Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ea987b54-98cb-3303-96e9-5b09a1657e81.roa
File:                     ea987b54-98cb-3303-96e9-5b09a1657e81.roa (raw, json)
Hash identifier:          TMC8piyHojvftNvgLyR4Rkp1+SrLqng9zOSL4y5ASns=
Subject key identifier:   08:16:6A:BA:AF:7F:9E:4A:A0:D5:FE:E3:E5:12:6C:B1:79:51:91:B5
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584A480AE9DF82E1C16899809400
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ea987b54-98cb-3303-96e9-5b09a1657e81.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     396982
IP address blocks:        2606:f4c0:9000::/38 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:e9:df:82:e1:c1:68:99:80:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=5bee257b-2937-4950-a95e-b2a21804312b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bc:fa:7c:63:e8:ef:b1:ea:9d:81:07:90:36:
                    e2:e2:ca:74:f1:30:69:28:26:7b:b4:a6:e7:76:cf:
                    34:9d:c8:1e:7e:8e:e7:92:a5:8a:e3:b5:d6:41:47:
                    65:40:ef:fa:e7:a8:ac:9a:75:4e:3e:13:e5:b4:e5:
                    83:4f:a5:2c:58:e9:98:a6:cb:b7:14:3c:a4:4b:58:
                    af:0a:06:4a:94:03:3f:57:73:05:d6:68:4a:ae:d1:
                    2e:86:31:3b:32:6f:95:7e:40:71:61:3e:1c:90:11:
                    02:10:23:dc:3b:50:e2:57:53:82:c6:a4:67:a0:bf:
                    54:2f:c2:8c:2a:9b:2d:13:22:08:7e:1a:62:c9:b3:
                    29:c4:54:ee:18:b1:1e:5c:b3:3f:f8:0e:61:34:11:
                    81:fe:67:c2:50:2c:d7:dd:b3:36:96:90:00:12:3f:
                    a7:53:fa:b1:dd:9e:c5:4e:39:63:b4:c7:8e:75:4d:
                    fd:1d:2b:55:f1:2f:b0:29:55:3d:8f:02:2d:60:fa:
                    6b:4d:3a:2d:8f:63:9d:d2:c9:56:53:bb:18:b0:91:
                    a5:06:9f:49:81:22:88:17:03:a7:09:e2:a3:87:ad:
                    68:1a:76:5b:32:46:a1:bd:6f:91:c4:6f:32:0a:d9:
                    f5:cb:9e:7a:10:35:8b:9a:e8:52:10:70:2a:78:8c:
                    cc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:16:6A:BA:AF:7F:9E:4A:A0:D5:FE:E3:E5:12:6C:B1:79:51:91:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ea987b54-98cb-3303-96e9-5b09a1657e81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:9000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:7b:58:71:8f:a1:fa:b4:50:16:33:52:87:df:2c:35:b2:93:
         78:22:0b:7a:ca:2e:03:37:dd:ca:e8:b8:64:e2:55:43:71:e2:
         50:d0:f9:ac:f8:2e:1f:db:8a:d3:7e:dc:43:e6:7b:b7:aa:f3:
         42:f0:3b:7d:53:ec:93:df:68:3d:bb:69:dd:3e:7e:35:5a:ac:
         85:a7:f3:eb:ee:de:f5:7e:75:2c:6c:57:d1:af:71:7c:bd:1e:
         eb:de:e0:99:ae:cf:9e:c2:af:d4:c5:4f:bc:82:06:42:78:5e:
         5f:82:d0:00:10:19:72:46:f5:8f:a8:b2:2c:cb:ff:a6:7b:6b:
         19:cc:07:96:93:5a:84:81:63:b7:f7:5a:9c:8a:63:58:f9:81:
         37:fa:58:4a:32:55:82:ff:47:36:7e:67:12:91:22:6b:78:6d:
         50:4b:52:35:c1:b0:09:47:69:89:8e:e6:4e:51:17:1f:31:7b:
         f0:58:69:e4:1e:a6:fb:40:eb:6e:9b:fb:7b:6f:79:c0:68:9f:
         8d:c0:60:ec:2f:c4:9b:9c:07:34:cc:93:ec:f4:45:50:59:7a:
         a6:fe:cf:26:93:ca:08:23:4c:9e:cd:b2:77:ca:a3:fb:37:b1:
         4a:59:d5:d9:f1:1d:bc:9a:58:49:df:e2:00:f0:a5:1d:f2:96:
         be:d0:d4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:28:32 2025 by rpki-client