Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b676fc78-a8f2-385f-8f05-de1cba47b1e4.roa
File:                     b676fc78-a8f2-385f-8f05-de1cba47b1e4.roa (raw, json)
Hash identifier:          ELzLnLAV0nC44OJbfBr63jdDSjJmvgec/sNu0FcCaYI=
Subject key identifier:   8F:1C:FC:39:B6:15:50:58:DC:77:4D:91:69:71:A6:C0:24:9A:55:A6
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584D39CF710A042AF3A09D1DB2C0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b676fc78-a8f2-385f-8f05-de1cba47b1e4.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     396982
IP address blocks:        2606:f4c0:7020::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:71:0a:04:2a:f3:a0:9d:1d:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=b99ee3c1-add3-4654-819b-e9cfc82c587e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e9:bd:a6:d1:a0:f7:08:e1:2a:ec:6e:2d:66:
                    73:0f:1e:3b:c6:ef:30:98:96:c9:89:b4:9d:19:db:
                    66:d4:c1:66:f3:75:98:0a:46:41:9c:4f:f0:39:0c:
                    2e:2b:bd:b1:05:a5:b3:e6:ff:a4:0c:28:bf:fc:fa:
                    c1:1e:28:20:ee:dd:da:21:a5:5f:5e:d9:e8:16:ac:
                    cd:23:e9:ac:82:11:ac:a3:0f:a7:8e:3e:2e:f1:d2:
                    fc:b9:14:ce:76:fe:24:a1:73:e8:eb:c2:bd:fc:79:
                    c8:cf:1b:ce:e2:b5:d4:37:c5:44:5f:e8:c2:b3:09:
                    1a:c5:d4:cd:71:16:57:26:4a:de:a0:f4:fe:94:88:
                    6c:0b:bd:cb:0a:f9:29:9c:59:22:54:68:d1:98:af:
                    e1:1a:b6:40:f6:53:2e:3c:88:b1:49:af:1d:9a:07:
                    92:ae:8b:33:3c:3b:3c:87:9c:6d:13:1d:69:ae:53:
                    53:ea:da:26:9d:c8:9c:d8:99:d8:26:17:fa:fc:65:
                    eb:51:d4:c4:ab:ee:5a:ff:c4:98:d4:78:e6:34:be:
                    62:63:7b:0c:ad:33:6c:6e:65:93:81:72:a1:9c:8a:
                    5d:2c:7b:e2:ef:43:e1:ad:84:e2:e5:59:a4:a3:7c:
                    ed:ea:ff:94:b5:79:c4:17:8a:79:21:7a:97:a3:77:
                    4e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1C:FC:39:B6:15:50:58:DC:77:4D:91:69:71:A6:C0:24:9A:55:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b676fc78-a8f2-385f-8f05-de1cba47b1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:7020::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:76:4e:f3:f3:c7:84:82:a5:e2:48:d7:b1:a6:6b:ff:ce:6b:
         a4:e2:0c:ee:d9:2e:f5:0e:7e:af:8d:fc:10:dc:3f:a4:b6:c0:
         90:9e:d7:dc:3f:50:84:fb:95:5f:05:61:ed:4b:cb:2b:dd:4b:
         bb:77:e0:00:44:d5:49:b9:21:93:b8:1f:03:fc:f7:eb:12:ba:
         04:a8:f4:58:e3:88:e3:a0:cf:05:78:c1:00:d4:19:dc:fc:9e:
         a5:67:de:d4:32:ee:e9:0f:7f:34:68:fc:d4:27:52:f8:89:bf:
         32:6e:dc:8b:b6:4b:52:d9:05:b1:40:a8:57:c3:0c:c3:f0:d3:
         3e:42:7c:b6:19:0c:bf:b9:9d:f0:de:aa:47:94:3d:44:9d:1f:
         ed:20:2f:69:56:c3:46:03:2c:65:77:b4:ac:df:e7:f4:70:22:
         6b:52:74:b8:c2:22:49:42:9a:15:9e:f0:c9:9d:37:e7:6f:4a:
         2b:58:64:0e:e6:12:2d:c6:b6:39:23:aa:d2:96:03:a6:57:7e:
         8d:8d:1c:dd:5e:39:2c:c2:e2:50:d4:80:b7:21:d4:29:3a:37:
         4d:9f:6d:e2:bf:1c:6c:ec:09:6d:ff:9b:31:75:e5:16:93:6a:
         fc:c0:25:29:27:ba:6f:b7:ee:0d:82:a4:58:42:cc:0b:8b:18:
         ba:92:36:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:05:40 2026 by rpki-client