Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4fca7263-a412-3fbe-bb79-2fa9f01fa83c.roa
File:                     4fca7263-a412-3fbe-bb79-2fa9f01fa83c.roa (raw, json)
Hash identifier:          p6lPaaqt5pYouBD3hTHyrCCNf0LHCAoRwNEZXdj7Jjc=
Subject key identifier:   A7:14:5C:E4:AA:EA:E6:DD:59:6B:75:91:BC:53:2D:87:41:92:89:40
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B02C688574410031002D80
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4fca7263-a412-3fbe-bb79-2fa9f01fa83c.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     198949
IP address blocks:        2620:147::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:2c:68:85:74:41:00:31:00:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=4daa6b77-a401-49c2-9b1c-673fe244ce97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:03:c7:68:d8:35:46:6a:99:4f:27:1a:cb:19:
                    a6:2e:57:b4:2f:fb:b8:a4:3f:3a:8e:c9:7c:f8:7f:
                    cc:ff:22:17:8b:76:71:b9:76:ee:ef:88:8e:08:db:
                    ba:21:de:ef:53:e8:38:1c:a7:6a:2d:8f:90:0d:f1:
                    7e:c3:0c:86:1f:2c:91:23:c3:7a:fc:b1:3c:1d:4e:
                    eb:78:de:9d:70:78:c3:fb:13:01:5e:9b:7c:d6:5f:
                    ad:0d:8a:f4:01:b7:d5:08:f6:45:98:58:d4:c1:a9:
                    c5:7a:45:79:ba:75:bb:02:b0:47:49:b5:c3:1c:d3:
                    b9:be:5e:6b:b6:1d:dd:79:01:97:32:d6:23:a5:20:
                    b8:e8:84:0a:36:c7:f7:4c:e6:eb:3d:fb:27:e6:1d:
                    4c:e4:a6:8a:b1:9b:0c:61:7d:d9:0a:24:b6:6e:5b:
                    ce:a3:67:09:b7:4f:a7:73:62:6c:cb:16:bf:01:db:
                    e7:e4:b9:02:ae:d9:3b:c5:0c:d8:fe:47:7d:6b:0c:
                    45:d0:fd:8f:f5:c3:0d:99:56:56:97:73:ab:1a:3f:
                    22:d0:61:f7:c6:5a:56:85:36:ad:a3:cc:e7:46:d7:
                    14:1e:16:17:d6:99:97:2e:70:08:89:11:d5:1e:d2:
                    95:ff:b7:b5:f2:0f:f6:af:89:eb:3a:37:5c:e0:50:
                    07:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:14:5C:E4:AA:EA:E6:DD:59:6B:75:91:BC:53:2D:87:41:92:89:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4fca7263-a412-3fbe-bb79-2fa9f01fa83c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:be:df:e1:64:00:c8:ee:77:c8:da:c7:ba:d0:f6:6f:9a:55:
         62:6b:5b:fa:32:4b:dd:89:a3:b0:b8:a5:47:d2:d8:67:87:32:
         cf:b3:1b:ac:85:28:1b:21:1f:57:c6:3c:86:5e:ad:ad:f6:4a:
         a9:58:17:52:02:51:e5:b3:4c:fc:a3:d5:a6:08:ad:5d:bd:3a:
         94:c3:c9:5d:4f:79:33:b7:6f:b3:38:f3:54:d2:55:f3:16:0c:
         79:ae:6e:96:bb:f3:03:fe:0d:b2:98:ac:bf:bd:5b:65:ab:50:
         d9:89:9e:fc:27:6b:39:1f:e7:32:ed:a0:f7:70:48:5f:f0:77:
         21:61:15:fe:3d:39:89:bc:70:4b:b3:96:a7:b7:71:ef:cb:60:
         ce:25:4c:39:06:c3:a9:dc:8f:8f:77:a2:82:5d:2b:54:b1:b0:
         3d:d5:3b:a2:b5:92:74:7c:89:9c:e9:3b:e9:05:bf:5b:22:55:
         f4:aa:22:2a:89:ce:de:31:9c:eb:59:dd:c3:3f:60:38:4f:07:
         59:3b:fe:36:43:c8:b1:8a:ff:63:42:7f:86:07:e3:d8:f0:86:
         0c:28:10:2d:6b:21:d0:9f:c7:6b:bf:c9:c1:1f:f4:c9:f4:0a:
         36:2c:03:5c:88:3b:23:02:8b:e7:6d:e9:44:01:6f:8b:a6:e6:
         b5:15:1e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:12:49 2026 by rpki-client