Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49458e18-6250-3991-810d-36c8e568e55a.roa
File:                     49458e18-6250-3991-810d-36c8e568e55a.roa (raw, json)
Hash identifier:          ucAYkHr/Pl1jbS2hIceOUseKpen8gPrwnXNQZ7Z05l8=
Subject key identifier:   AD:3D:C1:5F:C0:04:2E:30:96:2B:8B:8F:05:DE:5F:01:27:D9:70:B2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F42785240658305C64146F400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49458e18-6250-3991-810d-36c8e568e55a.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        2600:8800:3b00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:52:40:65:83:05:c6:41:46:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=b86e2654-109f-414b-9c6c-3008e85d6c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a2:12:85:9a:b1:fa:42:5e:9e:43:3f:73:24:
                    59:ce:51:7b:6d:8d:4e:dc:b2:94:04:73:38:d4:f8:
                    85:67:99:90:56:16:3b:20:36:00:40:bf:dc:6b:b4:
                    fa:21:df:34:c6:a7:a1:36:8e:ad:70:d8:fb:22:3d:
                    9a:7f:49:ee:90:55:18:36:9b:1c:56:af:ae:61:5e:
                    e3:93:bf:a3:7b:ab:a6:65:56:92:c0:0a:44:01:15:
                    f2:d4:39:99:c1:48:1a:cf:10:7f:42:b1:fc:61:03:
                    cd:62:0e:8e:09:a9:aa:f3:f6:a9:85:9d:9a:fe:7f:
                    4b:f5:df:6a:25:a8:57:27:f0:3f:ee:cc:ef:c4:66:
                    0f:df:41:d1:2e:93:6e:05:f4:5f:c3:f2:56:57:0f:
                    ba:01:1c:a6:44:3c:b0:bc:b4:99:26:bd:ea:50:85:
                    db:8b:bb:6c:e7:24:0d:f1:2a:66:d6:a9:f9:4b:55:
                    49:3e:13:f3:58:0f:a5:8f:c9:3c:d4:ad:24:1f:7b:
                    89:0a:67:55:be:c9:0b:34:59:53:1b:4d:f4:18:3b:
                    69:a2:1e:1c:2f:b2:93:d0:18:d7:28:27:4e:47:07:
                    9e:f8:ea:d0:98:39:fb:b1:a4:22:45:f8:17:c9:01:
                    2e:07:5b:8f:a6:ef:a1:d7:d8:42:2c:7e:72:02:e6:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3D:C1:5F:C0:04:2E:30:96:2B:8B:8F:05:DE:5F:01:27:D9:70:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49458e18-6250-3991-810d-36c8e568e55a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:3b00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4e:05:0e:16:4e:1e:aa:f1:59:69:09:11:79:39:e4:58:34:
         82:c9:2d:d9:ba:2c:b2:cf:4e:30:19:cc:4d:a5:cf:ec:bd:aa:
         5d:d2:e8:44:a8:cb:7d:f1:a1:d7:f3:4d:a3:15:05:6f:2a:4f:
         21:e5:23:b5:a9:7b:af:88:27:64:83:d9:a0:94:00:ab:75:59:
         90:e5:9f:8e:cf:6c:bc:6e:44:9e:6c:1f:41:10:1e:f8:69:f4:
         25:95:a4:eb:94:cc:c1:33:f6:1b:64:4b:83:98:26:e9:2c:51:
         9d:50:1e:78:b7:f4:8f:a9:3b:31:e4:ea:8a:5f:c4:73:7e:81:
         f9:56:f1:73:0a:df:34:a4:c5:34:f5:2d:2b:e7:cc:3d:ab:5e:
         d4:e3:19:00:3b:4b:f9:c9:02:dc:e5:75:af:6d:42:73:e7:f1:
         0f:f2:bb:ee:86:ac:e2:3e:9f:89:a1:c1:4b:88:2a:4a:11:ff:
         8f:27:f5:ba:d8:4f:a0:41:3a:7e:b8:23:a4:4f:59:ca:6b:24:
         cb:b6:f6:5b:4f:63:11:8c:a1:45:7c:41:f5:17:dd:0e:b6:08:
         2f:3a:66:f8:2b:c8:00:78:10:8c:2f:0b:99:a6:b4:b4:a8:3f:
         d7:96:8a:c8:82:62:64:b5:27:ec:04:d8:8a:95:52:0e:7b:28:
         c7:e6:0b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:26:36 2026 by rpki-client