:c1:44:18:36:9a:7c:a4:03:
                    60:4a:88:2c:9a:75:e1:74:3a:75:e8:2d:d9:2e:e6:
                    72:16:b0:a9:9c:15:9a:71:ee:f4:18:71:83:2c:00:
                    3e:1e:e4:0f:c9:02:bd:11:57:55:71:a1:b5:4a:02:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:83:5A:09:C7:2A:85:E5:BD:DB:1C:9B:51:16:44:2D:D3:B0:25:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/162c28c0-e7e8-3ccf-8c19-8114e52603f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:2724::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:36:8d:9f:b9:2d:4c:91:d5:94:ed:c7:c3:81:86:98:79:f7:
         59:21:21:1f:67:d6:3e:d2:df:79:46:e7:96:48:e3:8c:7a:6a:
         3c:65:f5:b3:0e:f1:24:b3:87:66:4a:b6:34:27:7e:8f:10:d8:
         4c:24:6b:64:97:0e:a8:51:70:60:db:21:00:82:0e:22:dd:b4:
         f7:36:8f:4c:f0:97:5f:5c:a8:72:7b:b4:5e:2d:25:a4:13:38:
         62:a0:78:32:9b:ca:ec:d4:da:6f:cb:e5:c9:fb:a0:b7:68:16:
         c4:bd:e5:fa:8e:d4:0d:60:97:4b:fe:a8:34:dc:42:d1:7f:3e:
         6e:b7:a4:b0:e3:a7:35:38:56:96:30:11:67:f1:5b:9d:00:30:
         c3:24:0f:14:e2:c3:cb:3c:57:e8:b3:e8:45:1d:4c:91:9a:4f:
         59:13:18:dc:5e:cf:84:f0:96:17:1f:b6:f8:8e:95:6b:7b:64:
         84:bd:ae:f3:b3:a9:6b:f5:30:1b:ad:7a:46:b4:2e:07:50:bc:
         b1:70:04:30:fb:1e:46:55:44:fe:7a:75:9a:87:96:cc:f6:08:
         27:b4:81:39:cd:3c:cd:ab:98:0f:d2:db:d3:11:49:81:7e:cd:
         56:e5:d3:ff:47:3f:c9:f0:51:fa:19:66:53:74:43:9e:2b:27:
         62:13:8a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:10:56 2026 by rpki-client