Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/a64d877d-3e54-37d9-b52f-b9028e7a8819.roa
File:                     a64d877d-3e54-37d9-b52f-b9028e7a8819.roa (raw, json)
Hash identifier:          z9Kj8HFynzKuV4Io8dw6+9c+hwOzPUTlANWkPXbRk0k=
Subject key identifier:   47:18:EE:72:82:24:E4:EC:57:45:C4:54:5C:5F:13:DA:78:DD:DD:E4
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B01A3A0E1609A010F4B200
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/a64d877d-3e54-37d9-b52f-b9028e7a8819.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     198949
IP address blocks:        2602:281::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:1a:3a:0e:16:09:a0:10:f4:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=8aae464e-91ce-47e6-893c-958e89359277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ea:d2:23:d9:b7:c8:41:89:24:a0:85:5d:ed:
                    58:80:23:d4:de:a4:ac:ef:7f:46:f4:0d:1c:c4:3e:
                    b8:2f:d4:8a:26:68:72:89:b3:ab:3a:2b:09:9b:78:
                    c1:d6:57:2b:54:2c:93:35:35:2d:5c:06:9d:e5:a4:
                    91:50:4e:89:15:4d:0a:d9:21:c6:87:20:98:e2:5d:
                    5d:de:0f:b3:4b:86:40:97:65:87:17:3b:43:a9:68:
                    79:eb:bd:c0:18:a3:aa:c8:da:b8:1f:37:56:07:41:
                    a0:41:1d:ab:b1:2c:06:0a:9b:eb:9b:24:51:8d:e7:
                    6c:a5:3c:ea:21:1c:67:62:30:7f:d2:7e:0a:b3:60:
                    cd:b7:c8:8c:26:30:c7:d5:f3:13:8a:27:c6:bb:7b:
                    a1:a9:00:84:a1:e2:dd:7a:49:be:09:cf:17:ad:97:
                    9b:6c:80:a7:04:d8:5c:10:15:75:00:f4:ef:8d:a1:
                    90:8d:9b:19:6e:36:05:28:39:1d:31:7a:63:35:dc:
                    62:92:74:09:0e:de:9a:f3:37:48:10:48:c5:78:2b:
                    9b:d4:19:f2:b5:fa:7f:4f:d4:62:5f:be:f6:92:35:
                    4b:13:c5:69:0b:b9:7e:c5:a4:04:e6:bf:8f:e6:08:
                    43:5f:34:ab:d6:a8:a3:ae:50:39:63:6f:c4:c1:8d:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:18:EE:72:82:24:E4:EC:57:45:C4:54:5C:5F:13:DA:78:DD:DD:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/a64d877d-3e54-37d9-b52f-b9028e7a8819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:281::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:23:21:9f:a9:1d:aa:8f:cb:4b:8b:9b:0c:7b:c5:66:82:81:
         92:04:1c:ce:21:6b:9c:7a:6b:b3:ea:05:04:bf:53:e0:26:bc:
         bc:b4:75:cf:0d:ab:fa:71:aa:90:1d:19:f2:17:0a:f7:94:16:
         ca:2a:4a:cc:49:fa:f4:6b:27:92:f0:27:19:c2:1b:42:3d:4c:
         48:a6:a3:8a:b9:9b:31:90:40:62:e1:70:d5:9a:4a:ca:60:16:
         4c:44:91:2e:38:3b:f3:19:53:87:8e:4a:64:83:a8:a1:1b:ac:
         8e:97:a5:58:98:83:c9:47:2a:b3:69:73:c9:08:11:9f:ee:23:
         cd:d8:2b:e0:62:59:26:ce:35:b8:36:fe:a8:44:9e:57:a5:bf:
         8e:0a:22:59:52:5a:4f:75:ae:fe:31:26:d0:93:ae:44:b6:20:
         39:af:ca:35:7b:49:ab:67:40:81:fa:f5:68:63:24:67:c6:06:
         22:4f:c6:f8:25:89:db:36:66:8a:49:4d:4a:e4:56:bc:f2:8a:
         f9:1f:74:e7:75:b5:d6:77:1a:a1:58:19:2b:70:c4:15:b7:fa:
         1b:83:6d:1c:93:02:69:38:58:dd:bb:4e:41:3d:cf:23:ec:05:
         78:8c:17:1c:3e:63:44:69:48:21:72:81:e5:86:7e:83:c1:a1:
         79:62:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:08:25 2026 by rpki-client