Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1dce50a-bd82-3c71-983c-d5dd054be337.roa
File:                     c1dce50a-bd82-3c71-983c-d5dd054be337.roa (raw, json)
Hash identifier:          DJkr4jfIwrPTZHVmwiCE8tq82/zAWJyDeN8x2tltGX8=
Subject key identifier:   73:FE:0C:BA:89:C1:15:E5:3F:89:54:34:1C:A1:4E:CF:FB:BA:64:EE
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E79CF1FC61DF98D62CBF7C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1dce50a-bd82-3c71-983c-d5dd054be337.roa
Signing time:             Thu 19 Jun 2025 14:46:19 +0000
ROA not before:           Thu 19 Jun 2025 14:46:19 +0000
ROA not after:            Wed 17 Sep 2025 14:46:19 +0000
asID:                     22773
IP address blocks:        2600:8800:540c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:79:cf:1f:c6:1d:f9:8d:62:cb:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:46:19 2025 GMT
            Not After : Sep 17 14:46:19 2025 GMT
        Subject: CN=af53a8ab-8629-4735-8f1b-d07c4207b4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:2d:ea:98:be:3e:fa:5d:94:41:29:c2:c9:
                    da:1e:9f:b5:71:e1:b1:d6:64:6c:d4:d3:74:71:19:
                    a2:b7:6c:d5:dd:5f:5e:08:0a:92:b4:5f:32:8b:a3:
                    7d:31:30:86:3d:e8:7b:59:76:22:f5:0a:72:26:3d:
                    f8:f8:a8:b0:7b:37:3f:f1:f5:ac:c0:f4:e5:42:0b:
                    96:a3:47:51:cd:3a:80:7f:81:f4:11:a3:db:84:e1:
                    a8:a2:02:55:a4:9e:28:9d:e7:54:97:3e:77:bf:57:
                    f8:dd:3e:5c:25:9a:85:ae:82:bb:c1:a0:51:2a:62:
                    99:40:d0:b3:23:85:70:52:b8:b2:81:a9:b8:4f:c7:
                    43:1d:a7:0b:59:13:d1:ce:b7:b5:e5:d3:89:c5:26:
                    1e:57:97:56:a7:6a:34:04:a7:37:31:1c:44:5b:db:
                    98:66:e4:a0:eb:2a:ae:6f:f7:82:da:cc:e5:75:fd:
                    ee:3c:1e:84:bb:5d:ce:8b:c4:55:8c:2e:83:5e:a0:
                    69:20:e2:19:26:10:d4:33:58:21:3a:57:dd:83:58:
                    b8:0c:78:3d:fe:df:e5:36:e8:35:c0:62:89:99:31:
                    9d:ef:a8:1f:27:42:12:b7:0c:f7:d1:9b:e5:93:2e:
                    dc:68:5d:96:6f:82:31:69:10:91:a8:15:42:bd:ba:
                    70:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FE:0C:BA:89:C1:15:E5:3F:89:54:34:1C:A1:4E:CF:FB:BA:64:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1dce50a-bd82-3c71-983c-d5dd054be337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:540c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:fe:6e:45:08:a3:8e:1c:e8:2b:93:39:68:4c:1b:83:9f:22:
         6b:6e:91:24:5b:ab:a5:a5:9a:9a:e2:10:1b:54:7c:a1:25:ea:
         87:4a:8f:5f:e9:00:eb:09:8c:3f:71:40:29:84:a2:a8:20:fd:
         77:3d:fd:fe:89:43:d8:0e:13:b5:b7:9d:ef:f6:48:13:14:ad:
         70:54:af:da:3d:76:c5:01:da:1d:d4:cf:fc:63:6e:2e:19:97:
         3a:59:13:97:09:a6:e7:1f:d0:04:ba:ea:be:15:1f:3a:62:42:
         1c:29:a2:27:99:57:b9:98:f8:93:51:4c:fa:60:f2:b6:5c:ed:
         7c:a2:f5:a1:74:4f:e8:93:c1:6f:1a:3d:99:07:fd:4e:db:69:
         ca:6b:a4:80:c5:75:ab:9d:4a:11:f5:d6:a5:b0:75:12:87:85:
         ac:24:3e:7c:d3:1f:50:1c:3e:7e:2a:a5:c3:c9:33:a2:87:cf:
         a8:a8:dd:ae:71:47:0a:7e:9d:9b:04:40:e5:d2:5f:4f:ee:2f:
         56:31:a6:f0:98:d6:db:16:0f:ef:e2:f1:70:23:b6:30:57:b9:
         ce:0e:8c:cd:3f:e3:2c:b4:21:86:83:65:5e:b3:f5:c5:84:56:
         b6:54:13:56:16:94:60:d8:dc:06:a5:3d:7d:e8:94:e8:d1:d7:
         c1:22:e2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:10:25 2025 by rpki-client