Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6416da21-746a-32f9-919e-2a0333b39ad8.roa
File:                     6416da21-746a-32f9-919e-2a0333b39ad8.roa (raw, json)
Hash identifier:          wyQtoB+PVtbbCGqA5VLZtAgtYt4pRgwxRiJOIW1b3FM=
Subject key identifier:   21:21:52:CC:59:75:07:EA:4D:44:BC:80:3D:C9:D3:19:8F:B8:C4:1E
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D895FEB342BDEE3494C8AEF80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6416da21-746a-32f9-919e-2a0333b39ad8.roa
Signing time:             Fri 17 Apr 2026 13:00:31 +0000
ROA not before:           Fri 17 Apr 2026 13:00:31 +0000
ROA not after:            Thu 16 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        2606:f4c0:c000::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:89:5f:eb:34:2b:de:e3:49:4c:8a:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 17 13:00:31 2026 GMT
            Not After : Jul 16 13:00:31 2026 GMT
        Subject: CN=bce80911-7334-4912-9f95-6920e5e334f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c2:33:17:87:d3:e2:d2:d5:a3:eb:71:dd:c8:
                    27:05:32:3c:17:03:f0:c5:ee:dd:4b:04:9e:62:eb:
                    b8:45:82:8c:07:ec:91:72:59:4f:33:8a:05:93:93:
                    42:0b:35:3e:f4:2c:8c:3d:c1:14:0d:71:92:d9:87:
                    3d:3d:27:f9:6e:2f:d5:c5:5b:fb:0c:5a:a6:fe:33:
                    85:4a:28:d1:8e:4a:76:33:da:90:21:9d:53:b2:c7:
                    ad:f1:0d:b4:b4:80:90:aa:fb:20:5f:01:92:be:8d:
                    79:d2:40:4e:f9:b4:db:76:71:58:0c:a7:a9:85:39:
                    92:7a:da:e9:f7:c6:fe:da:a4:b8:4d:55:8c:76:c7:
                    3d:f8:94:ba:a0:34:0e:90:8f:a0:ef:c1:99:da:0f:
                    96:1e:27:7e:0a:e1:23:c5:b3:67:09:59:67:0a:4e:
                    69:a6:9e:30:28:19:68:98:c9:ab:fc:15:17:9a:fc:
                    5e:c6:77:b1:19:de:5e:96:f3:6f:0f:42:01:b6:0d:
                    83:d1:b0:14:6e:a3:cb:a1:64:db:0c:0e:9d:45:94:
                    86:f8:6f:c9:9f:cc:74:d6:f6:6b:98:c3:40:04:05:
                    b2:05:53:34:df:92:fe:44:65:6d:94:2a:e8:85:ee:
                    5a:e3:99:93:c0:6e:a1:83:29:e6:7e:cc:06:ca:32:
                    9c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:21:52:CC:59:75:07:EA:4D:44:BC:80:3D:C9:D3:19:8F:B8:C4:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6416da21-746a-32f9-919e-2a0333b39ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:bf:a5:b6:4e:0b:06:c6:70:5d:d1:80:85:e1:13:4c:3f:43:
         c3:e2:25:27:46:d1:56:15:9c:cc:e3:4c:ec:14:64:7a:48:be:
         20:68:95:d3:59:95:ac:4d:ac:dd:d0:2c:bb:b6:36:75:7f:d1:
         fb:b3:f8:c7:c4:63:3f:f3:b7:31:dd:f5:98:33:5d:1b:e8:17:
         65:71:c2:65:1e:31:af:f9:b4:c9:c7:58:50:5a:6d:33:84:0d:
         7c:7d:c2:c4:3e:1a:35:9f:3e:07:8f:ab:49:b8:1e:42:21:f7:
         38:52:7f:6f:a8:a1:fb:f7:c0:30:ab:06:c6:65:b9:16:0a:71:
         b7:ed:c9:ce:47:94:4e:67:1f:51:4d:4d:cf:32:33:4b:27:1a:
         cf:67:cc:a7:6a:7b:62:37:fa:f7:3c:e9:b2:31:3d:ef:26:9d:
         c5:6d:c8:2e:b9:04:f7:21:cb:0b:e4:00:b9:6a:5f:5f:27:3c:
         f5:86:8c:90:fc:2c:4c:ba:2e:af:44:ce:35:08:aa:93:1c:99:
         63:7d:63:84:2b:b2:d9:23:a9:7a:51:80:d7:e5:2d:e5:d2:70:
         7f:ec:e8:14:7f:a3:9f:f8:2a:0b:f9:a8:27:5f:67:24:7b:eb:
         58:4f:6f:f7:b3:a7:79:ae:35:ac:25:12:e4:d2:5d:da:cd:4d:
         0b:0b:d5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:14:17 2026 by rpki-client