Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/965eb1f2-d794-321f-a073-0ff3a63ce4fb.roa
File:                     965eb1f2-d794-321f-a073-0ff3a63ce4fb.roa (raw, json)
Hash identifier:          fwcHOLel3L+qKO+P9VRrdaaigBOapY5KXdDYp4+MHZE=
Subject key identifier:   EF:18:1C:E8:89:01:F7:A4:67:C7:5B:9E:37:2A:D0:85:0D:F2:DB:B5
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B01842F211C550E78A3610
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/965eb1f2-d794-321f-a073-0ff3a63ce4fb.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     13778
IP address blocks:        2602:284::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:18:42:f2:11:c5:50:e7:8a:36:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=dd227144-b053-458f-ac2e-87df96f6cf71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a7:57:25:0a:e8:62:ac:ef:1e:dd:92:70:e1:
                    3a:2d:ae:63:4a:5f:2a:1f:89:53:13:ad:7e:2e:7e:
                    38:1d:0e:8d:8f:c6:ae:87:39:0c:45:aa:0b:b8:11:
                    44:1f:02:fd:3c:1c:4c:04:28:3b:7e:db:4a:3d:a1:
                    aa:d5:9d:52:af:85:5e:20:f2:68:67:d1:9c:16:5d:
                    5b:86:57:1b:dc:09:e0:01:35:cb:57:f8:e6:e1:9b:
                    6f:a1:88:e1:e5:19:56:28:92:6e:48:79:51:5c:11:
                    00:ac:8f:a0:a9:d1:85:59:08:a2:5e:d2:8b:c7:7f:
                    da:c4:8c:0b:fd:b4:57:1f:eb:0c:82:59:0e:6a:be:
                    68:de:22:6c:a9:4c:d3:eb:40:9f:bd:f4:70:92:93:
                    a2:4d:3a:96:5c:49:63:57:a3:df:d9:e1:78:30:e6:
                    93:3f:54:d9:25:54:40:9e:be:1b:7c:ae:ee:ef:52:
                    54:ce:85:29:42:03:9b:e2:76:88:c7:e1:5d:20:a4:
                    be:2c:2d:a4:1c:b8:94:4b:8b:83:7e:9b:c7:15:be:
                    e8:8b:9f:e8:27:8d:91:f3:69:8b:a1:32:8c:ab:b7:
                    f5:eb:0e:7a:02:60:2f:42:77:3a:2f:fe:7a:ca:25:
                    8c:a1:31:1d:b8:ad:53:59:69:04:b2:ce:d9:50:77:
                    52:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:18:1C:E8:89:01:F7:A4:67:C7:5B:9E:37:2A:D0:85:0D:F2:DB:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/965eb1f2-d794-321f-a073-0ff3a63ce4fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:284::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:09:ad:54:1f:1f:3a:cf:8e:2e:79:3f:be:e3:26:37:c7:3b:
         34:a4:89:1f:05:59:1a:e1:88:7f:72:88:06:2f:d9:bf:b8:26:
         17:2d:26:a0:0d:e6:5c:ad:ce:c0:ff:cd:76:a2:d9:bd:7d:21:
         4d:60:d6:a4:96:22:ac:36:28:30:c2:6d:0c:0a:d3:79:30:97:
         1f:51:a6:d4:82:19:b9:1a:6d:9e:81:ad:ed:78:f2:d4:94:8b:
         aa:ae:e9:60:5d:f7:a7:d9:3d:34:8b:de:40:88:d9:10:a5:27:
         30:c7:e4:d0:b0:17:8a:92:5d:58:6f:b1:29:79:70:66:7c:b9:
         1c:b0:0c:0b:9d:47:80:fc:aa:a5:2f:7c:07:0b:aa:a4:19:60:
         4d:07:53:ee:4d:6e:da:5f:71:72:dd:8b:11:b3:2f:2c:00:c2:
         6a:f4:66:1f:a0:88:5a:ca:ea:3f:57:5c:5c:e8:0a:8d:5a:a3:
         eb:ed:41:a7:bb:1f:0c:74:6e:dd:37:19:b7:02:08:af:42:26:
         27:2e:9c:53:97:1f:3e:7b:2d:d8:fa:a0:da:dd:17:99:61:e1:
         7f:66:6a:af:f4:d5:36:f1:f6:5b:98:a0:af:fb:af:12:6d:b0:
         28:ff:99:3c:88:fd:66:dd:2c:dc:49:82:b2:06:cb:1c:5c:5c:
         b0:92:12:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:45:15 2026 by rpki-client