Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f994da4d-bd71-383c-8bb9-a160d554ea9c.roa
File:                     f994da4d-bd71-383c-8bb9-a160d554ea9c.roa (raw, json)
Hash identifier:          9SMC9Om6TsAFfnks+SF7Xo8jDEu3q4eENYAWc112Qto=
Subject key identifier:   C3:35:61:F7:44:C7:FD:CD:BA:DC:84:D9:26:CC:6D:3A:9E:CD:A1:C6
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584CA8C19928F9B3DDEDBBB67380
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f994da4d-bd71-383c-8bb9-a160d554ea9c.roa
Signing time:             Tue 27 Jan 2026 02:00:29 +0000
ROA not before:           Tue 27 Jan 2026 02:00:29 +0000
ROA not after:            Mon 27 Apr 2026 01:00:29 +0000
asID:                     2763
IP address blocks:        2606:f4c0:c000::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a8:c1:99:28:f9:b3:dd:ed:bb:b6:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jan 27 02:00:29 2026 GMT
            Not After : Apr 27 01:00:29 2026 GMT
        Subject: CN=e39d316d-150f-44f5-b8c5-6596b3edcd4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:70:00:f9:af:46:29:04:7f:d5:f2:50:93:
                    f8:2d:f0:9e:dd:44:47:37:60:7c:0b:9f:b6:11:d5:
                    e4:c1:f3:e2:98:f4:86:28:cf:4b:1c:cc:83:2e:f5:
                    d7:1c:cb:f2:7c:eb:22:df:95:64:53:03:bb:6f:7e:
                    e3:b5:f1:9e:88:78:4d:3f:b9:12:af:e3:76:15:c1:
                    61:f4:26:76:59:81:88:a4:89:6c:b7:11:96:83:55:
                    7e:89:ec:67:f9:ce:68:78:0a:76:0e:89:f9:7a:73:
                    cb:ce:54:6b:e5:17:a7:bd:01:c6:bf:79:e3:45:ba:
                    45:c3:2b:70:3b:10:53:03:38:1d:1d:50:0b:62:74:
                    36:74:b9:8c:c0:2d:02:cd:c6:8e:19:69:9a:45:fe:
                    7a:2b:64:d0:8e:17:a8:be:d2:75:95:8b:22:49:e7:
                    c4:92:5f:ac:9a:76:a7:2a:24:84:8d:ca:56:92:be:
                    5b:f7:8b:43:08:7d:cb:81:b2:e4:9b:40:42:ff:86:
                    8a:dd:f6:31:65:e0:71:c9:e9:4d:17:0f:a3:0b:f1:
                    a9:bd:af:d2:ec:0e:88:cf:7a:76:23:a6:52:d9:2f:
                    f2:2a:34:6d:9b:c5:bc:bd:66:32:7c:81:38:1a:00:
                    7f:5b:34:62:f0:1f:49:d7:dc:2d:08:70:56:f6:14:
                    91:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:35:61:F7:44:C7:FD:CD:BA:DC:84:D9:26:CC:6D:3A:9E:CD:A1:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f994da4d-bd71-383c-8bb9-a160d554ea9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:a1:df:38:44:73:df:9b:1a:5b:cd:8b:b5:b6:3b:7a:92:e9:
         3e:0a:85:7e:0e:7c:ab:d1:48:c0:7a:62:f8:48:68:76:4b:c8:
         74:2f:01:d4:47:1c:d8:0c:15:7f:43:d8:c5:ad:73:b4:b5:12:
         4b:a4:6f:8a:e3:16:9a:28:d9:55:84:6e:95:34:23:30:07:d4:
         69:3f:59:46:7a:c5:fb:7f:9d:99:1a:07:98:b6:a5:71:d2:f3:
         87:a5:3a:16:b6:85:df:8c:91:8d:f0:f8:d7:a8:fc:d2:06:96:
         ec:14:e4:2b:2a:e5:7c:75:d6:56:6f:af:13:82:49:ce:8c:85:
         7e:cd:d1:95:80:e1:12:a3:5b:b7:b6:31:c3:c6:72:f7:fc:32:
         58:1c:61:cd:cc:49:fb:e0:d2:61:8a:79:26:4e:7e:44:ce:76:
         cd:c0:12:71:ba:cb:6e:ea:b9:a1:5d:80:23:95:6b:a2:17:63:
         52:3a:0f:48:27:0a:3c:97:cc:56:fb:f8:90:80:51:8a:59:39:
         91:52:79:22:c0:66:25:38:38:95:c2:88:33:8a:4b:a6:ab:eb:
         d3:96:02:b5:30:be:86:7e:c7:60:3f:33:9d:b8:31:a6:1d:71:
         c2:e8:a5:8f:14:38:b7:c9:8c:fa:e5:a8:55:bd:19:ac:48:4a:
         e5:e8:15:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:46:55 2026 by rpki-client