Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c3c7a749-89c2-36db-9561-0a3c154d4f31.roa
File:                     c3c7a749-89c2-36db-9561-0a3c154d4f31.roa (raw, json)
Hash identifier:          iyK7JB7TAGd1eMbQfDUqf5PI1Dc5Ajsv8d9Fus8uvg4=
Subject key identifier:   91:10:97:15:37:93:63:AD:F0:0F:67:23:C2:8A:7E:F6:4B:BD:12:29
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D70B918FA15AF502AF68133C0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c3c7a749-89c2-36db-9561-0a3c154d4f31.roa
Signing time:             Wed 08 Apr 2026 17:05:04 +0000
ROA not before:           Wed 08 Apr 2026 17:05:04 +0000
ROA not after:            Tue 07 Jul 2026 17:05:04 +0000
asID:                     396982
IP address blocks:        2606:f4c0:d000::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:b9:18:fa:15:af:50:2a:f6:81:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr  8 17:05:04 2026 GMT
            Not After : Jul  7 17:05:04 2026 GMT
        Subject: CN=37c061cd-6e93-4862-8883-bee223b6e1bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4f:fa:32:5a:a3:10:cf:32:28:b3:ab:24:ea:
                    62:6b:f2:cf:ac:ed:c8:e0:df:f8:a5:e4:35:ff:43:
                    2a:5d:66:ca:64:80:7f:9a:1f:8d:6f:0e:1f:c7:9b:
                    1a:e6:95:77:65:3e:ba:15:dd:d8:1e:fa:e8:17:bd:
                    dc:6a:2c:b5:ea:ba:4f:2b:41:73:e6:10:6a:5e:22:
                    05:8f:8f:6c:9c:bc:41:30:04:3b:c2:1e:41:25:45:
                    de:b7:bf:fa:8f:96:c0:2b:26:04:6b:64:37:59:f0:
                    ea:da:fd:07:1f:fe:98:cd:8f:e6:19:12:2b:95:ee:
                    c5:cf:66:a9:dd:a4:87:0d:d3:f4:70:99:1f:ec:d2:
                    cb:b4:36:d4:09:bb:a1:b0:5a:b3:0c:8c:17:b3:4f:
                    9b:3b:f5:5d:f2:ba:8b:8c:54:42:ec:cc:e9:b0:c3:
                    6d:02:72:d0:ae:68:15:bb:75:69:30:48:84:0f:40:
                    0b:8e:de:5f:54:af:36:57:cb:9b:0b:ab:04:99:e8:
                    9e:df:04:b9:a8:59:05:68:31:c0:df:e5:59:5e:88:
                    af:e9:b3:89:3a:a0:15:06:a6:72:99:11:eb:5b:37:
                    4f:22:be:b9:69:98:e5:7f:91:a8:27:d8:92:04:88:
                    cc:f5:b0:2d:83:65:5b:6a:26:6d:05:8c:04:05:eb:
                    90:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:10:97:15:37:93:63:AD:F0:0F:67:23:C2:8A:7E:F6:4B:BD:12:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c3c7a749-89c2-36db-9561-0a3c154d4f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:d000::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:1a:af:87:55:40:b9:5a:70:1c:cb:15:2b:74:19:91:09:16:
         52:29:e1:1c:d1:94:c1:61:37:cb:aa:49:b7:b2:66:2e:e9:e4:
         f7:3e:d0:96:a8:8a:8e:9e:b8:94:5f:0e:5d:c9:ce:b2:26:9b:
         45:c9:14:6b:b1:08:fd:f1:c3:c2:ce:26:83:45:bd:e8:32:fb:
         41:1e:5a:05:9b:39:64:56:40:9a:32:00:70:d3:82:f2:53:3e:
         0e:11:84:d0:77:29:53:c9:17:32:5b:97:fa:5e:70:5a:80:46:
         2a:b2:97:07:c5:d8:99:55:54:f6:7e:de:ee:a4:4f:69:fe:8d:
         87:91:d3:d6:37:5f:08:5e:10:14:8d:1c:81:9f:16:97:d3:15:
         33:64:a2:5a:8e:21:51:d7:34:85:19:19:94:28:e8:65:22:38:
         ab:62:b2:83:d2:e3:1b:22:75:da:86:15:dc:22:48:c6:08:47:
         02:80:38:00:18:cc:0f:d0:ab:ea:b5:1e:50:c6:b6:87:ab:5c:
         68:8b:95:e4:cb:e9:2f:aa:5f:3c:b5:a5:f3:fc:2c:86:5d:bb:
         fc:4b:41:a8:e2:f0:73:b5:26:7f:fa:20:a2:ae:e2:bc:5d:6e:
         36:3c:7e:d3:1d:79:16:fc:29:48:b5:03:29:32:4e:b4:66:da:
         60:2d:79:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:37 2026 by rpki-client