Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d936b87-74d9-3235-8324-e15dad7db581.roa
File:                     6d936b87-74d9-3235-8324-e15dad7db581.roa (raw, json)
Hash identifier:          RkGP8kJv89r4Xk6AQGBIVv4ld/p1tsRJ//C3g3l1lLA=
Subject key identifier:   69:9A:75:C7:B9:43:8C:EE:B8:87:B1:7E:38:71:F3:AF:B2:DC:66:27
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E4F1F3E221D3334CB0F6E8640
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d936b87-74d9-3235-8324-e15dad7db581.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     22773
IP address blocks:        2001:579:2434::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:3e:22:1d:33:34:cb:0f:6e:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=2da7a56e-0bc7-4c68-8b45-bc0eb30a1b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:f3:0e:9d:f4:f5:84:02:28:87:30:ca:94:
                    eb:51:d6:00:93:01:60:a1:33:b0:e3:3f:95:05:12:
                    f8:3e:e3:a7:ed:5a:59:3e:7c:d3:99:98:f9:b0:1b:
                    dd:5b:1d:13:a4:fa:1a:d6:80:17:b7:93:9a:9c:c4:
                    c4:93:14:47:35:30:62:c2:9f:56:07:78:a8:48:17:
                    4e:fc:53:04:36:19:72:01:52:d6:b3:9b:b3:57:e4:
                    c0:3f:15:7b:a5:db:5e:7f:9b:a1:6c:44:36:81:b3:
                    16:30:51:30:e3:3f:e0:74:be:fe:05:98:59:4d:0d:
                    5f:50:14:b8:d2:99:51:f7:ca:8a:4c:dd:0e:f0:55:
                    ee:ee:33:8b:a6:c5:73:70:44:30:73:c1:c5:b8:5e:
                    f0:9d:39:ab:e7:2f:c7:8f:33:37:88:5d:25:6f:09:
                    79:9a:68:6a:1a:1e:00:b7:f4:88:77:f1:7c:1c:95:
                    c0:5b:14:99:95:30:22:ae:91:b3:96:8a:b7:c7:25:
                    f0:60:cf:87:31:27:fa:3a:8b:a6:b2:73:d7:77:cc:
                    fa:a2:98:1d:92:cc:a9:b8:72:5f:53:e4:4e:d4:ef:
                    c0:91:cf:97:50:b2:59:0a:9f:75:96:a4:b7:7a:98:
                    ff:f7:02:8b:9b:40:f6:a9:fd:7d:a9:91:8e:39:50:
                    fa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9A:75:C7:B9:43:8C:EE:B8:87:B1:7E:38:71:F3:AF:B2:DC:66:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d936b87-74d9-3235-8324-e15dad7db581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:2434::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:93:bf:44:c6:eb:24:fb:97:8a:f7:00:cf:13:b2:fa:73:e0:
         6d:6b:ff:13:95:97:81:a2:4b:74:39:4d:0c:97:c2:6c:cb:c0:
         b9:d8:f8:d4:39:54:00:da:b0:0a:d6:8f:ab:fe:ab:8f:e6:a1:
         08:e7:1f:e9:e7:f8:7f:a6:ef:bf:15:13:2d:4a:c4:c6:04:db:
         c9:ae:95:b0:e8:89:14:4a:e4:a4:7a:fc:35:6b:87:b2:49:a2:
         0b:76:34:ec:ae:a7:8d:91:14:9d:2f:0d:d2:c5:07:a1:e6:c1:
         e3:98:44:06:03:b6:09:90:c4:59:37:33:69:74:6c:a5:8e:6b:
         bf:4a:37:f8:39:ea:ef:f5:9a:ea:8c:43:34:f8:6b:cc:52:80:
         8d:78:16:e2:9e:07:c7:12:af:03:7d:8b:d7:f7:a8:10:00:39:
         93:1f:2a:cf:d9:7a:db:ef:2a:9b:e0:15:70:ac:32:1d:03:43:
         84:21:59:77:27:e6:58:b4:e7:e3:07:8c:a5:7e:08:7c:d7:fb:
         48:a9:2e:9c:58:89:36:19:ea:1e:26:f8:e1:6b:58:ec:8e:14:
         5a:97:15:fb:d9:18:94:cc:86:43:de:d3:2b:44:ef:4f:0c:60:
         83:14:cb:40:5e:3d:09:af:6d:14:fe:38:6b:63:b0:31:5c:f4:
         76:f5:7d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:39:03 2026 by rpki-client