Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c4a3f939-bd64-3487-a242-6fbbe2db4083.roa
File:                     c4a3f939-bd64-3487-a242-6fbbe2db4083.roa (raw, json)
Hash identifier:          nMrYr85WiIklrA+QTfP1fTQB9KI2EjEBonI42r6WdZk=
Subject key identifier:   90:09:58:0F:D0:8F:18:4B:D6:77:C1:0B:3E:E3:35:81:AF:12:A9:38
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584F2957B6C90B9A8A876A68D480
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c4a3f939-bd64-3487-a242-6fbbe2db4083.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        2602:28c:2907::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b6:c9:0b:9a:8a:87:6a:68:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=668166cf-ba97-483d-a8e7-f7d2da6b51b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2d:9e:1c:98:7a:aa:da:4d:57:04:0b:c8:9a:
                    20:8c:2e:f3:0c:1a:2a:4d:6e:52:6f:94:c5:f1:c8:
                    c8:1f:66:bc:4c:df:89:cf:e4:4e:f0:7c:63:61:eb:
                    50:48:cb:b7:ba:51:c1:2e:81:23:1d:e4:2b:e8:d8:
                    85:12:63:50:83:cc:fa:57:c8:7b:ab:ff:be:49:cd:
                    b6:5b:4b:01:94:41:1b:dc:7c:89:77:0e:39:da:83:
                    24:8f:22:e6:e6:87:e6:2c:a9:b6:7e:8f:04:6b:c5:
                    16:f4:97:55:2c:ca:3b:57:df:2b:0d:10:a0:77:c6:
                    42:74:36:02:22:9e:9a:48:cf:6f:d6:85:34:4b:f0:
                    84:9b:94:44:b8:70:21:5e:df:33:37:dc:2a:f2:49:
                    48:5b:29:6f:39:1b:af:d6:21:c5:fd:94:7a:68:08:
                    c3:9c:5c:c8:5e:3d:06:40:48:52:66:f9:a1:4b:57:
                    cf:56:ae:8e:12:71:70:14:40:75:e7:4d:d6:50:06:
                    6e:27:96:55:98:f3:5c:99:1b:47:e5:cb:ef:1d:41:
                    fa:c2:3c:e7:3e:5f:45:18:1a:11:f7:06:48:e7:fb:
                    7b:40:23:d4:fb:56:10:00:fb:0e:22:4c:40:3f:fb:
                    a6:d5:a5:d1:0b:23:68:66:05:c0:41:48:16:d0:11:
                    2b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:09:58:0F:D0:8F:18:4B:D6:77:C1:0B:3E:E3:35:81:AF:12:A9:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c4a3f939-bd64-3487-a242-6fbbe2db4083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:2907::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b8:64:be:77:69:a1:c9:3e:5c:15:ad:71:fd:70:d3:65:06:
         24:a0:29:37:fa:14:eb:31:fa:c0:e0:f7:8d:60:25:a0:2a:28:
         e7:73:7f:fb:a8:ff:2b:10:fc:57:0b:4a:79:43:aa:70:48:f3:
         e1:95:cb:7d:fe:cc:fd:e2:2a:d0:1b:93:76:ca:3d:28:08:c2:
         e7:3e:69:a9:24:d4:c4:55:3d:07:f1:28:d8:f3:98:35:6c:5c:
         58:af:55:c8:c9:52:c4:81:80:24:36:48:1e:9d:23:b5:9f:99:
         be:b2:b4:3b:c9:fc:fb:87:12:79:ae:98:11:87:fb:03:2f:55:
         63:88:3b:ee:4c:ba:cf:6e:d3:90:6b:33:19:3f:2c:7c:bb:6c:
         49:12:10:5d:02:df:09:87:40:40:8a:f1:06:07:94:79:a7:29:
         cf:a9:6b:6a:45:40:7d:21:69:46:a0:6f:f9:ce:09:2c:67:21:
         c3:97:34:d5:68:4d:b9:c1:96:c3:d6:64:3a:78:67:db:6f:66:
         86:06:b7:dc:86:d2:9c:c6:68:97:3c:1a:88:d5:cf:67:67:2b:
         21:95:1f:7e:59:82:02:66:2e:fa:c2:23:8c:1f:40:f7:4e:9a:
         c9:69:b2:ba:b4:ca:91:39:ba:14:8b:c5:16:f1:fb:2b:76:83:
         16:8a:b0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:32:19 2026 by rpki-client