Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/33d277a4-c188-372c-a78e-184a9a9ee100.roa
File:                     33d277a4-c188-372c-a78e-184a9a9ee100.roa (raw, json)
Hash identifier:          OFQtk+GqexYhwU/otR4Ohn0cjy10vHFVxZ/I+qqsZJQ=
Subject key identifier:   96:2B:C5:07:8C:09:C7:6F:AB:DD:58:FF:0A:3F:01:74:21:CE:5A:AC
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584B25FC3C7B41B8E64AAC0BB380
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/33d277a4-c188-372c-a78e-184a9a9ee100.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        2606:f4c0:4000::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:3c:7b:41:b8:e6:4a:ac:0b:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=d03039d2-02ec-4f51-96f5-89fd3084dcbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:84:74:0d:a9:97:c5:0c:73:c3:53:e1:2a:4d:
                    45:fa:72:5e:c8:7f:e1:3b:42:ef:04:20:35:46:e2:
                    be:d3:8f:be:cd:b0:90:c4:fe:89:82:1a:d3:51:1f:
                    da:de:fa:99:6a:26:fc:28:eb:2e:1f:d9:4b:6c:11:
                    d6:30:bc:bd:32:20:98:d5:31:5e:88:b7:bf:0f:2a:
                    64:3b:d6:41:e9:d6:61:6a:88:86:d3:ee:17:01:a3:
                    ed:1d:e4:a2:22:9e:8e:97:d0:97:c0:ec:f2:47:64:
                    59:e5:ed:ad:04:fe:f9:9b:84:7b:63:c0:ea:2b:7f:
                    e1:df:73:ff:61:13:b7:97:13:48:c3:01:c6:53:6e:
                    b0:30:0f:01:9f:e9:dd:12:33:c2:8d:4f:b0:18:f9:
                    f6:9f:85:43:1c:1c:58:6b:4a:48:58:16:1e:62:2e:
                    23:a5:45:72:b7:47:41:e9:98:20:87:c8:af:02:ba:
                    5e:b0:70:dc:87:cc:eb:b5:e1:3c:a0:a5:88:2b:e2:
                    37:32:28:54:be:ee:6a:67:09:38:e2:94:c8:11:d9:
                    c1:54:c2:cd:32:b8:9c:15:5c:8d:e6:b6:3a:7e:93:
                    06:b4:22:7f:c4:fc:e2:e0:5c:3c:9b:6f:38:d0:65:
                    a1:54:50:82:b7:0b:c4:7b:0d:ed:41:0e:1b:72:9e:
                    ef:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2B:C5:07:8C:09:C7:6F:AB:DD:58:FF:0A:3F:01:74:21:CE:5A:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/33d277a4-c188-372c-a78e-184a9a9ee100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:3f:3e:6e:53:58:4d:0f:ff:d1:26:80:55:1c:c8:87:e4:4b:
         87:a9:a2:21:95:44:76:53:ee:a5:df:9e:25:51:7f:42:1b:a4:
         29:e4:13:db:28:05:f7:28:af:19:1a:a9:b3:32:bc:94:5d:75:
         fd:fe:eb:99:e8:eb:3b:f0:f0:a4:ee:f1:6e:50:d5:00:fa:ce:
         7b:55:fa:f1:de:48:1a:b3:e2:73:5a:93:37:92:c5:26:1d:b7:
         f2:f8:a9:6b:a9:d3:91:f5:f2:94:62:20:23:9a:08:12:a0:eb:
         e5:e3:c3:8d:e8:4b:23:c5:97:c4:e4:b1:a0:ef:00:90:41:49:
         38:ba:90:7c:08:ed:98:77:45:20:11:7e:1b:70:b9:4a:c4:a7:
         c4:20:59:a7:b2:64:c8:34:2f:65:d7:48:2a:41:96:94:50:10:
         00:23:2e:c6:6b:06:d7:5a:22:43:af:98:12:ef:47:98:c5:8a:
         fc:de:44:b9:15:1c:b6:b7:b1:08:09:8e:0c:13:7c:5d:88:c0:
         bd:fa:e6:17:d0:c3:06:96:fc:c7:24:3f:12:d8:20:1d:9b:e5:
         81:f3:09:91:e0:88:3b:25:62:d9:54:72:a2:b7:d2:9e:69:c5:
         52:9e:c4:7a:14:10:69:7c:4e:4a:1f:2e:6b:99:98:ab:f5:71:
         05:fb:aa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:52:30 2025 by rpki-client