Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/90f08997-b502-3697-b78c-ea92e4445b84.roa
File:                     90f08997-b502-3697-b78c-ea92e4445b84.roa (raw, json)
Hash identifier:          76Rovrhk7sIXnKUWy34gFOU0M6qY87xzv5E04wU5ia8=
Subject key identifier:   1F:EA:F6:79:DF:55:09:68:24:99:7B:66:D0:A8:95:E2:8F:AF:4F:5B
Certificate issuer:       /CN=aa696b5e-f83b-4ee8-b1c8-846215cd5e4d
Certificate serial:       010D0C9F4328584DC8305BF1A77A3A9E28915C00
Authority key identifier: A9:60:36:9B:A5:E0:51:35:4B:F8:4F:DE:0C:A0:20:75:DE:9B:64:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/90f08997-b502-3697-b78c-ea92e4445b84.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     6405
IP address blocks:        2604:e280:8600::/47 maxlen: 47
                          2604:e283::/47 maxlen: 47
                          2604:e28c::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:5b:f1:a7:7a:3a:9e:28:91:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa696b5e-f83b-4ee8-b1c8-846215cd5e4d
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=89fa67b4-0ad5-4a31-af6b-dbc217ad4d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:f6:32:2c:37:6d:da:86:cd:71:24:90:fd:
                    ed:4b:7f:2c:37:d5:a3:45:61:4d:08:7d:8e:d4:06:
                    d7:26:09:12:41:51:d5:68:51:5b:a5:cc:7b:48:81:
                    c1:68:68:26:bc:28:ba:20:7d:24:63:f2:09:92:52:
                    cc:0f:8d:2c:17:6b:de:2e:f3:0f:4a:81:6f:e9:88:
                    bd:e2:d3:7c:b6:63:2d:83:65:31:c8:b0:b1:48:6b:
                    29:2e:8e:65:51:3e:c6:45:05:44:79:5b:aa:6f:db:
                    07:24:bc:3d:0f:3b:fe:e1:19:ef:a9:41:f9:a7:a6:
                    b2:65:4b:8f:20:f6:0c:34:0b:3a:a0:11:33:5a:8c:
                    d4:2d:f4:c5:92:95:dd:20:8c:40:3e:e3:cc:c9:c7:
                    e0:bb:52:35:3a:08:3e:7d:30:6e:1b:96:84:1a:94:
                    f2:0b:2d:3f:fd:3e:dc:a2:40:75:90:aa:48:1c:b1:
                    8c:c5:59:17:1e:1c:18:89:10:f3:a6:06:de:d8:32:
                    58:c6:3c:00:ee:41:13:d1:ba:7e:76:b1:8c:5a:45:
                    50:19:45:1b:e8:87:20:42:c5:9b:13:46:f0:fc:65:
                    24:fe:14:9c:df:d9:a2:ed:8c:d8:9f:d2:d6:f3:bc:
                    1f:48:b3:ae:00:c7:74:53:7b:63:fb:ca:a3:5d:a6:
                    b7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EA:F6:79:DF:55:09:68:24:99:7B:66:D0:A8:95:E2:8F:AF:4F:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/90f08997-b502-3697-b78c-ea92e4445b84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.crl

            X509v3 Authority Key Identifier:
                keyid:A9:60:36:9B:A5:E0:51:35:4B:F8:4F:DE:0C:A0:20:75:DE:9B:64:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e280:8600::/47
                  2604:e283::/47
                  2604:e28c::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d0:9d:d4:80:b9:e6:12:1b:54:8b:89:fa:88:23:8b:bd:98:
         72:18:62:4f:e0:da:42:ed:b2:1b:04:48:9c:97:3c:50:17:91:
         4e:b8:6d:1e:42:f0:83:fd:95:72:c2:e4:bb:c4:c7:99:21:f3:
         10:0e:b7:0b:a0:2c:ca:20:2a:d8:76:82:6b:ca:5e:8e:82:be:
         c8:db:d6:e0:b5:18:f7:32:79:1f:c9:74:74:83:18:a9:61:15:
         b8:ed:d4:fd:dd:31:97:e8:88:47:13:b7:7d:9f:92:7a:dc:f9:
         3d:b2:23:5e:4d:60:8c:35:0c:ee:42:12:dd:2d:04:fa:b9:c4:
         7d:11:71:1b:e5:86:9c:40:04:0a:9d:71:1f:35:31:3e:88:df:
         01:af:cc:83:06:46:e8:01:a6:ab:18:78:5d:e9:76:63:41:29:
         20:dc:16:4b:11:21:63:86:26:2d:7e:9a:2c:d5:a8:93:73:19:
         ab:f0:9b:ba:db:0f:a9:44:ef:c7:56:ba:37:10:d9:72:6b:50:
         41:8f:e0:1b:39:2a:66:7a:2e:64:2f:58:4d:73:53:05:0d:73:
         56:29:0d:0d:6a:d2:11:d1:ff:b1:41:e3:3f:01:f5:da:df:fa:
         3a:55:00:04:77:5e:f3:f1:2d:77:25:5c:06:46:23:a6:32:75:
         ce:1f:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:16:52 2026 by rpki-client