Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f169f397-500c-3057-beaa-f359b7034076.roa
File:                     f169f397-500c-3057-beaa-f359b7034076.roa (raw, json)
Hash identifier:          Tz7F+KjhTuuhI2MPSiLWa+oW5IpH3y+xdEr4hPW3YSk=
Subject key identifier:   51:29:29:3E:4D:01:83:E5:3D:8B:52:88:1A:4C:86:4D:1F:A9:A0:11
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584DC995B48C63A5A5F04A69D980
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f169f397-500c-3057-beaa-f359b7034076.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     394089
IP address blocks:        2606:f4c0:9000::/38 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:b4:8c:63:a5:a5:f0:4a:69:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=8c475579-c88b-4628-912e-cb7066b4ad6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f1:9a:3c:0e:fb:27:0d:22:c9:b9:26:94:a2:
                    4c:17:04:77:98:bc:28:f3:3a:19:df:be:f3:d8:25:
                    e2:2c:0f:a5:21:fd:0e:da:0f:f3:29:59:29:49:88:
                    c1:93:bb:33:92:5d:e4:ec:0c:6c:72:a3:b7:9c:46:
                    ef:dd:5a:a8:57:cc:de:36:12:aa:13:00:cd:eb:0f:
                    77:f7:ea:55:ce:bf:71:41:d6:1f:ee:02:f6:38:15:
                    dd:96:87:34:60:f2:93:e3:d3:39:ec:4c:44:da:5f:
                    53:f4:31:bd:07:f3:58:ef:b6:dc:de:f5:8d:9c:c7:
                    6c:fb:d5:26:a7:76:fe:03:10:93:d2:8b:ee:3f:2f:
                    a3:b2:4f:8a:ec:a0:26:f8:4e:61:7d:ab:b3:e4:56:
                    33:c6:e9:19:26:89:4c:78:46:33:f5:89:05:aa:ba:
                    98:4c:c9:ec:08:dd:c5:b2:41:c0:cf:02:9b:c8:ad:
                    65:5c:df:b5:05:b2:a8:42:d2:26:58:d2:ee:ea:c8:
                    ad:c6:fb:9e:cd:07:4a:09:ff:cf:bd:f1:77:dc:91:
                    d7:6f:21:05:d4:83:b4:c2:9e:26:4e:63:21:0f:d9:
                    41:26:ed:5e:85:fb:a7:7b:0a:ce:6b:42:fb:07:02:
                    f0:d8:2f:04:76:64:a0:d2:13:d3:64:b8:98:27:0a:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:29:29:3E:4D:01:83:E5:3D:8B:52:88:1A:4C:86:4D:1F:A9:A0:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/f169f397-500c-3057-beaa-f359b7034076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:9000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a9:31:9c:1d:08:51:82:37:35:8d:f3:3e:b8:25:91:3d:79:
         ea:fb:a0:01:08:87:96:cf:38:cc:c3:10:f4:4b:98:d1:2b:e8:
         63:e8:33:9d:7d:db:e1:29:84:62:ba:a0:0c:72:da:db:ff:c2:
         48:af:e1:d5:03:fb:d8:21:ad:f5:5d:87:ac:95:28:0e:ed:84:
         b9:09:a9:3f:6e:b0:8e:08:4c:55:bb:d2:3e:09:b3:26:9c:74:
         69:ad:c4:f1:64:47:9f:03:14:90:bc:b6:40:ec:18:f9:b1:9b:
         c9:bd:19:5a:ff:04:a1:7c:ee:1e:fa:ab:ba:54:cb:73:1c:dc:
         d5:76:8b:6e:22:bb:da:99:f0:df:74:be:53:65:2a:58:b9:03:
         10:d4:68:fe:55:71:42:9b:52:fd:44:85:b3:ce:1d:f8:4d:32:
         e8:8a:b5:90:6e:ee:bd:87:54:5c:2e:04:08:4e:28:4d:87:63:
         b5:92:b9:5f:66:27:a4:57:2f:46:66:14:84:5c:60:cb:bf:3d:
         d0:0c:9f:bb:1e:12:20:83:cf:a1:c4:51:54:e2:30:37:03:8a:
         ba:46:66:19:50:67:34:58:9e:2c:70:86:8c:e5:ef:36:43:e5:
         69:73:db:0c:3b:76:50:eb:bf:f4:7e:2b:c4:63:a9:3d:9b:70:
         b8:4d:03:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:55:14 2026 by rpki-client