Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7edbbf6a-a4f1-3a0b-b9b4-967f35f95524.roa
File:                     7edbbf6a-a4f1-3a0b-b9b4-967f35f95524.roa (raw, json)
Hash identifier:          ud8aWGQTAFIHLTXoqZQnfNsLpGfYrAvX8g7omc0jHjQ=
Subject key identifier:   A9:97:76:8B:EC:7F:0B:C9:D2:C1:16:3A:77:8D:76:72:44:DD:2C:D1
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D39CF847D3A3030217381F500
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7edbbf6a-a4f1-3a0b-b9b4-967f35f95524.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        2606:f4c0:b000::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:84:7d:3a:30:30:21:73:81:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=fd7aeb1a-5d25-4e5e-9f09-b81bedaea360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:89:4e:b1:6c:94:68:6e:90:48:a3:0d:e4:f6:
                    13:55:55:29:3d:e6:26:4d:a3:5d:e7:f1:55:50:7e:
                    29:0e:ad:ee:5b:db:cf:db:3a:0a:11:0a:a7:5b:9a:
                    d1:5e:62:2f:9d:8e:c5:49:9d:35:fd:fc:d4:d8:6e:
                    51:56:bb:4a:e7:75:69:25:43:ef:c8:eb:aa:47:1b:
                    17:57:ff:0c:a0:73:4e:0b:cb:52:d7:3d:16:5c:11:
                    1e:f0:6c:e9:3c:7e:5d:9d:e5:0a:35:de:34:a6:78:
                    ed:c2:a6:5f:07:3c:1a:98:ba:80:2e:0d:5e:f7:5d:
                    78:00:6e:a2:9f:fd:1f:98:0d:c6:4f:a1:5c:f0:2b:
                    e7:dc:d6:e7:bf:e1:c5:95:bf:f8:d9:5d:a3:f0:af:
                    fc:d6:c0:83:70:a3:ba:2f:3b:8c:90:11:8b:b8:f8:
                    01:55:ef:06:3e:7d:04:b0:87:e4:a7:be:94:a2:37:
                    8e:85:51:d6:ab:8b:9e:8d:6c:85:a1:23:0c:3f:f2:
                    e6:0d:ba:de:96:5d:76:65:e0:44:c2:cb:a5:83:44:
                    50:b0:bb:b6:39:26:4d:70:9c:c2:08:6a:a4:50:57:
                    14:b9:fd:62:80:c9:06:a1:9e:c4:51:4a:91:d7:c1:
                    ec:50:21:c2:67:8b:ee:f1:ca:9b:76:89:77:9f:ab:
                    90:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:97:76:8B:EC:7F:0B:C9:D2:C1:16:3A:77:8D:76:72:44:DD:2C:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7edbbf6a-a4f1-3a0b-b9b4-967f35f95524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:b000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:fd:e8:64:85:0d:8a:c1:29:01:51:b0:56:a1:d0:7d:7b:b8:
         5b:96:d0:37:f1:b5:1c:8e:4b:4e:93:ea:1f:34:97:89:6b:5d:
         e4:aa:03:d2:0c:1e:44:22:09:43:7e:88:c2:e4:12:b8:87:76:
         e4:68:f0:04:6e:92:e5:f6:26:58:ef:ea:3a:ec:77:84:16:eb:
         6d:ca:2c:21:ea:ee:1a:fb:69:ce:72:eb:f8:bb:76:5a:3c:4d:
         bb:4e:76:c2:78:9b:88:e6:1e:5d:c2:77:98:4d:d3:9a:fe:1a:
         27:b4:29:a2:89:73:62:89:b1:e7:24:77:63:23:96:86:64:5b:
         35:b0:57:a9:48:07:34:1a:cf:ce:4a:90:83:41:a0:da:6c:63:
         60:c7:82:c8:15:82:11:3d:5a:c6:09:c9:f0:1e:53:7d:ba:30:
         08:8b:56:67:74:05:3d:50:8d:71:e0:ac:ac:5e:99:c4:0e:3a:
         80:cf:75:32:69:c3:58:c4:22:c0:35:8e:c8:13:b1:2f:f3:24:
         aa:bd:f9:b7:05:0c:50:3f:46:01:7c:f5:35:0a:e7:c3:60:0c:
         35:7e:8d:12:c0:2e:27:cb:ca:89:10:67:49:5e:0e:e8:45:ed:
         f6:fd:25:8d:9a:73:51:06:01:9a:f9:14:c4:3f:70:af:64:6e:
         36:85:d3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:19 2026 by rpki-client