Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/16e258ec-06e2-3e40-90c8-f78e813ff236.roa
File:                     16e258ec-06e2-3e40-90c8-f78e813ff236.roa (raw, json)
Hash identifier:          QzFk5rCHz3/ZowhqzpjTGzaP7LX8AK8IX1Gh+fAQ78M=
Subject key identifier:   38:36:B6:C7:51:4F:54:00:04:AF:AE:87:32:34:1E:50:C8:92:94:ED
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584DD35B01C3D51423BAD8A95500
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/16e258ec-06e2-3e40-90c8-f78e813ff236.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     32133
IP address blocks:        2606:8e80:800::/37 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:01:c3:d5:14:23:ba:d8:a9:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=5d477b57-9651-4d91-9e66-14b366871891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:69:c9:5e:28:1a:3d:e2:81:db:4e:0c:2d:22:
                    cc:46:df:fa:b8:30:dc:91:10:c4:e2:9b:08:f5:31:
                    3c:a8:82:56:33:aa:5c:75:10:76:69:1a:ec:50:ee:
                    c4:51:5f:e5:37:4b:62:12:08:b0:a3:69:f7:03:c0:
                    49:66:a5:a3:f3:6a:40:9c:eb:29:2b:dd:86:36:87:
                    55:aa:7b:2a:b4:ac:c6:88:4e:47:0c:1f:37:c5:18:
                    80:3e:e2:f2:1c:26:6e:b1:bd:b5:12:ac:ce:7c:39:
                    ad:8b:0b:e5:c9:78:8b:8e:be:07:06:fc:9a:c0:1c:
                    33:fa:c4:ef:5d:5f:20:b8:47:30:f9:9f:d8:a9:31:
                    bc:94:96:ab:c2:42:4d:5c:b2:02:54:b5:5f:ff:63:
                    02:4e:65:1f:7a:e7:d7:3e:86:3c:7c:92:e3:18:07:
                    6d:48:89:72:4f:e5:c2:4b:e7:63:5b:46:15:f2:35:
                    ba:cf:4d:b7:11:ea:29:63:81:21:3c:b5:42:47:d6:
                    8d:f9:86:ea:dd:b9:73:ea:e0:bb:a0:e9:46:f5:df:
                    bf:7e:b9:6d:e6:43:ca:1b:58:90:0d:41:00:3a:b7:
                    9c:db:f9:fd:a9:7b:e5:30:20:e3:01:5a:42:11:b4:
                    07:e8:90:b9:79:0d:f7:f3:85:2e:31:b9:a5:4d:f3:
                    90:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:36:B6:C7:51:4F:54:00:04:AF:AE:87:32:34:1E:50:C8:92:94:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/16e258ec-06e2-3e40-90c8-f78e813ff236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80:800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:49:3a:91:d9:58:8d:0a:bb:ea:f9:b0:cf:f7:9f:2e:71:41:
         71:9a:26:7e:45:7c:fd:46:c6:d8:a9:80:7e:86:c9:5c:b1:ae:
         bf:7b:89:40:9a:31:8f:b6:56:7c:93:10:24:06:92:9f:67:59:
         cb:a2:fe:f2:aa:c4:da:08:c0:63:a3:83:e6:3b:8f:c0:f9:54:
         d9:91:1e:de:f6:13:56:2d:62:db:bc:f3:31:da:b6:dd:58:33:
         de:85:9c:61:32:d6:76:8b:63:f6:eb:72:ac:09:0c:e0:e8:74:
         cf:3a:33:73:05:0c:4f:63:e8:1e:53:95:50:07:df:66:9e:8a:
         79:99:38:b6:c6:db:1b:dc:2d:87:21:77:8f:1b:55:dc:41:8f:
         4b:f4:ef:8f:fc:fa:7d:59:d0:c6:d1:67:6b:a1:3d:79:48:ad:
         c1:cd:b5:3b:52:e3:ba:97:ee:d4:79:4e:67:1b:0b:58:95:e3:
         47:98:16:38:73:76:bb:51:39:85:2e:6f:c2:7b:a2:5a:03:59:
         39:3d:77:27:a4:ec:04:d2:8e:c2:8e:ea:81:20:f3:64:89:30:
         1f:e5:e2:3c:0d:7e:62:bf:5e:8e:02:0f:c3:93:c1:5c:33:68:
         0c:1d:e5:f4:ac:94:ac:b0:a3:43:6a:6e:d5:6d:cf:67:3b:dc:
         85:06:f4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:38:13 2026 by rpki-client