Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/199a8720-3e5b-351c-9fd1-236db77db763.roa
File:                     199a8720-3e5b-351c-9fd1-236db77db763.roa (raw, json)
Hash identifier:          V6dHxnXBw9z6A29qSkqypOPE0WX/hB/B/0P4ESjmd8M=
Subject key identifier:   5C:E0:30:91:98:57:17:6A:AE:67:6B:1F:5E:6D:E1:5D:85:8F:E7:28
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F42783D2D5F286330D7BC2F60
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/199a8720-3e5b-351c-9fd1-236db77db763.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        2600:8800:ab78::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:3d:2d:5f:28:63:30:d7:bc:2f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=994f3865-62b0-478a-8bec-46ee31ef6372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:80:fc:ba:70:20:b3:4b:b2:33:ee:21:59:6f:
                    36:3a:dd:0e:c8:82:d6:cc:dd:0a:3b:1e:34:2b:37:
                    d5:6c:7e:a0:25:43:51:b5:8c:5f:16:c1:f0:b9:5a:
                    d7:99:59:5c:a1:f3:f7:49:7c:ab:0d:d4:87:31:ff:
                    15:1f:fa:d3:44:06:89:d0:18:0d:e5:bb:b4:2f:34:
                    70:d3:c0:e6:ff:f8:86:51:0f:70:6d:15:5e:d6:4d:
                    4c:fe:a3:04:b9:e7:5c:94:56:87:42:79:41:78:28:
                    6b:7f:f6:e4:d7:67:35:f8:cb:a6:b1:5c:bf:3e:11:
                    eb:a4:50:16:75:ce:e1:cb:d6:75:d2:18:80:96:5e:
                    cc:02:77:24:9a:c8:9d:1d:d6:c8:e3:99:02:e9:86:
                    bf:1e:79:be:cf:33:ec:6a:2a:7c:a2:53:bb:1a:de:
                    ea:57:49:c8:10:34:b9:db:18:f4:f9:7f:e0:5c:5f:
                    e1:b1:40:64:b4:91:7c:7a:c9:39:69:b2:f5:65:0b:
                    d5:9f:86:7d:e4:87:a3:6a:64:dc:17:c9:bc:23:59:
                    ad:62:42:4c:46:dc:de:f2:8e:3f:a2:d9:86:46:28:
                    64:51:46:92:a0:6b:30:00:b1:8c:2f:6f:8f:2b:ae:
                    5b:d0:fb:83:4b:d5:a6:e3:de:ba:1c:0b:b4:09:40:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E0:30:91:98:57:17:6A:AE:67:6B:1F:5E:6D:E1:5D:85:8F:E7:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/199a8720-3e5b-351c-9fd1-236db77db763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:ab78::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:f0:5d:43:64:af:37:d2:e5:ec:3f:c8:ed:61:73:c5:b4:b5:
         43:a1:f3:06:d3:6b:c1:09:19:b3:02:90:43:a5:85:9f:e9:f5:
         08:92:d2:9f:a0:a9:cb:65:48:3a:30:8c:3e:fd:74:0c:51:6f:
         08:32:27:01:7c:23:c8:7a:f5:6d:0a:31:9c:43:41:2d:2f:e6:
         9a:df:d8:68:ca:94:6d:d2:cb:c8:a3:0f:33:a9:78:72:e6:82:
         95:be:5f:a8:d7:11:a1:5d:1f:45:54:33:79:66:c9:1f:a6:21:
         2e:aa:6b:b6:eb:61:1e:37:e0:1a:25:b5:d4:1b:57:ec:b7:29:
         e4:cc:f5:06:53:7b:10:58:6a:7c:43:6d:f9:5b:10:eb:1c:c2:
         4a:57:4b:28:17:8a:ff:e3:91:62:b4:1c:83:b0:95:de:19:26:
         8e:25:5d:92:84:35:67:0d:90:c8:a1:0c:6c:47:bd:1a:cc:b4:
         0d:8a:0a:5c:89:f3:1a:85:e4:c8:df:1a:7c:d4:82:27:12:c3:
         44:8c:8a:0d:79:13:3a:bb:9f:97:5f:85:ab:f8:8d:bf:89:b7:
         54:c6:be:61:a9:84:61:9d:8d:05:58:d6:00:c9:20:3c:15:ff:
         71:31:da:2d:8d:c3:e3:5e:73:6d:66:fb:d8:af:7d:26:00:3d:
         f2:38:85:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:08:31 2026 by rpki-client