Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0579ea28-e99c-38e8-9924-bbf6558e94b0.roa
File:                     0579ea28-e99c-38e8-9924-bbf6558e94b0.roa (raw, json)
Hash identifier:          DQTyLMw/u3Kr+EVTgC3Pxv3Jkcub277sdAUh2AMSsnw=
Subject key identifier:   6A:18:AD:1B:D6:3A:FB:B3:C6:5A:9A:FD:FC:7A:C1:AB:5B:8B:67:5A
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B02EAE3803F429F2DC0680
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0579ea28-e99c-38e8-9924-bbf6558e94b0.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        2602:28c:2655::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:2e:ae:38:03:f4:29:f2:dc:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=8673cfbc-89ae-47d8-afa8-d45f3a7eea16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:be:35:21:e6:6d:61:27:23:31:e8:e3:ca:34:
                    f0:cc:2b:a3:ae:6b:99:7a:b3:c0:cc:3d:4e:e6:db:
                    d1:83:be:77:1d:7b:8b:e1:cc:7d:a6:54:2c:64:46:
                    03:9c:da:dd:c5:e4:50:40:08:dd:41:74:a0:65:c2:
                    85:62:3b:0f:f3:fe:d1:12:cf:1f:25:b4:dd:81:f1:
                    37:39:57:6f:52:69:9b:e2:50:80:2c:8c:2b:19:4b:
                    df:ed:c6:4e:5b:69:a9:0d:0c:fd:8c:62:40:8c:25:
                    cc:46:4a:75:12:a4:f1:a9:bc:22:b3:e2:e0:aa:b5:
                    1a:7c:7c:4a:e3:f1:28:bb:de:27:3e:81:59:ce:b2:
                    50:81:58:56:58:b6:d2:56:b3:27:5a:a9:45:c3:70:
                    6f:d0:e4:ec:55:19:84:62:70:ad:c2:64:19:69:87:
                    a4:43:c6:87:5f:63:04:e7:9e:83:25:31:6d:6f:b1:
                    77:f7:e6:50:4f:6b:9c:c3:e9:0d:d5:ea:57:c1:4a:
                    b9:76:02:25:d8:57:ec:0f:27:7c:a0:8b:e4:e3:d7:
                    b2:e9:6e:d0:13:90:bc:a8:18:25:ef:92:ac:81:b7:
                    63:eb:35:e7:8e:b1:4d:23:93:92:36:59:e7:e5:13:
                    08:fe:cf:8e:81:e0:ce:a3:b2:9b:16:9a:cc:d7:f8:
                    35:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:18:AD:1B:D6:3A:FB:B3:C6:5A:9A:FD:FC:7A:C1:AB:5B:8B:67:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0579ea28-e99c-38e8-9924-bbf6558e94b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:2655::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:8a:85:ee:91:02:2a:a1:0d:b4:95:f4:49:9f:24:7f:5d:2b:
         68:ff:47:6a:db:3b:19:41:0a:26:02:cd:70:4f:34:bb:fd:24:
         05:2f:9b:ce:9b:7a:71:3e:fa:21:db:26:94:75:8e:27:f3:3e:
         3c:c7:84:e4:a1:94:83:8b:66:1d:6f:f4:6e:5b:8f:82:f1:20:
         93:ef:39:27:8b:02:32:4d:67:01:43:e7:71:15:27:34:1a:be:
         24:e1:64:ed:e8:07:73:d3:3a:1b:25:83:f5:a8:81:3d:82:09:
         15:c6:a7:da:69:e3:2e:29:1e:91:79:5a:cf:c7:61:e2:dc:cf:
         25:03:7e:b1:9b:9e:9b:52:c7:d3:5c:80:2a:49:9d:0b:79:27:
         14:6e:91:d4:2a:42:d4:7f:cc:5f:80:da:54:92:24:25:e3:20:
         1e:06:87:0c:bd:b8:3e:10:68:1c:8f:c9:c1:47:7a:fe:92:18:
         27:3a:6f:f0:d8:84:08:68:60:6c:1a:90:bc:73:7b:d5:b0:36:
         c4:05:c8:7f:27:39:3e:c9:0c:35:ba:c9:2f:cd:8f:e8:f5:a3:
         ee:7e:a4:0e:2e:de:50:10:3d:53:83:9b:d1:46:71:f7:72:23:
         fd:05:90:12:a5:33:38:d0:bb:48:11:e2:2e:19:5d:59:2d:8a:
         14:c8:c4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:45:23 2026 by rpki-client