Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/de3f51ef-f606-3d40-8694-991b50eb265e.roa
File:                     de3f51ef-f606-3d40-8694-991b50eb265e.roa (raw, json)
Hash identifier:          fsgRZuBkZssqz74FTaiHelt8rp5Uag5Qe3qJORmeZes=
Subject key identifier:   7B:C5:2B:70:21:51:43:8E:E5:44:03:66:8F:AD:29:A8:DB:02:25:7F
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584E54B48F30528B5B602A088040
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/de3f51ef-f606-3d40-8694-991b50eb265e.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     396982
IP address blocks:        2606:f4c0:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:8f:30:52:8b:5b:60:2a:08:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=fcbd1e40-020f-4208-b736-92be5f742340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:af:8b:9d:bc:8b:0a:c3:0b:f2:80:82:5e:6a:
                    b0:7e:7b:5e:c7:70:b2:a2:f3:f3:cb:ca:be:2c:76:
                    01:18:1f:80:38:d1:df:d9:68:1e:a3:17:b6:e0:4a:
                    f0:d6:b6:39:f9:da:2d:55:52:41:8d:3e:d8:fb:3e:
                    57:7f:39:e1:b1:3b:a7:6d:df:13:07:71:27:fe:5e:
                    03:36:69:1c:6c:94:d6:f9:10:5e:00:5c:83:bf:81:
                    42:5e:1b:a9:51:f3:47:bd:4b:29:13:06:44:50:8a:
                    5c:28:80:72:36:ed:1c:f5:06:86:c7:a4:85:41:40:
                    25:a4:04:a7:ab:a5:4a:08:93:98:83:1c:43:2f:d6:
                    35:fd:52:f3:4a:01:44:ef:fe:07:33:2a:a5:69:e1:
                    62:7b:9f:18:b6:3c:15:73:1b:c8:43:67:00:4a:59:
                    a1:8e:20:ec:76:99:c9:4b:76:37:1b:d8:eb:a4:8d:
                    4c:bd:8b:4d:68:c1:37:37:e7:cd:7d:0b:5e:23:c2:
                    88:58:db:4a:32:09:ab:ce:97:c8:38:b2:a6:10:9d:
                    6f:cb:33:3a:ab:c1:8d:4f:6d:f0:31:d7:f4:2f:f1:
                    34:3a:86:0d:fc:82:00:15:c5:37:40:01:56:15:0e:
                    79:77:96:e9:a7:84:b4:1a:08:cd:72:ea:39:97:21:
                    31:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C5:2B:70:21:51:43:8E:E5:44:03:66:8F:AD:29:A8:DB:02:25:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/de3f51ef-f606-3d40-8694-991b50eb265e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:0e:92:5b:73:ac:d0:a6:3d:f4:f2:96:6f:61:dc:de:c9:2c:
         b1:01:44:c6:72:53:90:b6:48:53:bd:de:c9:d3:51:85:7d:26:
         fa:17:59:f8:54:d8:2f:57:a7:56:d4:ab:5e:4a:ee:31:66:e0:
         df:6c:20:a6:59:83:79:44:2b:2d:8c:30:c4:7d:54:48:fa:9d:
         ab:a2:10:d9:87:b8:82:91:fc:65:b5:84:0a:a1:08:db:70:3d:
         d4:8f:f9:71:95:dc:46:29:b2:9e:32:df:1f:df:cc:25:8e:75:
         18:d1:1c:72:39:80:bb:d7:8a:bf:ef:a0:58:36:90:f1:96:23:
         73:c1:91:fe:2f:43:75:05:b1:65:ff:05:db:8b:7d:70:c3:09:
         d1:55:b1:2e:0e:eb:fe:c8:a5:6f:37:b2:d3:71:c4:dd:8b:55:
         b2:f2:17:77:4c:c0:a1:78:bd:4e:2d:8c:1a:c4:40:10:dd:83:
         ff:cb:7d:62:7b:34:4f:c6:29:c2:9c:34:e1:cf:c2:46:e0:be:
         0c:02:54:93:c7:91:11:5f:38:64:bf:7d:54:12:23:d1:f5:f2:
         f7:6b:be:2b:1b:d6:18:f2:68:88:87:8b:00:ed:2b:41:83:a6:
         34:25:20:ff:c6:ea:96:20:c3:01:80:9a:d0:48:5c:c6:eb:a8:
         16:18:b2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:58:14 2026 by rpki-client