Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/950af8a1-625a-3c18-bc85-72f54cb8dbc7.roa
File:                     950af8a1-625a-3c18-bc85-72f54cb8dbc7.roa (raw, json)
Hash identifier:          2v96NT9m1zfovxDyr62yrHwaoGhsyoxEMBb0RZLS5Zw=
Subject key identifier:   87:3C:76:E6:65:C0:5B:BC:E9:37:9E:68:04:27:15:BB:61:8A:C7:02
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584EA795C69A4BB05A5A5FB1C140
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/950af8a1-625a-3c18-bc85-72f54cb8dbc7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     394089
IP address blocks:        2606:f4c0:d080::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:c6:9a:4b:b0:5a:5a:5f:b1:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=35761d02-5a6e-4633-a155-d1b57f8e8ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bb:90:09:6c:b0:89:02:4f:01:4a:f1:24:19:
                    d1:56:4e:a8:3a:25:c4:05:0c:81:83:91:ba:60:db:
                    17:38:7e:36:7f:6a:b7:5d:71:89:8e:66:52:75:4d:
                    36:52:d7:76:5a:1e:1c:88:5e:e4:88:c7:f4:47:7e:
                    5f:a4:a6:8e:1d:19:f9:21:02:ec:9f:24:b8:ab:c1:
                    c6:b2:e8:3b:48:ef:e0:02:33:f6:08:e8:6c:f4:f0:
                    d3:2e:8b:8b:63:b4:b6:6b:c5:f5:b1:00:da:d3:16:
                    da:03:a7:f5:e4:fa:18:c4:b6:7e:25:d7:96:71:ce:
                    37:6c:80:10:12:bc:b2:be:57:39:44:9e:cf:1e:56:
                    bf:8b:1f:7b:7f:8b:7f:c7:f9:25:e9:d6:aa:df:b2:
                    89:e0:4a:e2:cc:41:ed:6a:84:30:ef:bb:41:7b:cd:
                    6f:da:42:6e:23:6c:15:c5:fd:e9:dc:4c:55:ab:34:
                    c3:bb:9b:ba:8e:21:d6:6c:c0:6f:19:95:2c:4b:c8:
                    f8:45:df:84:0c:7e:59:99:7c:8c:df:be:1b:74:77:
                    68:d7:bc:48:d7:2a:75:f6:dc:50:45:52:ab:a2:2c:
                    13:85:50:a9:c4:8b:dc:16:be:28:c5:42:5a:0d:9e:
                    79:15:1b:03:91:b2:ef:56:a2:47:bc:52:cd:a8:e8:
                    51:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3C:76:E6:65:C0:5B:BC:E9:37:9E:68:04:27:15:BB:61:8A:C7:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/950af8a1-625a-3c18-bc85-72f54cb8dbc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:d080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0a:71:82:20:ed:b5:e6:03:ff:8c:b3:77:7a:1d:66:81:36:
         1a:11:29:31:ef:e3:5b:c2:4d:e2:cf:58:9e:96:b1:92:60:32:
         3a:0d:aa:2f:71:ec:11:a7:3a:86:47:44:ac:dc:4a:4c:0c:6f:
         0a:a1:40:2e:65:fd:a5:e0:fa:3a:3f:4c:be:eb:0f:cd:d1:2c:
         6a:94:06:64:48:17:18:f5:46:80:cd:ba:ae:69:0c:7b:01:6b:
         1b:77:73:a3:9a:ad:15:ae:7c:80:6a:3a:c2:5b:8b:dc:b3:96:
         87:12:d1:3a:44:09:70:fd:ef:57:5c:86:6a:9a:32:53:06:80:
         d3:8b:f8:a1:db:76:b5:a3:9c:80:85:84:6a:24:ae:6d:5e:dc:
         85:fe:d4:eb:7f:99:de:8f:1d:36:62:7f:40:15:14:d7:93:8e:
         07:e9:88:0a:89:9f:e6:bf:24:9b:88:41:89:ae:37:dc:6d:1f:
         8f:08:6c:82:80:8a:16:0f:e1:a6:20:2a:36:c1:60:46:df:c1:
         30:60:b8:6b:b8:d6:71:ee:02:b8:6a:47:73:3f:8d:51:42:15:
         20:32:6f:04:5c:42:00:73:9f:b2:ac:f7:cc:7e:3a:f6:f7:6b:
         5d:e2:64:3e:80:9d:41:01:47:ad:be:d5:a5:30:0a:59:51:78:
         ae:54:8c:37
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nlcaaS7BaWl+xwUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzU3NjFkMDItNWE2ZS00NjMzLWExNTUtZDFiNTdmOGU4YWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkruQCWywiQJPAUrxJBnRVk6oOiXEBQyBg5G6
YNsXOH42f2q3XXGJjmZSdU02Utd2Wh4ciF7kiMf0R35fpKaOHRn5IQLsnyS4q8HG
sug7SO/gAjP2COhs9PDTLouLY7S2a8X1sQDa0xbaA6f15PoYxLZ+JdeWcc43bIAQ
Eryyvlc5RJ7PHla/ix97f4t/x/kl6daq37KJ4ErizEHtaoQw77tBe81v2kJuI2wV
xf3p3ExVqzTDu5u6jiHWbMBvGZUsS8j4Rd+EDH5ZmXyM374bdHdo17xI1yp19txQ
RVKroiwThVCpxIvcFr4oxUJaDZ55FRsDkbLvVqJHvFLNqOhRtQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIc8duZlwFu86TeeaAQnFbthiscCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvOTUwYWY4YTEtNjI1YS0z
YzE4LWJjODUtNzJmNTRjYjhkYmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgb0wNCA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABwKcYIg7bXmA/+Ms3d6HWaBNhoRKTHv41vCTeLPWJ6WsZJgMjoN
qi9x7BGnOoZHRKzcSkwMbwqhQC5l/aXg+jo/TL7rD83RLGqUBmRIFxj1RoDNuq5p
DHsBaxt3c6OarRWufIBqOsJbi9yzlocS0TpECXD971dchmqaMlMGgNOL+KHbdrWj
nICFhGokrm1e3IX+1Ot/md6PHTZif0AVFNeTjgfpiAqJn+a/JJuIQYmuN9xtH48I
bIKAihYP4aYgKjbBYEbfwTBguGu41nHuArhqR3M/jVFCFSAybwRcQgBzn7Ks98x+
Ovb3a13iZD6AnUEBR62+1aUwCllReK5UjDc=
-----END CERTIFICATE-----
Generated at Sat Sep 5 11:14:46 2026 by rpki-client