Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/acf36a33-67fc-3215-9ed3-788bbc338123.roa
File:                     acf36a33-67fc-3215-9ed3-788bbc338123.roa (raw, json)
Hash identifier:          /MwWeeP1uNZu2fuYeyj1jiXBDGHtIeRit2fUEVYpxzA=
Subject key identifier:   C6:C8:FD:D0:41:A9:18:B9:7E:2B:B8:9B:AE:00:8A:EC:F7:66:19:D8
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B01833CDDB074CB7B25100
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/acf36a33-67fc-3215-9ed3-788bbc338123.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     396982
IP address blocks:        2620:147:c18::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:18:33:cd:db:07:4c:b7:b2:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=b6e47950-1f11-427f-b1a8-8c75d56956f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f9:76:e0:72:4e:ec:58:aa:73:38:84:6c:7b:
                    ca:f2:d4:b4:52:1a:a0:49:af:38:c4:d9:97:34:d7:
                    2c:cc:32:d5:a2:3c:a3:3f:dd:2d:7e:95:c1:2b:4f:
                    1e:b0:c5:b3:b7:e7:13:e7:56:6f:ee:f9:8f:a0:d1:
                    25:d0:5e:ab:30:06:29:e8:f2:24:82:06:5d:43:48:
                    64:d7:15:14:ea:9b:be:00:5b:bc:fe:43:21:b8:12:
                    e5:53:eb:05:fe:1a:25:01:44:4d:16:4b:ce:b5:7e:
                    b3:18:ea:1b:c3:2c:2c:4c:52:28:48:3f:c6:da:c2:
                    fc:20:bf:41:65:e5:40:c3:0b:ab:74:a0:1a:01:01:
                    2c:63:10:6a:b7:35:4f:23:a3:ff:b1:a8:06:3b:06:
                    a0:ab:4a:34:34:93:80:12:d8:3a:01:5b:5c:90:41:
                    86:11:5e:20:7c:0c:04:de:20:c4:59:b4:63:24:23:
                    fb:42:3a:b7:ca:80:36:2c:d6:01:9b:d9:22:36:a6:
                    c0:ec:60:05:2e:07:04:6c:0c:44:d8:c1:d0:cb:ac:
                    2d:38:a2:73:e1:a5:13:0a:7e:71:b0:89:8a:16:13:
                    df:d6:6b:11:a5:fc:58:b5:31:5c:a0:e5:2a:7f:1f:
                    e8:75:38:c0:5c:ce:4d:2a:96:67:e5:92:b9:1f:42:
                    c4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C8:FD:D0:41:A9:18:B9:7E:2B:B8:9B:AE:00:8A:EC:F7:66:19:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/acf36a33-67fc-3215-9ed3-788bbc338123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c18::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:50:d4:7b:61:ab:92:4f:9c:87:5a:c1:f4:74:32:03:9c:5b:
         fe:a9:c8:df:20:16:31:03:29:f9:95:03:0e:c6:a2:5a:31:0c:
         8e:e5:46:34:d0:f1:27:ba:8a:25:19:30:29:d6:c0:16:6e:67:
         b7:42:fa:c8:30:f7:30:2b:08:33:f4:3f:45:5a:51:c8:f5:75:
         70:ee:9e:95:3d:54:d9:70:74:6f:1a:18:2b:f3:e4:11:57:df:
         23:b5:d6:c2:8a:f1:5e:f1:70:f3:b1:30:e3:bb:66:31:ba:99:
         d1:d7:ea:f8:ab:e4:a8:db:57:59:5e:65:5b:b1:4e:f9:80:31:
         22:94:f5:5b:29:53:f4:b9:b2:b9:39:e5:84:a7:a2:bb:f7:ec:
         cf:d8:3a:9b:5c:0c:fe:82:22:b3:c2:fb:42:e1:33:12:ad:c6:
         a5:3c:7f:b4:05:5c:18:34:08:f5:98:18:33:82:19:51:62:a3:
         63:fa:20:e1:c1:46:90:16:34:aa:38:f6:a2:77:4b:62:5e:89:
         24:f4:8e:57:88:49:6e:3b:b0:ae:4f:84:b8:d9:93:6b:5c:ac:
         11:7d:15:14:8c:c8:94:97:1f:61:af:08:c7:9c:34:4d:1b:1c:
         91:c3:a1:a6:f7:02:18:b2:e0:3f:9b:f5:85:d8:97:43:6b:71:
         f6:96:d6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:03:15 2026 by rpki-client