Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/430f88c1-ba42-3ed1-ae89-e17f33668754.roa
File:                     430f88c1-ba42-3ed1-ae89-e17f33668754.roa (raw, json)
Hash identifier:          hprcWoWQgY6CfeLDjYAuryzhQqU075RjPzdRXoAFF2I=
Subject key identifier:   AB:E3:EC:BA:2A:1C:0F:AB:15:6E:A9:8E:2C:96:4F:32:10:F2:8D:E7
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584F2957CD1A432354B9E1573300
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/430f88c1-ba42-3ed1-ae89-e17f33668754.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     198949
IP address blocks:        2602:282:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:cd:1a:43:23:54:b9:e1:57:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=7828b4f3-d3cf-415f-a722-5bf72d754cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fd:dc:61:a2:a5:5b:e4:47:e8:c0:c4:08:a1:
                    a5:3f:3a:25:a2:45:84:db:11:08:aa:c9:e4:93:b1:
                    ea:47:49:60:3d:12:01:2c:0f:d1:59:a1:a3:a7:f1:
                    ef:b5:50:15:c5:c8:88:f9:22:bf:1a:d4:b3:24:89:
                    03:ce:b6:f0:1e:e7:d4:7d:42:07:55:d9:d8:fc:3a:
                    d5:86:5c:f6:a3:30:94:9c:67:93:81:86:f8:b8:ca:
                    68:46:ac:e5:45:63:2e:bd:a6:18:74:ad:13:45:2f:
                    7e:09:65:30:3d:46:e1:80:46:b9:ef:98:bf:a3:30:
                    b9:d1:07:70:05:7e:2d:40:39:dc:b7:7d:cf:14:b9:
                    2b:58:b7:53:a7:1d:fd:57:af:50:21:cb:c2:6c:8d:
                    a4:6a:71:d7:ae:5f:44:64:21:f8:2f:70:b5:45:4e:
                    ca:79:d0:bd:4a:48:67:b6:72:bf:56:7f:1e:d9:6e:
                    66:56:f3:b6:f8:e5:8c:31:04:e0:33:0e:06:24:60:
                    19:e3:08:2c:01:ce:eb:6c:7a:17:de:93:7f:c1:7a:
                    df:e5:6a:4d:bc:e7:13:78:7c:5f:c4:71:b4:9c:06:
                    37:06:da:5a:09:41:fb:4b:b1:41:a9:c2:9f:fe:4a:
                    9e:8d:89:41:2e:fa:57:2d:b6:18:24:ac:3d:be:e4:
                    7f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E3:EC:BA:2A:1C:0F:AB:15:6E:A9:8E:2C:96:4F:32:10:F2:8D:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/430f88c1-ba42-3ed1-ae89-e17f33668754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:282:8000::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:3a:69:fa:3e:bd:ce:c8:d7:8d:38:c7:1c:2c:b2:98:52:8c:
         55:59:7e:01:98:48:cf:fa:01:75:8e:98:f0:4e:84:39:90:18:
         9b:5c:98:d0:67:c0:e9:a8:f1:01:84:31:e3:42:14:51:66:0a:
         ff:58:a7:bb:8c:1d:a6:ab:55:20:f7:36:ea:07:2f:24:eb:9d:
         f0:a4:ad:ce:e5:67:62:4d:55:e7:1c:c1:d5:44:62:79:f1:3d:
         88:a4:0c:c6:02:11:6e:5d:91:e2:29:14:4e:f3:39:26:2a:cc:
         b9:11:88:31:2d:da:cd:fa:87:cc:66:18:91:71:fb:6b:1f:da:
         94:a4:0f:e3:aa:61:7c:29:fe:1b:be:b5:f6:31:06:f5:ff:6f:
         00:f4:e3:97:e7:98:0c:75:03:d4:13:5c:6e:dc:af:72:4a:69:
         00:b8:51:67:a5:a9:5e:a2:ac:95:be:9a:b6:72:56:3d:b6:c6:
         6b:39:de:f5:4a:b7:23:f0:db:f9:2e:ee:cb:4f:36:e1:3a:c2:
         74:88:20:c0:20:dc:06:7c:5e:9d:a5:49:8e:e2:ba:0c:78:93:
         0d:4b:1b:6e:1e:76:97:98:ad:fd:6d:88:8d:81:d4:4a:1f:24:
         e1:0d:64:7b:09:dc:35:8a:33:8f:f7:76:20:78:a0:f9:fc:a6:
         69:6d:74:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:05:10 2026 by rpki-client