Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa
File:                     9b2a0da3-5551-3cef-ab65-d40999076b92.roa (raw, json)
Hash identifier:          qhGhY8cM4Ejxg8F5BFkPat+3yBjeqMm0h4LvVT5/f9M=
Subject key identifier:   9C:5B:32:50:7F:FB:46:60:7D:C9:7E:2E:46:F6:B8:FF:F4:DC:5B:67
Certificate issuer:       /CN=3bfd8346-5f32-4973-b00f-6aa94c8ca720
Certificate serial:       010D0C9F4328584CDF324A9922CF20BD63B60D80
Authority key identifier: 61:99:39:67:76:A2:0A:A2:6A:AF:E6:CD:DF:15:1C:3A:A9:E4:FA:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     63351
IP address blocks:        207.90.254.0/23 maxlen: 24
                          2606:3180::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:4a:99:22:cf:20:bd:63:b6:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bfd8346-5f32-4973-b00f-6aa94c8ca720
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=7680c4b6-a743-4dbb-b162-6f2d1962ef75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:b7:b4:de:2b:1a:02:3b:35:fb:61:8b:fd:
                    e6:ff:1b:d7:e3:d9:3c:92:f1:b7:5e:fb:03:d4:7d:
                    f5:89:db:78:c7:bb:c1:bb:89:b6:55:c3:dd:d7:4b:
                    05:67:8b:7d:a3:46:29:a8:ad:ab:1f:0d:d9:36:1b:
                    9b:77:01:91:3b:03:6b:42:81:6e:e7:6f:74:a1:c9:
                    58:e6:21:7d:81:12:5c:3b:4e:f0:c4:aa:1e:c5:ea:
                    fa:1c:49:4b:36:61:c8:1a:72:69:20:4f:d2:1b:50:
                    70:c1:6d:15:cf:8d:5a:f6:07:1e:78:22:9f:99:95:
                    3f:52:be:96:91:a0:80:cd:24:c4:a9:d2:3c:49:28:
                    73:28:7f:5c:0c:e1:cf:85:3c:05:b5:56:85:df:4e:
                    6f:c4:b6:94:e4:cf:50:c2:21:2e:d8:f1:32:d4:4a:
                    07:47:ef:fe:55:e8:b6:66:f3:61:fd:67:1c:2f:fd:
                    fc:f5:2d:84:83:49:6c:f4:f5:9e:4a:0a:2a:d0:9c:
                    1f:2e:a1:2a:91:95:04:bf:20:82:66:73:a6:0f:78:
                    91:23:c1:4f:27:0d:e4:08:f2:da:a2:1b:d0:d7:d7:
                    59:ef:3d:6d:01:a6:82:d5:3b:a1:10:4c:40:66:e9:
                    45:ff:84:52:ce:52:ef:e4:ed:0b:4d:e5:6c:18:3c:
                    ad:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5B:32:50:7F:FB:46:60:7D:C9:7E:2E:46:F6:B8:FF:F4:DC:5B:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl

            X509v3 Authority Key Identifier:
                keyid:61:99:39:67:76:A2:0A:A2:6A:AF:E6:CD:DF:15:1C:3A:A9:E4:FA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.254.0/23
                IPv6:
                  2606:3180::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a0:e4:16:a2:ab:d1:2c:5c:72:8b:f1:57:26:0f:35:a7:b1:
         43:e1:ea:c6:91:3e:95:5f:4b:63:72:ef:8a:de:a7:cf:43:50:
         95:71:e4:e9:13:be:d1:36:6f:74:d5:2e:ea:9e:7a:a8:11:1f:
         fd:76:42:9a:56:18:d5:18:c7:23:99:1d:b0:95:8a:ea:48:2f:
         88:c5:26:41:47:2d:19:07:6d:a4:96:bf:a6:0a:3b:3a:dc:25:
         ae:2f:d2:8d:d3:0f:63:53:84:3d:50:33:62:be:3b:c0:e1:b5:
         74:5f:21:82:69:2a:1e:07:df:2e:36:23:14:d0:26:0e:fc:54:
         83:45:4e:08:35:9a:0b:49:67:04:a3:d0:b5:bd:e4:56:19:3f:
         9d:d1:19:86:06:c0:17:ea:16:6e:8f:cc:c8:3f:79:98:b7:2b:
         5e:c7:da:77:7c:63:92:f5:66:d3:49:b7:f3:04:37:c1:af:78:
         e5:71:e2:9c:31:b0:4b:2e:cd:4c:c6:14:d1:d1:d2:7c:44:fa:
         d7:ae:f1:6f:16:d0:9e:15:5e:ec:3e:db:b4:77:2c:d1:c2:d5:
         ea:06:c9:c6:39:28:0a:b1:4f:45:dd:76:de:ca:8f:c3:f8:76:
         5c:da:33:96:e3:72:e2:23:1b:5e:ae:40:ca:6a:0f:96:92:41:
         c7:e5:8c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:53 2026 by rpki-client