Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f5ae641-1dd8-343b-8c69-28e1344ab162.roa
File:                     1f5ae641-1dd8-343b-8c69-28e1344ab162.roa (raw, json)
Hash identifier:          n4q8WLQ8nq99jnijUSWjJpseCQERplMo22ZP+c5Q0mg=
Subject key identifier:   26:21:05:51:D4:89:68:A6:58:BC:70:A2:2A:17:DD:42:B3:A2:30:92
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E7B3AFE1761FD3A160A4390
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f5ae641-1dd8-343b-8c69-28e1344ab162.roa
Signing time:             Thu 19 Jun 2025 14:49:10 +0000
ROA not before:           Thu 19 Jun 2025 14:49:10 +0000
ROA not after:            Wed 17 Sep 2025 14:49:10 +0000
asID:                     22773
IP address blocks:        2600:8800:b5a0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:7b:3a:fe:17:61:fd:3a:16:0a:43:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:49:10 2025 GMT
            Not After : Sep 17 14:49:10 2025 GMT
        Subject: CN=cb1e826b-1f82-4d5a-b7a3-685d402dd06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0a:11:91:1c:45:fd:63:40:a3:11:36:41:6d:
                    c8:c3:8f:e3:f6:e8:06:4e:80:cf:ff:2f:bc:17:b9:
                    2c:e7:f2:1f:30:ec:a8:58:ae:26:4c:56:78:91:55:
                    6f:61:1e:cd:b9:e0:1e:68:95:39:62:0c:7a:7d:14:
                    10:0b:f8:16:50:37:b3:ad:09:c3:1d:7d:8f:ea:b0:
                    d4:dc:b3:a3:c3:50:c1:f8:28:66:6d:b1:be:7b:71:
                    c4:47:63:b0:5b:29:1d:28:b0:2c:0c:fe:65:76:52:
                    38:7e:45:ee:9c:5c:be:b6:98:63:40:bb:3a:5b:ed:
                    3b:21:65:33:ef:4e:a1:e0:13:32:9f:93:e9:e0:18:
                    15:20:44:d0:b4:52:5d:43:be:e6:b3:18:eb:a9:e5:
                    5f:36:90:6c:1d:75:11:a4:bf:e9:e2:c8:17:e9:e0:
                    a1:12:5a:09:a0:72:03:79:b2:2c:ac:31:e6:9d:b6:
                    fb:fe:78:92:70:a6:73:11:64:b4:81:54:f5:ce:99:
                    7f:16:e5:70:19:fd:c0:c1:75:04:32:9c:12:00:77:
                    0f:0f:e1:fd:d1:a8:e6:0e:23:a4:ea:11:14:44:d3:
                    df:2d:db:5f:ac:be:9a:46:1e:8c:be:a8:ac:97:e0:
                    ec:08:ea:29:73:1c:63:36:1f:5f:14:f3:e7:c2:70:
                    2b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:21:05:51:D4:89:68:A6:58:BC:70:A2:2A:17:DD:42:B3:A2:30:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f5ae641-1dd8-343b-8c69-28e1344ab162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:b5a0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:34:bc:2d:f6:90:05:99:bd:cd:5f:a9:c1:ec:40:e7:5b:94:
         6a:b1:08:1f:35:01:79:43:75:fb:60:b9:fe:72:34:25:f3:81:
         bd:00:ca:d2:ef:9f:17:1a:43:12:2d:1f:4c:97:49:28:ab:1f:
         1e:a7:6c:47:43:4a:92:f8:65:fd:3e:c3:d0:07:b1:de:e7:1c:
         ba:3e:3c:f6:a3:9d:ac:d6:51:c6:03:87:df:16:37:d4:ec:03:
         2d:ff:fd:cc:1f:84:6a:23:16:dd:83:64:8d:39:2a:d1:08:1f:
         ab:3e:73:d2:da:41:8f:da:6e:c3:ec:58:22:ac:bb:da:1c:40:
         ec:bf:e9:92:35:4a:1b:3a:9b:d6:61:22:6d:ad:46:b6:62:0a:
         bb:bc:99:22:33:ee:7a:ef:28:99:c8:66:1a:76:95:d9:b4:6d:
         07:93:fc:72:fa:c1:ff:10:6f:e8:f7:9f:b4:52:65:c5:3c:1f:
         e9:c7:01:ca:5d:8b:4b:b5:55:eb:10:a7:b1:21:ff:75:e2:f8:
         b8:00:7b:4f:09:0d:60:1f:b8:b5:9a:ea:2f:d5:ff:6d:98:54:
         28:99:bd:1d:2e:eb:e3:fd:7d:e0:50:e4:31:03:a7:82:fb:88:
         84:22:ff:7d:fb:a3:f6:7b:fd:18:b9:a3:81:e0:2b:f5:90:d7:
         93:49:5d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:30:42 2025 by rpki-client