Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/16e258ec-06e2-3e40-90c8-f78e813ff236.roa
File:                     16e258ec-06e2-3e40-90c8-f78e813ff236.roa (raw, json)
Hash identifier:          wBvNqGxAFIq5m7sRQcGbGcXc1LxvvowY7Vjxz0+6EP4=
Subject key identifier:   E4:37:02:83:EE:16:9D:71:56:04:A6:B5:52:79:FB:64:94:C5:2F:8B
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584EA788040A5F91326667E669C0
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/16e258ec-06e2-3e40-90c8-f78e813ff236.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     32133
IP address blocks:        2606:8e80:800::/37 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:04:0a:5f:91:32:66:67:e6:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b20c2a4a-b58b-4c35-8128-3c796551ff50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:0f:35:c1:d0:9f:ac:d9:66:83:66:b6:3b:
                    8f:fa:cd:23:9f:53:11:20:72:be:bc:b0:11:8f:bd:
                    7c:9d:a0:ad:6c:42:f0:bd:d9:ad:a6:b7:5a:9f:9a:
                    dc:68:5b:ba:3f:94:a3:e3:c7:07:ae:13:9d:5e:f4:
                    de:39:81:5e:34:d8:ae:31:69:66:e0:ce:99:ad:ea:
                    34:02:78:65:d4:86:71:00:7c:5c:a7:de:5a:0a:7f:
                    c7:35:cf:7e:26:37:d8:de:5a:63:01:74:4b:7f:c6:
                    eb:7c:eb:14:64:4e:9c:a6:fe:01:2a:a2:39:5f:bb:
                    eb:8f:cd:93:b5:84:a9:5f:6c:8e:1c:6e:8b:b1:de:
                    a3:15:7a:fe:63:81:7d:95:eb:45:dd:48:07:c9:51:
                    7f:31:eb:b6:59:02:2d:09:25:59:74:07:33:ee:6f:
                    c3:2d:61:8f:f4:07:26:47:d4:ae:4d:8f:dd:0f:f2:
                    0f:7c:5f:de:04:46:1f:6c:ee:c5:f9:e7:b5:7e:a3:
                    e5:50:14:14:23:d9:4f:f8:fa:54:68:2c:ee:19:26:
                    5e:6e:2b:21:55:0e:29:c7:84:31:6b:90:6f:8d:45:
                    15:4f:d8:f4:46:88:de:49:c0:02:cc:25:a1:a7:72:
                    f9:98:c1:49:cc:89:bd:0a:d6:ab:64:1d:14:3e:5c:
                    54:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:37:02:83:EE:16:9D:71:56:04:A6:B5:52:79:FB:64:94:C5:2F:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/16e258ec-06e2-3e40-90c8-f78e813ff236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80:800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:99:7f:4a:48:90:a5:e5:45:ae:90:0a:db:21:04:ef:ff:0e:
         bc:70:26:85:7b:f2:64:16:db:69:31:5b:aa:72:48:1b:31:0a:
         a2:df:a2:9c:ac:f9:f1:7a:ce:99:bb:2a:fb:0c:b9:91:36:07:
         2f:db:73:2f:cf:40:1d:63:c1:21:6e:cb:96:96:8e:3c:ba:53:
         6a:34:9b:18:13:6d:58:3a:71:d4:40:07:07:ce:41:d1:85:86:
         01:1a:c6:49:3f:41:ba:3a:10:5c:8f:19:5e:5f:45:c2:c2:4c:
         de:e3:f7:d5:e8:37:45:61:1d:fb:c9:d7:75:aa:10:ce:33:c5:
         ef:98:e9:ea:cf:ba:60:48:f1:47:a1:58:e7:5f:34:39:50:79:
         0e:a0:2f:db:8d:6c:98:eb:89:66:8f:9c:8a:c4:b0:3f:56:e5:
         2f:61:2c:d0:5f:c0:26:af:f5:5e:db:74:d0:3e:f3:b1:18:bc:
         c9:c8:16:e6:5f:eb:84:c0:6d:dd:58:e8:13:fe:2d:d0:c2:1b:
         df:b2:b2:c5:91:ac:14:78:c6:1a:a0:ce:d1:9a:67:ef:cf:74:
         91:97:2e:5a:9c:88:0f:3d:17:27:44:eb:71:d3:e7:d8:89:f3:
         c3:d1:70:17:91:b1:d6:e9:fd:00:e9:31:69:8c:79:98:15:c5:
         8d:6c:3c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 03:26:56 2026 by rpki-client