Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ea987b54-98cb-3303-96e9-5b09a1657e81.roa
File:                     ea987b54-98cb-3303-96e9-5b09a1657e81.roa (raw, json)
Hash identifier:          J7hpRBg+y3Oa/qiXcJyVoeWtLTgOSIfBj8KTnyrRc38=
Subject key identifier:   51:F6:E0:FF:9E:28:F5:ED:59:A5:E4:81:8E:85:6C:EB:1A:10:49:AC
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584EA7871A6E560B92E15A7AA080
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ea987b54-98cb-3303-96e9-5b09a1657e81.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396982
IP address blocks:        2606:f4c0:9000::/38 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:1a:6e:56:0b:92:e1:5a:7a:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0c3792f1-d233-4ade-ae08-ebd212164c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:e3:b3:2a:14:0d:58:7d:f7:ce:fa:77:c6:
                    22:e8:c3:75:ae:42:de:09:9c:a9:a9:f9:1e:55:e6:
                    d4:a0:c5:12:8c:21:21:58:02:1c:7c:14:23:0e:84:
                    fc:12:73:53:27:6c:c9:ac:69:77:65:a7:ae:3e:6b:
                    0c:aa:fc:19:43:ac:6c:f7:6c:d9:e7:a5:c9:36:88:
                    71:c6:64:e7:6c:e0:9a:54:ee:c2:f3:28:23:5f:79:
                    d2:f8:d6:94:3d:03:57:cf:c6:a2:de:b1:e5:0e:c9:
                    71:06:7e:63:b1:a5:81:c5:f0:6b:0f:41:f5:4f:87:
                    2b:ce:98:91:b5:bf:63:d4:cd:fc:e9:d7:49:63:71:
                    b5:09:9b:2f:48:df:af:5b:81:88:a9:12:5d:bc:5f:
                    58:36:7d:f2:ba:e6:99:d3:6a:95:0e:43:a9:63:70:
                    bf:3f:63:42:99:1e:21:a3:0c:e8:f8:1d:51:e0:a0:
                    63:51:0e:53:93:df:f7:54:4c:be:f7:67:84:63:9e:
                    7f:91:12:e0:e9:00:e9:2b:d0:26:7b:26:19:bf:09:
                    30:2e:ab:17:6d:4c:0b:9a:4b:d0:49:73:7e:1b:b2:
                    13:d8:6a:b8:29:9e:a3:0b:39:36:1f:9d:7c:86:b5:
                    97:2a:3a:a4:a9:6a:68:49:e1:ad:ea:4b:1e:cc:4b:
                    be:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F6:E0:FF:9E:28:F5:ED:59:A5:E4:81:8E:85:6C:EB:1A:10:49:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ea987b54-98cb-3303-96e9-5b09a1657e81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:9000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:dd:74:1a:99:f9:dd:91:bf:a7:42:31:b7:60:86:b4:9d:0c:
         ae:6e:7b:08:23:2d:65:b1:3f:13:ac:09:aa:b3:de:00:b9:61:
         9e:7f:d1:ab:54:0f:55:a6:3e:32:32:d6:ff:d8:c4:24:15:cb:
         66:55:0d:36:63:39:6b:4c:ef:a3:c9:9e:99:a3:79:c1:f4:8a:
         4f:2a:a2:92:d8:46:1e:78:6a:92:8c:1d:09:af:8a:4a:5f:e7:
         06:24:1e:54:8b:a9:4a:10:0d:70:bc:01:21:e9:cd:d4:e6:3b:
         a6:0c:63:fc:36:07:c6:f8:c8:98:a9:92:d3:f8:06:a9:86:f9:
         b8:7a:0f:0b:d1:0e:0e:97:0d:96:82:85:8d:18:ba:b9:49:82:
         ab:62:cf:64:72:fb:7a:91:16:0f:c2:b5:28:48:e6:27:55:91:
         a3:2a:ca:89:ae:24:61:91:1a:66:d8:52:96:20:f4:35:0f:ef:
         7e:bc:43:49:c6:bd:0d:54:50:f1:60:79:da:bd:c1:23:cf:5d:
         27:0d:7e:e8:f1:e6:26:56:b5:b2:74:d7:6b:73:c5:f5:9d:5a:
         90:bd:0e:d9:d3:ea:34:8d:3f:52:fd:3f:e4:49:b1:88:c2:49:
         0a:2f:0f:38:2a:a0:da:bd:bc:22:88:40:31:8a:53:18:0e:e8:
         96:df:53:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:44:05 2026 by rpki-client