Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/5d46bb36-c6a2-3de1-95de-7c93a502f975.roa
File:                     5d46bb36-c6a2-3de1-95de-7c93a502f975.roa (raw, json)
Hash identifier:          ChiBN66r2FNAPv5IdK3kTzaI+GpJeImpNULm0BYsYio=
Subject key identifier:   14:EE:23:9C:5B:48:11:7F:4C:16:9E:EF:62:7A:ED:17:34:C4:84:16
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B018814B65CF3F1FA11C00
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/5d46bb36-c6a2-3de1-95de-7c93a502f975.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     198949
IP address blocks:        2620:147::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:18:81:4b:65:cf:3f:1f:a1:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=c4dced1f-995c-4690-a88f-d3d950be9156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8a:16:97:9e:2d:87:f2:cf:5a:26:56:d4:80:
                    db:fc:ec:6f:df:b9:f2:24:ff:eb:36:47:b7:ae:7f:
                    bc:b0:84:dc:e0:30:55:1e:13:8a:24:88:09:c1:0f:
                    c6:5a:0f:5d:f9:77:38:31:f9:5e:45:26:5d:41:03:
                    51:91:ca:86:84:81:62:9e:ed:7e:b6:8f:fd:f4:ee:
                    01:5e:d8:d6:d9:03:f7:19:b4:39:5a:f5:22:41:b8:
                    e3:15:d9:c1:2d:4b:ef:66:ec:47:8f:14:a5:8c:e7:
                    d4:b7:34:b9:9d:86:4f:50:57:99:f3:ac:ff:f3:23:
                    af:e4:3e:46:28:69:88:d8:15:84:cd:5b:44:46:86:
                    77:20:0a:d8:84:7e:bf:8b:c7:7c:55:1e:03:f1:d9:
                    7c:1d:70:9d:04:53:9e:74:9e:61:91:62:09:8c:52:
                    03:84:95:ea:81:25:3d:07:e4:ff:f4:c7:49:be:da:
                    43:c5:e6:38:b5:f7:74:26:34:db:5f:c3:19:69:5c:
                    d5:a5:31:35:c2:0e:4d:d0:b2:70:95:2a:6d:29:95:
                    cb:c3:39:eb:a6:53:7f:1f:fe:60:ab:c0:1f:23:82:
                    71:da:2d:93:15:2b:a6:ed:d7:2b:d3:02:a5:78:33:
                    73:d5:61:68:5d:8d:9e:e4:a2:2a:d1:73:9f:a7:32:
                    2b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EE:23:9C:5B:48:11:7F:4C:16:9E:EF:62:7A:ED:17:34:C4:84:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/5d46bb36-c6a2-3de1-95de-7c93a502f975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:94:1b:2f:03:7d:88:a1:46:04:5f:83:b4:8c:f4:09:14:3a:
         75:de:f0:ea:c9:09:17:5b:d4:98:60:7a:11:38:9f:0d:b8:40:
         0d:77:d2:26:84:ac:85:0a:0f:e1:3a:65:db:9d:82:21:a9:66:
         63:fe:2c:d2:b7:8a:77:10:bb:2e:7d:62:32:a5:64:f9:0e:7e:
         1c:0f:c8:8c:db:82:e2:d5:23:e3:ae:d0:fe:bb:9b:2e:2f:44:
         dc:bc:e9:13:d2:c5:f5:9a:26:ff:bb:a3:46:81:8d:47:63:7c:
         fe:79:d9:22:42:12:2f:01:81:6e:89:ce:97:e4:1b:01:2e:2b:
         0d:23:95:7d:f1:91:07:a8:54:65:e3:8d:07:c1:77:5e:71:35:
         2e:c8:d7:b4:aa:ca:61:ca:6d:58:2f:dd:41:1c:12:e7:74:85:
         2d:a4:69:64:fd:e1:97:6f:4f:5c:20:a6:06:c9:40:28:ec:50:
         d7:70:c9:2f:41:45:fa:3a:e0:cc:f2:42:82:06:a8:7e:63:21:
         83:98:43:3b:f0:23:44:81:a2:1c:dd:0f:bb:7a:5e:0d:ea:19:
         1b:a4:d0:ad:e4:7d:d1:4a:e1:d4:29:11:aa:e5:72:eb:cd:a6:
         ab:37:4b:bd:51:a3:cf:a8:5f:26:17:65:2d:6f:86:f4:5f:a2:
         8b:5e:3d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:10:33 2026 by rpki-client