Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c02aa951-1a2e-31b7-abaf-e129c4b52433.roa
File:                     c02aa951-1a2e-31b7-abaf-e129c4b52433.roa (raw, json)
Hash identifier:          9fDLGqyneBDnMQJzQYeea13DLvJIs0Vp4GIC6xH65eA=
Subject key identifier:   5B:8E:3C:03:17:B0:84:D6:EF:A1:CB:6A:D9:D3:6F:A6:7B:E4:E4:86
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B01CA51DF546B4F5CF9CC0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c02aa951-1a2e-31b7-abaf-e129c4b52433.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2602:28c:2659::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:1c:a5:1d:f5:46:b4:f5:cf:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=f7fa04e9-876a-4129-ae5f-10ca0f85f8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ae:99:a8:d6:86:e4:18:fb:0f:f0:99:60:93:
                    91:5b:4f:cb:74:8e:7b:ed:ef:6d:af:06:fb:60:4b:
                    5e:3a:55:73:b6:77:c6:18:62:55:18:21:ce:7f:16:
                    60:5a:25:ed:23:03:c0:f2:1a:9d:c8:a8:ba:b4:ef:
                    6d:9c:d5:a0:d9:2c:db:d1:21:da:a9:33:ab:6b:f1:
                    73:92:f7:f0:81:e8:25:ab:fc:07:6f:32:a2:0b:6c:
                    65:77:13:bf:6f:7c:87:70:0c:1c:76:21:8d:48:0a:
                    ed:15:d9:15:d1:21:93:08:f6:2d:d4:b5:b0:0d:d4:
                    d9:1b:05:5f:57:1e:3c:68:d4:10:45:3d:ad:95:8c:
                    4e:39:56:74:1b:fe:6e:23:7e:9c:6b:26:4d:a9:b5:
                    e3:b4:ab:9c:13:b6:a7:a5:20:93:9d:24:21:d4:44:
                    da:d0:ba:ec:a3:86:34:1e:ec:bf:1f:ee:aa:84:be:
                    68:e9:ad:7c:28:5e:da:e3:6b:25:d3:6a:f0:ee:c7:
                    0e:46:30:56:d5:ee:ae:2d:59:da:92:f6:d7:98:f9:
                    2c:69:36:f3:cb:d8:4b:66:1e:57:45:74:07:d3:25:
                    70:9b:a8:0d:3b:ae:43:b6:b7:19:81:52:7c:5b:5f:
                    cd:bd:67:80:f4:8f:73:82:50:88:ff:85:2a:9b:ef:
                    99:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8E:3C:03:17:B0:84:D6:EF:A1:CB:6A:D9:D3:6F:A6:7B:E4:E4:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c02aa951-1a2e-31b7-abaf-e129c4b52433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:2659::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:aa:df:35:09:04:39:34:3f:01:60:37:d8:56:69:1a:20:33:
         5f:a0:2e:c9:0b:23:c9:c2:e4:db:3c:63:b3:fa:41:f4:bc:81:
         c4:a8:a7:a2:11:df:5c:62:06:0a:fd:d1:da:64:d5:34:75:62:
         5c:b0:8b:60:9f:0f:35:84:17:f7:74:83:dc:14:a2:00:92:28:
         01:8d:ce:3f:38:a6:2e:c9:c7:c7:e0:ee:fb:35:d9:78:84:0f:
         6c:11:cb:2e:a6:2a:53:df:c8:d4:80:37:40:81:87:ec:2d:61:
         66:eb:8e:59:75:85:45:48:7f:d6:23:e5:21:2b:da:26:7e:c2:
         1c:14:de:53:43:7a:9b:b5:f1:6b:d9:4e:54:da:47:aa:0a:89:
         80:e2:34:63:9e:e1:ed:a8:be:7a:9e:83:1c:9a:ea:12:86:28:
         4f:2a:f4:da:30:ee:27:d1:bb:f0:28:5f:ca:11:11:8d:d8:e1:
         41:23:8e:a0:4d:53:a2:80:74:f8:5c:13:dc:ed:34:04:6c:9b:
         8d:15:22:ea:38:4d:dd:00:e6:a8:69:ba:1c:04:ca:9c:1e:95:
         e3:81:02:80:3d:c0:64:50:b5:d1:ca:b2:e3:52:aa:c4:5f:a4:
         f5:d8:23:d2:b7:cb:f6:60:ce:95:41:1c:d4:a4:a6:53:5b:36:
         6c:a1:c4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:05:09 2026 by rpki-client