Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/371761e2-c6a9-3677-b415-b5fea4562d65.roa
File:                     371761e2-c6a9-3677-b415-b5fea4562d65.roa (raw, json)
Hash identifier:          V2MafYHOi7MnhQU8NSrXBsJShqvQXIqsnWKTlLMV+CU=
Subject key identifier:   90:8D:40:9D:64:ED:CB:E3:9E:7D:DA:1B:B6:A4:42:F0:50:61:2B:77
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B00D7413CD324996FEF3C0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/371761e2-c6a9-3677-b415-b5fea4562d65.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        2620:147:c44::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:0d:74:13:cd:32:49:96:fe:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=9212e6e4-9b49-4898-a236-ddfd7f092eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:69:69:6b:8d:c3:15:4e:26:8a:ba:90:f3:3b:
                    8c:2a:d3:6c:b7:ce:ee:21:82:cb:4c:ff:bd:10:c3:
                    09:e7:82:36:d7:91:ab:16:c3:45:c0:30:9b:73:83:
                    5b:88:9b:81:12:4f:cc:16:5f:39:74:5a:8f:9b:b4:
                    d3:9f:17:d2:8a:13:39:d0:06:1c:32:50:8a:69:45:
                    8c:4e:ce:96:51:d4:ae:6c:45:13:c0:90:f3:66:e1:
                    82:0a:64:ba:ab:55:9b:23:f2:a7:0e:87:20:16:c2:
                    bc:39:a7:6b:47:d4:2c:a1:20:a4:d6:02:ff:90:ea:
                    fb:75:17:21:e0:39:9c:bc:fd:dc:1f:d3:ff:4f:d9:
                    7c:6b:f2:23:82:63:62:d1:59:08:e9:0e:38:00:12:
                    0c:20:1d:f3:26:c3:d3:b0:84:7b:0d:8a:b5:d9:a4:
                    22:bf:5d:04:58:2a:16:5d:c7:92:68:08:33:55:e7:
                    85:d7:72:05:00:77:8e:f7:4d:3a:2e:cd:5e:51:dc:
                    9b:c0:01:b5:17:44:1e:57:4f:ba:2d:f9:66:b1:41:
                    95:7b:42:3c:a2:cb:23:c7:10:de:08:26:af:32:02:
                    4b:5e:b6:9f:ee:c9:e7:97:87:a3:ad:be:24:ba:3c:
                    c5:5f:01:44:58:62:36:28:f2:aa:8d:45:25:39:64:
                    3d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8D:40:9D:64:ED:CB:E3:9E:7D:DA:1B:B6:A4:42:F0:50:61:2B:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/371761e2-c6a9-3677-b415-b5fea4562d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c44::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e3:14:0a:41:a7:c8:20:ac:29:07:d9:08:91:67:90:d7:8b:
         4a:7d:e2:77:fc:cf:d8:f9:28:c2:74:b8:85:f2:34:47:59:45:
         d1:36:2a:c6:65:3c:e6:15:c3:bf:fb:6a:66:a7:dc:96:14:b0:
         a6:9e:4f:1c:fe:e3:49:5b:98:c0:e0:51:b5:29:65:17:b6:27:
         fd:48:c7:4e:99:2d:92:d7:42:84:11:d3:f8:ca:1d:19:27:a0:
         54:64:76:6b:03:69:3d:cc:05:c0:ab:47:91:5d:63:76:fc:6a:
         70:42:2e:f7:96:58:66:2f:6f:40:c5:cf:ea:41:c8:26:a2:15:
         5f:a6:51:c0:18:8c:d8:a0:dd:d0:a2:10:f0:24:b0:db:a2:e2:
         af:9b:47:5a:ef:d4:59:a4:ce:8d:bc:87:18:5c:d7:cb:f3:28:
         ca:fa:1e:67:ee:ba:0a:38:3f:1e:1c:bb:89:b8:92:9c:19:14:
         aa:ba:a4:14:28:e3:e7:c1:fa:a8:b1:8f:d5:02:83:91:d6:1b:
         d4:0f:32:45:b9:84:3d:4a:98:ca:89:4f:b3:d4:99:de:dc:c0:
         24:ce:03:ad:a4:36:74:68:71:5e:01:ea:05:22:1b:a2:93:31:
         58:75:fd:d5:0e:89:0e:59:a4:dc:6c:f4:93:0f:69:76:66:f6:
         97:35:b1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:45:06 2026 by rpki-client