Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/1aee9e02-1163-39a0-91b1-2729fff87eba.roa
File:                     1aee9e02-1163-39a0-91b1-2729fff87eba.roa (raw, json)
Hash identifier:          QtFSef1vvQpxc9Ohfqvl37VuO0B7lmTsSLPrjFFaEt0=
Subject key identifier:   CD:8A:FB:BF:D0:CA:54:F5:F8:55:74:67:DF:82:A9:F3:6B:02:8A:8D
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B030B4FAFD692174C10740
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/1aee9e02-1163-39a0-91b1-2729fff87eba.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2602:28c:2911::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:30:b4:fa:fd:69:21:74:c1:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=74d517b8-d977-4e58-95b9-c86bbe4f748e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:03:56:01:41:9f:f1:d5:03:bb:ee:f3:54:61:
                    55:df:c3:57:b3:01:f7:75:c0:f2:90:65:f5:60:cc:
                    04:9f:35:d8:e8:e1:38:75:ff:64:1d:0b:a7:4d:f6:
                    58:f5:0c:cf:ac:2c:a2:f6:47:c6:1e:79:c4:d2:5d:
                    7e:5d:e1:c3:43:a5:a8:da:24:e6:ef:61:19:3a:f9:
                    f4:9b:d2:61:30:1c:a8:9a:22:01:84:6a:0e:58:da:
                    08:4b:d1:71:c0:5d:c7:84:ee:dd:1d:6e:fa:20:c5:
                    fd:a4:75:61:fd:4d:86:13:03:69:0b:e4:53:93:0f:
                    c0:09:71:23:7a:05:1f:72:b7:e3:c3:5f:ca:bf:c3:
                    fb:8c:02:e7:75:1d:38:3e:2f:b3:d1:64:03:48:f6:
                    72:9b:f6:00:01:aa:89:95:36:5d:dd:29:56:79:cd:
                    20:8e:ab:7b:ed:67:72:07:9d:3b:03:79:82:1e:24:
                    de:09:b1:6c:32:4a:21:7b:4e:d1:50:93:96:31:4c:
                    02:4c:ba:6c:15:b1:e9:2a:51:dc:35:47:90:52:fd:
                    f4:85:fc:b7:e4:d6:fe:bb:3a:b0:16:43:56:50:40:
                    bd:24:e0:08:b5:50:00:af:71:0c:c4:c9:c4:3d:97:
                    b1:16:bc:e8:f4:ab:0b:e2:2e:d7:86:08:65:e5:ae:
                    83:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8A:FB:BF:D0:CA:54:F5:F8:55:74:67:DF:82:A9:F3:6B:02:8A:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/1aee9e02-1163-39a0-91b1-2729fff87eba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:2911::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:df:a9:38:db:27:db:42:97:57:e5:2a:ac:fa:51:3e:6f:83:
         d0:fc:cf:bb:7a:d2:1e:4a:29:21:f0:9d:ae:c8:15:eb:62:e0:
         49:7d:ac:15:4b:b6:10:9d:4e:ae:52:e3:95:c8:85:21:d3:99:
         4e:64:c5:25:91:96:57:3c:97:6f:47:bc:5c:a6:4f:35:ff:0b:
         79:1e:a1:b8:c9:44:39:b9:63:b6:f8:91:79:79:bf:56:84:e2:
         61:a7:8c:ba:43:d4:e3:7f:f6:3b:0d:c9:68:09:59:9c:cc:7a:
         f6:8d:7f:c4:d5:87:14:da:18:14:b8:aa:09:0f:15:a5:24:54:
         30:cc:44:67:56:43:41:15:5c:9a:f0:b1:69:4c:9f:29:52:61:
         75:b0:d2:6b:b1:2d:73:83:ad:a4:98:21:c3:f1:3b:de:ac:74:
         45:6b:e3:70:20:70:59:7f:19:5a:ee:d9:e8:72:5b:df:db:5a:
         b9:e8:c4:fe:36:de:7a:2a:a4:c4:3c:78:00:7a:79:9d:1f:d4:
         20:aa:df:4e:0b:ef:c6:19:a3:c3:20:90:91:92:49:c7:d6:7b:
         40:8d:ef:0c:90:7c:26:81:9a:17:29:ac:2e:67:0b:79:22:e9:
         5c:60:f4:c1:d3:b7:a0:9e:ea:40:0e:4c:06:26:2d:80:dd:b7:
         cd:75:d6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:03:58 2026 by rpki-client