Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/06864d67-a18b-39dd-800f-a834b1780ab8.roa
File:                     06864d67-a18b-39dd-800f-a834b1780ab8.roa (raw, json)
Hash identifier:          j+HVvSq0WWJfhtaFHT7iRTCpeDnpYMXLo7PRy0+16uc=
Subject key identifier:   F3:94:5D:22:1D:46:18:5C:26:E1:12:B4:51:5E:8E:0F:63:EE:2B:EF
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B00D223BC380745C3CA300
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/06864d67-a18b-39dd-800f-a834b1780ab8.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2620:147:c13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:0d:22:3b:c3:80:74:5c:3c:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=5d81f26f-5c8d-4d67-a67a-644a7fdeaf42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b4:4f:42:7b:93:04:c2:e0:70:d8:c1:48:06:
                    87:c1:cb:94:12:73:d7:81:37:00:ec:98:df:4b:aa:
                    00:06:f9:7c:6f:29:a9:53:38:a4:e8:d8:99:2c:9d:
                    67:ff:f2:77:70:9f:0e:e6:ae:dd:63:e4:d3:09:e9:
                    f2:0a:c0:ef:a9:54:c9:b3:29:64:f6:0d:57:ce:97:
                    16:52:76:ec:9d:56:ef:33:af:9d:f5:76:8e:ed:4b:
                    89:d3:4e:38:17:1e:1f:e2:61:67:3c:ca:c2:4c:13:
                    ff:0d:8b:e1:30:b6:88:69:bb:8b:d6:c1:60:98:73:
                    bf:1d:71:51:0e:80:85:e5:34:49:8c:25:27:01:68:
                    d4:e2:57:51:fd:92:2f:b5:ad:ed:5f:8c:10:5a:2b:
                    50:38:92:24:4a:3e:ec:c5:15:be:2c:ae:6d:70:26:
                    e6:af:dd:2f:d6:37:03:17:35:5d:e8:27:ae:ee:f8:
                    d0:5f:8c:c1:fe:96:dd:33:23:f6:ef:d3:c0:c1:b6:
                    d5:f9:27:3d:2b:8b:5b:eb:ee:85:78:92:56:78:8c:
                    8d:44:a5:60:2d:79:5c:58:20:c3:26:c4:1c:c1:d3:
                    59:1b:00:f6:82:01:a2:e4:0e:38:96:cb:94:b8:d7:
                    d7:47:44:6a:a3:5e:10:aa:eb:98:ab:ad:ce:94:6d:
                    0f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:94:5D:22:1D:46:18:5C:26:E1:12:B4:51:5E:8E:0F:63:EE:2B:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/06864d67-a18b-39dd-800f-a834b1780ab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:99:30:ac:ff:c8:2d:86:98:b5:10:7b:4a:1b:c2:9a:fb:8a:
         53:33:9a:37:62:d4:fd:25:35:9a:fb:92:8a:97:b8:83:b5:38:
         91:1f:aa:f2:d4:b4:ce:05:eb:a7:c7:f5:68:b6:34:fb:a5:79:
         1f:a9:f6:55:96:ba:7f:a7:63:9e:95:17:33:5f:8f:42:01:61:
         14:97:c7:4d:01:12:e4:be:71:bd:64:ba:88:2a:ca:35:cb:9e:
         33:fd:32:1f:7c:4e:ef:99:54:1d:b1:85:dd:f9:c5:8b:4d:13:
         c6:da:9e:ae:80:a2:22:92:e5:b6:ed:1a:13:f7:5d:24:66:92:
         2f:43:23:c6:a8:68:25:2e:e7:aa:83:45:81:f9:f9:78:72:fd:
         b3:f6:9f:42:02:2c:48:0c:47:51:14:d7:ec:0a:12:a2:86:af:
         9f:bb:ca:7e:43:ce:50:3e:07:37:f1:3e:df:95:a6:49:39:3d:
         2a:0e:9c:6c:66:70:3e:19:13:85:26:09:3e:2e:7c:4e:67:4a:
         d3:81:30:2b:f7:44:02:89:09:c6:9b:aa:2e:85:67:e4:c7:3d:
         91:a2:e5:06:4b:fd:e3:9d:c2:96:03:38:a4:82:32:d0:e5:3c:
         ca:30:ba:d2:26:fb:3f:57:92:1c:fb:25:10:75:e3:5b:7f:31:
         86:5c:bf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:47:55 2026 by rpki-client