Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/192d0649-0a5f-3385-a4b3-331c4279e3ba.roa
File:                     192d0649-0a5f-3385-a4b3-331c4279e3ba.roa (raw, json)
Hash identifier:          Xa+UGnMtggAMvLv9dXdlsU5+5XDVvGEe8diLFgjqUW0=
Subject key identifier:   D3:85:49:DB:AC:25:DE:73:9F:E8:95:C3:34:98:B8:99:DB:CF:FF:AA
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584E54B4AF3EA23209A0010011B0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/192d0649-0a5f-3385-a4b3-331c4279e3ba.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     8987
IP address blocks:        2606:f4c0:8800::/38 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:af:3e:a2:32:09:a0:01:00:11:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=936587b2-a621-4449-87b3-27144c684208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:3d:01:41:53:54:a1:12:0e:8d:fa:eb:24:
                    96:ac:6b:a6:4b:d1:62:1d:12:1c:93:23:cf:a5:fa:
                    c0:02:07:b0:25:7c:c2:c0:32:4a:04:90:5d:7b:b7:
                    6c:08:ee:68:0f:cf:f4:8c:04:bf:58:fd:21:e9:a2:
                    ac:1c:55:54:e5:fd:84:ff:14:86:4a:a0:a0:e8:93:
                    8a:ab:3b:b7:10:3c:de:a3:22:65:c6:16:ee:d3:4b:
                    11:b3:db:48:50:24:ae:86:1d:17:0c:17:3c:8d:82:
                    6a:f3:e4:eb:20:c0:a8:0b:dd:2f:f2:bd:f9:32:46:
                    f4:bd:83:7d:5f:70:c1:97:42:30:33:fc:91:a9:69:
                    b1:7e:59:ab:e3:e1:6c:b5:76:11:48:a6:ae:c4:29:
                    13:4b:13:51:b7:d3:4f:ef:dc:3b:7b:ea:38:f0:9f:
                    b8:a7:2d:a2:3e:49:23:92:94:36:c5:77:44:30:ba:
                    85:6d:0b:6a:2b:84:dd:be:cd:8c:25:47:1a:62:58:
                    78:db:3f:4d:ba:39:8e:a3:11:58:cd:18:78:e6:8d:
                    a6:84:56:ce:2a:5e:cf:f8:b1:b2:b1:65:af:87:64:
                    d7:11:c3:35:b9:38:81:bc:9c:b2:fa:35:7e:63:4d:
                    be:92:18:d1:cc:91:92:c4:a4:19:4a:16:b8:9e:75:
                    94:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:85:49:DB:AC:25:DE:73:9F:E8:95:C3:34:98:B8:99:DB:CF:FF:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/192d0649-0a5f-3385-a4b3-331c4279e3ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:8800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:f5:4a:48:41:e7:b7:e2:e9:7d:e7:27:4f:37:fb:12:1e:dd:
         c9:e6:92:45:18:14:96:8e:a0:d0:80:6c:2d:05:17:0d:2b:d1:
         ab:13:f9:c3:3c:92:6d:0b:52:c0:4f:3b:7f:41:b0:2d:60:a2:
         2b:02:a1:f3:77:44:f3:f5:b8:59:96:1b:d9:f1:6e:23:12:aa:
         59:57:05:2d:e3:22:62:aa:8f:b3:62:71:b7:6b:aa:57:33:e7:
         53:d8:05:41:98:de:f3:86:fb:da:71:bd:e8:46:7d:6e:9d:58:
         31:e2:b3:f3:31:1d:d5:a0:41:14:02:7d:da:85:40:b0:ca:d4:
         e9:ba:db:64:a0:51:71:cd:9e:3b:67:38:65:b0:0d:d1:7e:b3:
         ee:50:c8:8f:04:75:81:6e:2d:12:c2:fd:91:d3:81:a0:83:51:
         a9:51:26:ce:cd:15:aa:a6:7b:41:e4:3d:96:5d:d4:62:5b:22:
         f7:fb:32:2e:bc:b4:de:85:d0:fc:aa:51:31:c7:8a:1e:a2:bc:
         12:34:ff:89:e8:f0:59:1f:10:b3:4f:76:a8:34:38:79:ee:4f:
         03:dc:de:a0:9c:ca:11:f7:69:62:d4:be:08:8f:1e:63:be:b7:
         dc:34:0a:ff:10:90:db:d7:b1:8e:9d:34:64:49:dc:da:01:00:
         90:b8:6f:54
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5UtK8+ojIJoAEAEbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
OTM2NTg3YjItYTYyMS00NDQ5LTg3YjMtMjcxNDRjNjg0MjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLE9AUFTVKESDo366ySWrGumS9FiHRIckyPP
pfrAAgewJXzCwDJKBJBde7dsCO5oD8/0jAS/WP0h6aKsHFVU5f2E/xSGSqCg6JOK
qzu3EDzeoyJlxhbu00sRs9tIUCSuhh0XDBc8jYJq8+TrIMCoC90v8r35Mkb0vYN9
X3DBl0IwM/yRqWmxflmr4+FstXYRSKauxCkTSxNRt9NP79w7e+o48J+4py2iPkkj
kpQ2xXdEMLqFbQtqK4Tdvs2MJUcaYlh42z9NujmOoxFYzRh45o2mhFbOKl7P+LGy
sWWvh2TXEcM1uTiBvJyy+jV+Y02+khjRzJGSxKQZSha4nnWURwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNOFSdusJd5zn+iVwzSYuJnbz/+qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMTkyZDA2NDktMGE1Zi0z
Mzg1LWE0YjMtMzMxYzQyNzllM2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgb0wIgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAy/VKSEHnt+LpfecnTzf7Eh7dyeaSRRgUlo6g0IBsLQUXDSvRqxP5
wzySbQtSwE87f0GwLWCiKwKh83dE8/W4WZYb2fFuIxKqWVcFLeMiYqqPs2Jxt2uq
VzPnU9gFQZje84b72nG96EZ9bp1YMeKz8zEd1aBBFAJ92oVAsMrU6brbZKBRcc2e
O2c4ZbAN0X6z7lDIjwR1gW4tEsL9kdOBoINRqVEmzs0VqqZ7QeQ9ll3UYlsi9/sy
Lry03oXQ/KpRMceKHqK8EjT/iejwWR8Qs092qDQ4ee5PA9zeoJzKEfdpYtS+CI8e
Y7633DQK/xCQ29exjp00ZEnc2gEAkLhvVA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:03:25 2026 by rpki-client