Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/653a6050-4139-3e32-8979-ff2a401ebfeb.roa
File:                     653a6050-4139-3e32-8979-ff2a401ebfeb.roa (raw, json)
Hash identifier:          uLhg9MbCJnF96PJ9JQH2yiGCZiFLZ1fZMBeqyqtpCb4=
Subject key identifier:   9C:D8:D7:74:0A:98:CA:63:EB:DB:3D:96:E4:71:CE:DE:EC:46:24:BA
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B02F2E204D26AA81065980
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/653a6050-4139-3e32-8979-ff2a401ebfeb.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2620:147:c11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:2f:2e:20:4d:26:aa:81:06:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=eb8db0eb-2f84-4257-9255-7d1281933ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:9e:03:a0:01:08:6e:33:26:06:c2:49:68:
                    0a:8b:9e:5d:19:01:8d:98:77:21:3b:26:d9:92:ca:
                    e1:e1:48:2c:39:87:85:1b:10:8c:98:55:b8:9d:4b:
                    01:71:3d:3f:f9:7c:06:5b:f8:eb:15:4c:a9:dd:7a:
                    c3:2e:c0:9b:8a:5c:a6:b5:7b:e6:2d:03:68:19:ad:
                    1d:14:c4:72:1c:5a:cf:b7:4d:43:f8:ce:56:ad:cb:
                    3f:34:16:42:b1:0d:19:83:38:8a:1a:ff:ae:09:f2:
                    3e:b9:a9:c7:e2:d0:68:3b:40:20:0a:11:e8:e3:e9:
                    95:ec:a9:ae:03:46:b6:6c:37:77:39:6e:13:3d:fe:
                    2a:11:a6:2e:d3:29:83:fd:f6:48:76:ef:fc:93:3b:
                    77:c0:c6:6c:44:e0:7c:19:93:e3:ab:9d:b8:d1:13:
                    cc:d0:55:11:09:fc:69:8f:67:06:e3:6b:ac:68:53:
                    2f:f2:c9:43:18:ad:aa:6c:9f:9e:b1:36:bb:93:85:
                    d7:75:62:96:44:98:ac:84:be:74:f5:c6:bf:a0:a5:
                    87:9c:c7:49:be:85:af:bb:0b:b5:7e:af:be:4d:8b:
                    30:a9:85:4a:eb:92:a3:5c:b0:1d:7f:46:32:c9:28:
                    63:ce:66:2c:69:58:9e:66:2d:a1:40:5a:8a:52:f5:
                    96:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D8:D7:74:0A:98:CA:63:EB:DB:3D:96:E4:71:CE:DE:EC:46:24:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/653a6050-4139-3e32-8979-ff2a401ebfeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:6a:ee:4c:88:5a:5b:57:fa:ab:f5:63:cc:b4:7c:e3:6c:1e:
         c3:79:d5:29:48:84:56:f9:1a:8f:7c:66:b7:83:9f:21:6e:42:
         96:aa:ed:0f:67:31:67:d1:e9:6e:94:7a:93:4a:2e:8b:66:51:
         d9:62:18:6d:37:7d:24:97:28:45:cd:bc:0e:f3:9a:a3:ed:a4:
         99:74:37:f6:00:3f:a5:99:78:c2:5f:d6:74:84:84:d7:8c:0a:
         3a:d0:60:bd:ae:03:70:0c:84:74:93:cc:b7:67:90:32:95:ea:
         56:25:74:b7:5f:1a:62:bc:dd:6a:16:c9:01:ad:ed:8a:a5:25:
         a8:c8:cc:b7:8a:01:22:5c:04:0e:de:3a:38:9c:31:d8:81:3b:
         84:14:d6:d2:d5:0f:53:df:6e:3c:e3:69:92:49:0e:09:09:80:
         07:cb:f3:cf:fc:9b:e2:4b:b1:45:87:e5:af:4d:65:13:58:71:
         cd:2f:29:a7:21:53:ff:68:48:cd:ad:65:b0:23:26:64:57:cf:
         f0:dc:2b:85:a3:36:87:99:a6:3b:f3:2c:39:a3:43:a1:23:12:
         e2:c2:87:f4:97:95:29:2a:46:66:41:a2:80:79:58:3a:01:7f:
         d5:35:f2:b5:0a:48:e5:71:7a:ac:db:85:af:2e:23:f4:e0:8b:
         9a:3a:d7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:33:01 2026 by rpki-client