Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/be030f54-2779-32d8-95f2-d794ece7585d.roa
File:                     be030f54-2779-32d8-95f2-d794ece7585d.roa (raw, json)
Hash identifier:          uqt7rwlUNg1WpwvBQPILIKQLZ1F6Q8szeJrqbHKIpds=
Subject key identifier:   72:C3:E0:B2:DE:D7:35:2D:6F:EB:A7:17:BC:33:21:77:7F:FD:E6:79
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B00BD19AA22EEF08D79580
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/be030f54-2779-32d8-95f2-d794ece7585d.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2602:28c:2655::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:0b:d1:9a:a2:2e:ef:08:d7:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=c71e1e86-c085-4573-bf26-5a3f35dcbda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b5:0d:9b:45:62:77:2e:86:30:be:77:c9:a3:
                    d3:03:ae:68:af:4f:9b:42:62:67:a1:28:c4:0b:29:
                    77:78:fb:22:ef:36:99:90:76:c0:cd:86:dc:7f:a1:
                    59:21:08:a3:c4:85:d6:d0:38:56:1c:be:51:1c:96:
                    fd:29:67:3d:28:bc:1e:e8:0a:ce:fd:a9:44:f2:d0:
                    39:2f:09:c9:26:14:61:1b:b9:38:49:27:e7:c6:9a:
                    b0:ae:9b:7b:7e:c8:d5:db:99:02:ef:01:7d:60:9a:
                    48:d4:01:76:b5:18:a7:86:9a:a7:58:12:19:e1:27:
                    2f:c9:cb:02:8a:ab:ad:ec:17:30:55:42:dd:c4:0a:
                    71:29:22:4a:f4:82:dd:3f:eb:56:7b:78:3d:12:85:
                    b9:c1:50:f0:3f:ef:b7:6b:5f:8c:21:45:16:25:52:
                    f4:91:85:8f:0a:65:27:70:72:a2:72:00:fe:50:01:
                    c3:e7:82:97:4d:49:d3:10:b2:1f:a5:34:09:78:ee:
                    3c:bc:3a:42:33:37:c0:98:35:2a:2c:0c:06:86:1c:
                    12:a3:8f:33:62:47:96:df:28:19:88:90:51:86:98:
                    d2:6c:d9:18:63:b9:46:3c:e3:34:f7:1f:c6:4f:a7:
                    88:7f:ed:4d:d3:94:6a:67:de:4d:52:8a:7a:4d:6a:
                    c1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C3:E0:B2:DE:D7:35:2D:6F:EB:A7:17:BC:33:21:77:7F:FD:E6:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/be030f54-2779-32d8-95f2-d794ece7585d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:2655::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:79:1d:05:b2:da:df:06:73:c8:b6:21:29:13:36:df:be:f4:
         fe:79:25:ec:bd:59:ec:fc:4b:5a:85:ae:24:fb:33:e9:6e:07:
         c5:8d:e6:cf:47:9b:f1:c8:24:96:3a:9e:7b:4c:6a:2f:98:6d:
         5b:87:a3:9b:25:51:ab:8a:df:d8:99:da:a9:5a:bd:15:57:bf:
         79:98:95:52:6a:8d:3c:10:bf:a5:2d:ce:a0:8f:c6:ff:9b:42:
         d0:de:3c:b9:d8:b8:7d:d5:7c:f3:86:96:b7:cf:50:37:ac:ff:
         64:99:ad:c3:84:d0:a2:66:c1:21:99:99:fa:ba:d6:d8:66:12:
         b8:bc:49:d7:4f:e2:06:db:c1:a6:c5:61:e6:89:4c:df:e0:40:
         74:87:07:e2:85:9d:8b:73:90:28:fa:dd:02:26:c0:0c:42:24:
         21:cd:ca:61:27:de:f7:ec:0b:aa:4c:b9:11:0c:43:b7:34:af:
         2e:fc:62:90:a4:47:7f:d3:5c:ce:5e:ea:e9:50:d4:bb:1f:89:
         ef:41:15:db:90:f5:37:2e:24:8e:f8:08:73:70:4a:8a:6d:fa:
         78:87:1f:b5:22:2e:a0:c8:9d:16:93:13:29:a0:6c:bc:05:88:
         a6:ca:e8:ae:9c:3e:1a:c6:a2:91:e2:ab:a3:a8:d0:5e:7a:24:
         13:82:22:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:34:33 2026 by rpki-client