Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/430f88c1-ba42-3ed1-ae89-e17f33668754.roa
File:                     430f88c1-ba42-3ed1-ae89-e17f33668754.roa (raw, json)
Hash identifier:          kv29lng6jNYva0IiNgvqLTrGyYQTOnKv1QmvXV7Oths=
Subject key identifier:   74:99:14:C4:BD:EE:EA:A3:47:22:81:CE:3A:9E:27:E0:CB:E2:CF:CB
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B02E7CDB6974B6FBC069C0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/430f88c1-ba42-3ed1-ae89-e17f33668754.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     198949
IP address blocks:        2602:282:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:2e:7c:db:69:74:b6:fb:c0:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=fe4af1ec-d4b9-4151-9584-56325e63b8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a8:ed:54:a9:be:a9:ac:01:ae:b3:e5:47:96:
                    61:f9:fb:80:ca:32:c2:ba:a4:33:ef:6b:b0:d5:05:
                    0f:e1:cb:9f:4c:b0:93:57:14:e7:e1:d2:1f:16:c1:
                    67:56:71:3e:76:c3:91:f8:90:5f:2e:53:94:65:7b:
                    c6:2f:50:7f:3f:7b:12:87:5f:21:4d:30:b0:ea:f9:
                    54:b0:bb:87:69:2f:8d:a1:2d:af:de:7d:cb:75:94:
                    8f:ea:c8:dd:db:8f:5a:46:8f:7f:0f:41:64:b2:51:
                    f3:b6:4f:90:9b:02:0a:c2:5a:50:8a:8e:f2:76:21:
                    43:ba:90:f2:da:fa:5b:9d:6d:00:e2:d5:5b:fa:4d:
                    0c:a2:24:e2:d0:b4:65:07:db:c1:6c:a6:f3:a2:a3:
                    3c:70:79:a9:39:58:4e:05:24:c8:39:58:90:b6:cc:
                    ff:41:96:a4:d2:47:a5:a5:ce:f5:cd:85:a3:1e:49:
                    74:f8:ac:fd:4c:70:57:5a:75:89:f7:59:9a:c5:e4:
                    97:01:fe:db:50:1c:bf:94:bb:67:45:50:ca:96:fd:
                    6d:de:3d:32:5c:66:1c:69:6f:dc:4a:a4:d7:e7:41:
                    ba:3c:1b:7a:c5:1a:e8:3f:3b:1c:e2:58:98:0d:46:
                    87:d9:34:70:50:53:43:09:a8:16:1e:ec:0b:5c:72:
                    3e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:99:14:C4:BD:EE:EA:A3:47:22:81:CE:3A:9E:27:E0:CB:E2:CF:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/430f88c1-ba42-3ed1-ae89-e17f33668754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:282:8000::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:50:c5:08:83:3e:d7:a3:b2:f3:7f:84:7b:2d:f7:a9:71:cb:
         3c:25:99:58:c3:58:68:cc:02:7b:de:ef:61:14:9c:0f:6f:b3:
         56:b9:99:8d:a9:f9:8c:63:0b:f4:4e:c0:55:42:57:9e:3f:d8:
         38:ea:12:c4:60:1d:36:42:c2:9e:e9:74:c3:c5:de:0a:fe:02:
         72:27:91:57:f3:e7:38:51:b3:1d:60:f6:47:b9:62:df:7d:47:
         1d:86:fb:75:85:c2:a2:83:2e:ac:56:d1:12:4f:47:eb:ce:4e:
         39:dd:7a:46:e9:e7:4a:7e:cb:00:54:85:41:2a:42:2b:3d:c3:
         2c:62:54:cc:4c:41:1d:1c:b4:ea:e1:ab:c2:5e:da:1c:b9:bd:
         47:3b:60:95:b6:48:28:10:75:d9:f2:d3:12:87:a4:b8:2f:a6:
         9c:99:d7:21:e2:d3:28:06:a9:f6:57:5e:4b:80:92:13:a5:fd:
         37:61:c3:71:cd:73:7d:c3:48:20:eb:de:39:19:a0:c6:d5:f5:
         af:2c:81:18:11:cd:a6:95:44:4b:e5:11:08:33:34:a4:90:24:
         92:c1:b2:0c:ee:dd:11:b3:af:a8:52:32:90:d1:56:d8:e6:0b:
         49:e2:e1:98:b2:04:cb:47:b1:b6:87:e9:c4:11:7b:52:24:65:
         43:7d:8a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:42:15 2026 by rpki-client