Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c1927c03-d30e-3876-ba5f-04578e737d61.roa
File:                     c1927c03-d30e-3876-ba5f-04578e737d61.roa (raw, json)
Hash identifier:          dlb8t9kUmpPw3H2y7mjQfRqn3ViaFZxOPe6r5tea1Iw=
Subject key identifier:   D9:60:08:15:19:11:F0:16:B6:AF:93:33:6E:0D:31:AD:36:7B:10:55
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B0196D22131D128F163700
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c1927c03-d30e-3876-ba5f-04578e737d61.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2620:147:c35::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:19:6d:22:13:1d:12:8f:16:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=450eac25-5f6d-44f1-97e9-5503fdf66c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e8:89:ec:50:70:80:d3:42:55:7c:b7:c9:b6:
                    3d:b5:cb:21:ee:22:f7:7f:8e:aa:e6:6c:e9:7f:8b:
                    fd:73:a6:96:59:8a:9e:0b:f8:e4:a8:3c:c1:c1:79:
                    5d:f6:1c:21:c7:06:17:22:d6:ff:b3:4c:ff:fc:28:
                    ac:8c:03:72:ec:69:39:7b:10:c1:f2:14:e3:9e:1d:
                    1a:2e:d6:72:99:14:3b:9b:b4:85:de:b8:b6:43:89:
                    2a:90:5f:b4:75:ad:49:3f:8e:87:76:f4:37:8e:df:
                    71:2f:ff:3d:4f:22:c1:a7:bd:c0:d8:c1:bc:ba:c1:
                    7b:5d:28:57:32:b9:89:e0:97:e6:ef:3e:32:7e:9e:
                    4e:87:5b:7d:4d:42:82:ef:f0:13:07:d5:ad:24:34:
                    80:42:55:6b:08:6c:c3:72:f6:69:46:1c:dd:23:0f:
                    52:0d:23:31:b8:be:07:e4:89:c0:08:6a:6f:2b:81:
                    84:31:2e:8d:2a:31:0b:e8:de:07:97:14:a0:3b:36:
                    1e:e7:83:1f:7a:a5:f0:7c:7f:17:5b:a3:5b:51:1a:
                    11:27:ac:d9:49:2f:3f:89:f8:08:ef:13:f4:ee:77:
                    db:18:12:c8:c8:9e:6b:a1:f2:0c:ea:d3:9c:25:3b:
                    01:46:3b:17:12:aa:8e:65:91:d7:ab:dd:b1:b7:1a:
                    57:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:60:08:15:19:11:F0:16:B6:AF:93:33:6E:0D:31:AD:36:7B:10:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c1927c03-d30e-3876-ba5f-04578e737d61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c35::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:80:3e:e9:86:fe:1c:f7:78:b4:77:36:5e:18:53:11:24:32:
         be:0e:65:6f:43:2b:c9:8a:93:70:4a:5b:9e:42:92:71:08:24:
         db:2a:8c:2e:c6:57:36:dd:59:1a:65:75:08:7a:9e:6b:7d:39:
         30:5e:0e:35:e8:4e:3f:24:88:22:35:79:00:a0:27:70:cd:da:
         1e:aa:1b:af:ed:be:fb:79:99:3e:db:62:fc:ea:4a:00:e1:b4:
         64:d1:56:fd:ab:d1:29:ab:6a:9f:44:6f:a0:0b:e0:52:e8:5a:
         90:13:17:13:46:d4:1b:1c:40:e5:a6:fe:c6:1d:c3:d1:29:ed:
         80:7b:1a:f7:4d:4a:d9:84:e6:dc:f4:60:22:cb:a3:2d:96:a3:
         3e:01:ac:a8:69:20:f7:70:70:8e:10:52:1b:18:9c:eb:a5:b6:
         45:34:a3:cb:fb:0f:60:cd:80:1f:84:96:d5:84:87:b2:96:0d:
         54:13:47:1c:9c:ef:45:a3:6d:b9:6e:78:77:0a:c8:59:2f:b4:
         5d:87:81:e7:61:8d:4e:b9:4d:a6:cc:0e:b3:06:84:b0:96:9a:
         23:91:e6:25:ae:16:33:bb:e5:7b:0f:8d:b3:2d:04:f8:0f:59:
         83:0f:f0:e1:51:45:8b:82:15:c9:9d:fb:20:39:c8:83:d2:01:
         28:00:f2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:38:24 2026 by rpki-client