Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/4804ebf6-8f65-3a74-82df-b067b3207ecf.roa
File:                     4804ebf6-8f65-3a74-82df-b067b3207ecf.roa (raw, json)
Hash identifier:          +ZUaiV0yTSVWOL2XhvBk3wmnqJ1oivwn3XhwQDBy6r8=
Subject key identifier:   C3:94:8F:73:22:A6:75:27:39:3E:A1:1C:61:48:9B:7C:C7:1C:4C:5E
Certificate issuer:       /CN=090cf75b-f998-45e2-a8ea-c4d882201d24
Certificate serial:       010D0C9F4328584F5E62D3FE8BD945E114ACCA00
Authority key identifier: 14:9C:C7:07:9A:90:D7:69:1D:47:04:E9:AD:6D:E7:D7:CE:2C:7D:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/4804ebf6-8f65-3a74-82df-b067b3207ecf.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     402196
IP address blocks:        2602:f6b7::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/090cf75b-f998-45e2-a8ea-c4d882201d24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/090cf75b-f998-45e2-a8ea-c4d882201d24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:d3:fe:8b:d9:45:e1:14:ac:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090cf75b-f998-45e2-a8ea-c4d882201d24
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=b0b30429-d15d-40e0-9b24-d1b4bce66381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:93:a5:05:94:1b:bf:89:2f:b7:1c:22:7e:03:
                    8e:7f:05:e9:60:52:e6:c0:91:72:3c:4f:1e:bc:7e:
                    b2:eb:3e:96:7f:be:c4:18:0f:b8:a9:77:dd:da:e1:
                    00:d1:95:37:19:dd:95:8e:45:cb:f4:40:dd:53:5e:
                    ff:f2:e0:ef:ef:1f:9a:b4:19:f3:35:82:ae:af:5c:
                    eb:74:11:2b:55:be:e4:b2:23:3f:3b:71:68:a6:c3:
                    d1:3a:97:61:bf:ce:fd:57:6c:80:a9:3f:10:c4:75:
                    32:f3:34:ed:db:20:2c:07:5f:fa:57:9a:11:8f:af:
                    fb:b3:d4:0e:5d:0f:33:1e:a2:3e:79:8e:86:73:ac:
                    09:1a:05:aa:22:b3:b4:e4:be:f4:44:22:21:e4:7e:
                    a2:c9:66:fa:1c:f0:e4:6b:34:e5:81:d3:6c:d9:e5:
                    42:04:9b:41:e8:ee:30:28:55:d0:2c:f9:cb:f2:a0:
                    96:4b:86:7f:b9:6f:46:36:dc:b7:a2:f5:49:f6:44:
                    9b:a8:b0:7b:99:08:4e:26:0e:84:0c:2e:99:23:9d:
                    d6:95:bc:78:df:a3:d3:47:24:74:52:cb:1f:07:26:
                    24:6c:f1:ed:2d:8d:a9:49:93:b0:1b:c6:f7:9b:f8:
                    bf:5f:8b:a5:00:f6:00:bb:4e:de:54:3b:51:03:0d:
                    b1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:94:8F:73:22:A6:75:27:39:3E:A1:1C:61:48:9B:7C:C7:1C:4C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/4804ebf6-8f65-3a74-82df-b067b3207ecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/090cf75b-f998-45e2-a8ea-c4d882201d24.crl

            X509v3 Authority Key Identifier:
                keyid:14:9C:C7:07:9A:90:D7:69:1D:47:04:E9:AD:6D:E7:D7:CE:2C:7D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6b7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ae:41:ae:a3:74:e9:6f:c7:07:a0:37:42:26:f4:e0:00:ac:
         f8:4a:1d:f9:f5:0d:c4:91:1a:02:3b:61:5c:8b:98:09:5d:1f:
         69:9f:53:b7:1d:28:fd:7c:80:eb:c6:6a:5d:2b:92:72:6f:b6:
         1f:c9:9f:b8:1a:fd:de:0f:53:be:10:c4:a6:55:d3:18:31:e5:
         72:c8:3c:40:3b:05:81:c8:ae:b2:7f:61:dd:8f:2a:da:7b:93:
         a0:ce:3b:6e:cc:a8:39:1c:5e:2b:40:c0:78:06:88:01:2d:e2:
         af:bb:ad:e7:e8:13:9f:bd:c2:b2:79:28:ae:ae:91:31:93:be:
         d7:33:e7:2c:a1:15:fc:a6:d8:06:a5:16:96:fa:48:d9:88:b2:
         c6:09:5f:c8:28:b1:25:45:29:bb:6f:a0:f6:55:4a:59:71:a3:
         5f:dd:e4:c8:dc:64:b1:f8:87:38:a1:ea:c3:85:b2:ea:2f:1c:
         24:38:a7:9a:ed:7b:0e:68:0a:8c:b5:01:dc:f9:91:8c:ad:60:
         3c:a2:36:28:d6:f8:6f:a7:85:11:28:10:04:a2:4d:13:2b:68:
         84:cc:c0:d0:81:91:32:54:8f:57:e8:25:4a:d1:cd:e1:c4:99:
         4c:d7:d8:86:0a:d8:36:a5:86:96:95:95:a2:6a:f6:cc:4d:aa:
         a9:b2:d0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:53:41 2026 by rpki-client