Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/27f744e0-d955-3c3c-8552-4cdcf67011b2.roa
File:                     27f744e0-d955-3c3c-8552-4cdcf67011b2.roa (raw, json)
Hash identifier:          p9tqWmeBsf/CU4T1utmV/kRcBqthZPQ5UUh3nt2aN7k=
Subject key identifier:   3B:89:AB:5A:C3:E6:19:CE:53:52:42:EE:A9:A8:2E:C9:CD:96:ED:2B
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B032E6158669E59F91D580
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/27f744e0-d955-3c3c-8552-4cdcf67011b2.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     198949
IP address blocks:        2602:288::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:32:e6:15:86:69:e5:9f:91:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=b4f360a1-ce4f-423c-85b5-2eba268a938a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:77:8b:c5:f7:a2:e4:06:61:46:78:77:3b:
                    f4:ec:b3:c1:dc:7b:bc:e0:f4:5a:9c:3a:09:fa:6f:
                    21:24:00:87:a1:a2:e2:aa:51:ea:bc:ba:3d:c1:a2:
                    d1:16:92:ab:ea:38:b9:e2:72:f1:dc:25:52:37:46:
                    46:1e:2e:89:ae:96:21:52:88:a3:7e:a7:c5:f5:59:
                    3a:36:31:3d:4e:81:e2:ee:77:cf:18:eb:99:75:bb:
                    aa:fc:d6:49:e1:e2:e5:c9:f6:1b:bf:bb:74:38:d5:
                    71:9f:57:5a:bc:55:3a:83:77:47:46:10:8f:3e:08:
                    5d:2c:84:45:8d:1d:41:61:35:26:df:5d:3f:a9:c2:
                    81:26:cd:8a:b7:51:76:38:f1:5b:12:bc:57:fe:a5:
                    89:6f:7f:a1:fb:7e:a2:f3:03:90:a1:9b:4a:48:11:
                    c7:32:8e:fd:20:0d:f6:64:43:ef:78:37:91:ca:6f:
                    8c:34:5c:17:c9:36:4d:06:29:a9:92:0f:bd:1f:84:
                    09:16:8e:0b:00:49:55:b9:b9:da:fc:7f:cf:23:87:
                    06:50:65:10:04:f6:6c:8f:2d:03:13:5f:f7:03:b5:
                    fb:c4:7a:26:e9:03:c6:ad:cd:d7:90:52:93:ff:2c:
                    d8:fa:dc:72:1a:46:eb:04:5a:35:e4:0a:ab:44:68:
                    bf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:89:AB:5A:C3:E6:19:CE:53:52:42:EE:A9:A8:2E:C9:CD:96:ED:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/27f744e0-d955-3c3c-8552-4cdcf67011b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:288::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:36:7d:c9:93:27:86:b2:1a:30:35:9f:c8:1f:9d:32:29:12:
         e4:72:ad:95:c7:0a:52:fa:78:e4:43:cf:53:c3:a9:e2:9e:c9:
         52:56:06:ce:ce:f3:d4:2f:b1:b5:86:8b:78:da:5e:53:39:a2:
         17:c0:0c:5e:17:6f:03:f9:df:0e:05:64:a6:ba:68:78:25:89:
         9e:3b:1b:41:72:75:e3:da:d8:84:4c:b2:a8:c5:85:e2:00:63:
         84:a9:b6:de:d3:2b:cf:d2:0e:e2:69:22:16:3c:41:f0:ab:57:
         4e:3a:eb:21:1b:c5:fd:08:ec:ef:d4:5c:ab:64:d1:6c:9a:99:
         40:7f:56:5e:97:ba:fc:e8:60:db:c8:89:45:12:ca:78:f6:82:
         08:e4:87:a3:c2:a3:e3:17:b9:e0:3e:4a:bb:52:27:4d:94:ee:
         6e:f3:94:4a:8d:3c:26:fd:3c:0b:d0:51:6e:e2:10:72:56:8c:
         1b:81:fb:5c:bf:05:74:29:ee:f0:83:44:e3:23:44:55:66:84:
         b8:5c:ed:4d:03:36:35:53:ef:34:82:dd:a8:3d:57:99:04:7d:
         b2:4b:a9:fc:75:a2:2f:fc:98:33:2f:31:17:49:3f:eb:7e:81:
         41:94:64:2f:a1:12:e9:86:60:d1:d7:f5:f7:6d:5e:c1:9c:42:
         6a:bf:d7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:19:54 2026 by rpki-client