Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/33d277a4-c188-372c-a78e-184a9a9ee100.roa
File:                     33d277a4-c188-372c-a78e-184a9a9ee100.roa (raw, json)
Hash identifier:          +AXhGPe/jhTnoEhmS6A6NR0AHF3+fYVhzwwtMW9QlX0=
Subject key identifier:   9C:FE:C9:EB:05:DC:1E:1A:BD:6C:D3:85:0E:04:BD:41:EC:34:06:1C
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584F49764322780E74502F5C8400
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/33d277a4-c188-372c-a78e-184a9a9ee100.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2606:f4c0:4000::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:43:22:78:0e:74:50:2f:5c:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a67b0dc4-7b19-4e4e-bbc1-8d7d1a7cdd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8f:11:90:fa:13:e8:68:83:db:96:00:f7:9e:
                    7b:e6:14:6b:c2:eb:7a:8b:91:93:31:7a:c2:d5:74:
                    15:44:7d:da:59:30:f0:27:0e:d2:65:5e:c9:28:55:
                    78:e4:49:a2:ac:ec:e4:43:03:00:fd:a0:8e:76:e7:
                    5e:58:42:65:a2:67:df:49:f0:40:69:f4:8f:ea:a0:
                    96:da:45:a0:0c:c8:ca:32:6f:4d:63:9d:4d:b2:63:
                    fe:4a:a2:79:c6:f4:d2:8f:b8:2e:b7:33:a5:0a:4b:
                    44:e3:db:3d:0e:02:87:c4:0a:07:4d:5b:4f:3f:15:
                    64:8e:ab:2b:e3:5e:1a:9b:93:0f:fa:42:36:28:eb:
                    ec:dc:40:f9:35:c5:f3:e2:3f:76:d4:1a:8f:51:04:
                    bc:f1:39:53:c7:7c:fc:3c:55:08:52:15:db:88:4a:
                    65:19:77:51:31:61:8e:43:e3:ed:49:c6:d8:27:9d:
                    34:53:ab:bd:1b:c8:64:6f:05:23:d8:97:36:99:1b:
                    e1:e4:5f:0a:20:c4:17:86:92:62:6e:5c:8b:53:52:
                    6c:bd:b9:74:f1:d8:ea:36:6c:a0:66:82:f8:42:c6:
                    30:bc:52:54:fd:5b:82:c6:28:db:8f:96:26:c6:41:
                    b3:c3:64:ae:76:d9:d7:4c:b3:e2:44:bb:43:cf:a1:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FE:C9:EB:05:DC:1E:1A:BD:6C:D3:85:0E:04:BD:41:EC:34:06:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/33d277a4-c188-372c-a78e-184a9a9ee100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:9b:6f:af:b1:4b:6d:87:7c:54:42:e6:b6:62:c9:2c:bb:f2:
         ea:18:0d:55:1a:79:81:f5:fe:8a:eb:73:62:bd:4b:7e:3d:32:
         0a:28:80:39:40:ef:4e:5b:81:4c:9c:04:39:ba:5a:79:d1:22:
         7b:16:9b:35:f0:05:74:f9:12:8e:6a:ed:4f:fa:39:b0:c2:87:
         91:3c:d0:f7:8b:6b:b2:92:78:16:01:55:14:e1:9e:57:bb:ce:
         2f:d8:18:53:1e:24:2d:63:eb:af:94:37:ad:c5:a4:c8:3c:2f:
         42:e4:ca:ca:3e:ac:e5:f2:8c:bf:f0:7c:40:6a:60:d1:46:7f:
         5e:ab:b1:3f:9d:77:cf:4c:db:a6:2e:c6:f0:cb:8f:9c:2c:9f:
         f1:02:87:da:eb:22:5d:c4:f4:37:bc:7a:30:78:28:a1:28:96:
         3b:58:fe:5a:13:a9:8f:68:0f:97:75:d7:d7:6b:ff:73:66:a1:
         1d:c6:36:e0:8e:3e:0c:bd:0e:35:e5:bc:57:31:01:d1:36:da:
         56:48:72:b2:08:af:aa:b4:3c:67:66:6a:eb:2e:1e:ac:5e:b0:
         a7:d8:c4:f4:11:a6:51:e3:d8:ad:7e:b0:49:2b:84:20:cf:68:
         39:f9:f8:70:6c:9b:57:a1:73:22:ba:db:88:2d:a7:44:ae:c0:
         d4:bf:c8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:00:32 2026 by rpki-client