Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9d47e563-b62f-3622-bd16-b0553b5e1fb9.roa
File:                     9d47e563-b62f-3622-bd16-b0553b5e1fb9.roa (raw, json)
Hash identifier:          IpcWE5GHhlPAvR/5f1Z4L3B8Gz0u5OY9oOMfOvjvJZA=
Subject key identifier:   E1:F2:A8:D7:48:68:F5:40:21:3D:56:97:EE:52:5F:03:F6:BF:F9:FB
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B02C758A4A1180EE1D6800
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9d47e563-b62f-3622-bd16-b0553b5e1fb9.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2602:28c:2878::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:2c:75:8a:4a:11:80:ee:1d:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=90586182-0832-42c6-9883-abff9a6adbb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:23:cd:2d:ef:09:79:61:e9:eb:45:37:da:e0:
                    1c:39:12:a8:1d:8b:7c:5e:a7:e9:1f:b9:1a:09:a5:
                    94:7d:b7:4d:46:cd:97:43:1c:8b:b0:bf:00:0a:1c:
                    a0:0c:c0:45:6a:a5:75:06:58:ce:19:00:1c:7d:f0:
                    21:f9:b9:72:42:4c:aa:e1:c6:2f:c3:c6:fb:b2:da:
                    4b:a0:75:44:98:2d:a9:cd:6b:83:ae:09:52:b5:97:
                    d8:ab:03:1a:c0:d1:1a:16:bc:13:b4:c5:b9:b2:e2:
                    ee:6e:e5:07:81:3f:8e:e8:af:0f:02:4a:a0:ba:65:
                    8a:52:e3:21:f9:fe:ae:2d:39:66:d1:eb:ae:50:dd:
                    c4:07:c3:c6:84:ab:a9:a7:94:65:7a:a5:f8:cf:af:
                    b0:dc:b9:1f:8a:9f:ee:df:8e:d9:76:79:0e:a8:5c:
                    38:e9:49:ba:47:d7:6b:93:fb:c6:f5:8e:3f:b8:69:
                    4b:9e:48:7f:44:26:72:26:23:d1:1c:82:18:ea:55:
                    f3:55:db:59:36:0d:ed:85:29:d3:89:33:c1:7e:05:
                    ee:49:12:9e:6f:9e:4d:02:2a:e5:54:e0:17:13:f8:
                    5c:63:9e:9b:5e:52:5d:37:41:3a:5d:c4:ea:e6:f4:
                    6c:45:75:bd:17:c0:ed:a4:c1:d0:0a:c6:4c:a0:ae:
                    2e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F2:A8:D7:48:68:F5:40:21:3D:56:97:EE:52:5F:03:F6:BF:F9:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9d47e563-b62f-3622-bd16-b0553b5e1fb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:2878::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:5f:8d:ec:03:82:a6:2b:c4:03:df:64:8a:80:85:c1:4e:51:
         a7:5c:de:a0:91:63:df:27:ac:e4:87:5c:01:3f:32:b9:d6:8a:
         ff:61:41:cb:2b:01:4b:13:ae:b7:e6:8d:24:da:4a:f9:9f:7b:
         90:81:64:2c:1e:6e:64:fd:df:eb:b3:b4:c2:ba:7f:0e:8d:ea:
         8a:b2:c5:13:1b:cd:df:72:90:ca:56:f4:5f:92:b7:5b:b5:b0:
         06:2e:9a:ac:49:51:2d:4e:b3:1d:dd:f0:ab:8f:5c:16:d5:f6:
         05:83:c9:5c:c4:f3:7b:f1:3f:04:2d:a1:89:50:b4:cc:6d:cd:
         da:74:7d:03:5f:a1:fc:d0:bd:13:46:0d:b4:27:19:5e:ae:da:
         b1:4d:f4:39:95:02:98:45:83:3d:fe:8e:3a:bc:74:ac:8b:96:
         c2:82:20:8e:73:5e:4d:ee:24:5b:57:6a:64:25:de:f9:88:71:
         a1:59:05:ff:42:13:42:fa:3d:d3:fa:9c:bd:42:e7:70:df:56:
         05:f0:33:35:98:62:d6:a0:fa:67:d8:54:33:12:c7:88:b5:4a:
         21:23:b5:41:4c:97:45:d6:46:71:44:d1:68:44:f7:b9:8f:a0:
         1b:34:13:67:51:b3:e1:d0:42:f8:5a:ed:f5:b7:e4:2e:c1:2d:
         59:08:b8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:33:06 2026 by rpki-client