Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/b370a869-d64e-39ec-a19a-54bd9b81107b.roa
File:                     b370a869-d64e-39ec-a19a-54bd9b81107b.roa (raw, json)
Hash identifier:          jlERkT0wFp5zsOdf/4CuF8+8Jm7ovPMmXkQ+/HpQ9jg=
Subject key identifier:   11:E9:84:B3:C0:EE:F7:7F:CD:B3:C8:94:98:D3:82:18:A3:C1:20:3F
Certificate issuer:       /CN=90084646-f74e-42c1-9557-3764d36b8bb6
Certificate serial:       010D0C9F4328584CDDCCEF690AFC2681E4528BC0
Authority key identifier: 31:62:95:A9:A8:FD:F7:CA:B2:C2:89:BC:47:64:7D:FC:1E:A0:7D:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/b370a869-d64e-39ec-a19a-54bd9b81107b.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     396238
IP address blocks:        2605:9fc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:ef:69:0a:fc:26:81:e4:52:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90084646-f74e-42c1-9557-3764d36b8bb6
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=54586824-af1f-4816-84ec-f453f5d38d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:4d:e9:49:33:4c:c6:f6:b0:f8:19:db:75:
                    ea:e5:64:f7:2d:a4:95:fb:4f:9e:b7:e6:2f:dc:2d:
                    86:2e:e5:23:30:68:71:ea:be:d4:be:af:78:65:50:
                    06:6f:b1:95:48:88:8b:18:c8:f9:4d:10:c3:f3:89:
                    31:79:24:d3:77:b0:e0:87:c9:49:a8:da:5f:6b:5d:
                    6b:e5:80:08:88:4c:69:e7:87:9d:28:eb:72:fa:e9:
                    a1:05:51:1b:79:df:21:18:70:43:83:c8:6a:fb:b1:
                    0b:ff:64:35:10:6b:e3:37:45:51:ec:c8:ca:f4:82:
                    23:5d:f5:c7:08:29:fb:a4:59:91:52:fc:90:f1:dc:
                    a5:fe:77:be:a0:c1:28:82:93:c1:32:02:1e:f2:ef:
                    5b:b3:f6:7e:3e:e3:20:5b:5a:1c:ba:8c:4a:f8:29:
                    3b:8f:f7:2a:59:7c:d2:68:6b:a8:4a:24:ae:a3:79:
                    d2:20:3d:6a:e3:6f:a6:4a:97:7e:cd:05:49:ea:6f:
                    f9:1e:1f:0a:b4:3f:a2:bc:26:fe:e6:47:e2:45:3f:
                    82:1e:95:50:5a:fe:d9:24:16:2c:6d:2d:c7:33:66:
                    d7:9d:e0:0f:e9:1b:25:96:6f:ac:2a:db:3f:92:a4:
                    f2:76:8f:53:d6:7f:45:7c:57:11:23:82:a3:6f:66:
                    6c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E9:84:B3:C0:EE:F7:7F:CD:B3:C8:94:98:D3:82:18:A3:C1:20:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/b370a869-d64e-39ec-a19a-54bd9b81107b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.crl

            X509v3 Authority Key Identifier:
                keyid:31:62:95:A9:A8:FD:F7:CA:B2:C2:89:BC:47:64:7D:FC:1E:A0:7D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:5c:27:69:5f:ee:9f:5e:6c:f7:37:e1:66:62:63:fc:3b:ca:
         be:33:e0:27:29:8d:ee:e4:70:c3:d1:1b:21:7f:bb:cd:ce:be:
         6e:e8:4c:83:3d:4f:58:ff:d1:2b:f0:fc:29:38:52:a6:40:62:
         6e:56:6a:db:45:74:71:cc:fc:22:91:7a:41:99:5a:1e:dd:4a:
         b4:ed:d7:53:cb:7d:6a:48:b0:24:97:cb:e5:b9:c0:15:0e:b0:
         09:59:52:00:b7:37:bf:61:09:0e:26:5a:70:64:68:e9:7d:fd:
         31:c3:6d:02:a5:0c:fb:9b:7b:d4:c9:95:92:31:5e:cb:35:7b:
         df:06:db:35:b4:72:1f:9a:22:c9:af:2c:4f:aa:08:dd:c9:a5:
         a3:99:19:51:86:35:4f:2b:6b:7e:a7:9a:32:a6:d6:72:08:55:
         3d:c3:40:91:22:24:2e:62:7c:11:39:b6:6a:55:ab:dc:ac:d6:
         e6:d1:b8:4f:a2:99:94:2b:30:e3:a7:fc:b6:12:32:eb:63:b8:
         79:79:0f:97:0c:ff:df:d4:8e:b5:cf:8d:e8:9c:57:59:84:cd:
         b3:07:94:a0:df:32:5b:e8:4a:df:3a:f3:9d:88:03:e7:53:14:
         74:03:f2:b1:8b:de:64:c7:9f:b5:70:41:ef:14:4a:7a:c3:ef:
         02:85:96:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:57:09 2026 by rpki-client