Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c556b2e1-840f-3e72-9687-6b941796b423.roa
File:                     c556b2e1-840f-3e72-9687-6b941796b423.roa (raw, json)
Hash identifier:          k7/OhkvRW2/4VxmbRSwxYpH1eG06sVrRggi3Y7nBGHE=
Subject key identifier:   1B:52:C2:2A:F6:C4:67:AE:72:D9:D4:76:4B:61:FE:54:A9:B5:1C:A3
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B01C0052E792FA6A400380
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c556b2e1-840f-3e72-9687-6b941796b423.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        2620:147:c45::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:1c:00:52:e7:92:fa:6a:40:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=04e981e4-4826-4118-b12e-3068c6521a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3a:2a:ad:3c:ce:fa:21:d0:3b:a2:e5:01:c5:
                    88:ba:49:06:a0:e0:ad:85:18:16:21:be:2b:3d:ad:
                    12:b0:26:01:ec:62:2f:1b:95:ff:da:ec:a0:eb:bf:
                    06:6f:a9:18:91:a2:cc:7a:d5:8c:a6:37:be:7d:39:
                    6c:91:0e:e7:c2:b4:10:aa:c4:04:05:6b:27:b6:48:
                    d2:90:4e:3d:8e:7a:6e:ff:a2:ef:13:c0:87:c9:4b:
                    6e:95:b2:1f:b2:71:fa:2a:51:21:a6:26:ed:a9:19:
                    44:e6:6b:3e:e7:e7:2c:b8:44:d4:12:79:f9:05:23:
                    58:87:8b:f9:a7:01:8a:b0:e3:45:32:97:5b:27:b9:
                    48:46:0a:65:72:90:8b:67:6e:91:50:f6:8b:20:66:
                    86:2a:01:6c:ac:f5:0f:b2:dd:31:b6:90:a6:f6:95:
                    a9:6f:31:82:c3:23:e7:d5:cf:5f:d1:a5:9d:dd:ec:
                    26:b7:7f:05:c7:43:77:5c:80:7c:fa:68:5e:ee:d6:
                    ef:52:2f:f1:b9:09:0c:50:aa:90:cf:85:a8:31:5a:
                    41:72:32:73:dc:4b:00:04:5f:eb:6f:f9:9b:9c:67:
                    94:2c:cd:9c:f9:49:d8:4a:5f:f6:c1:8d:7b:75:0d:
                    99:db:84:5c:ce:d6:a3:0c:b0:e6:8a:76:d9:45:55:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:52:C2:2A:F6:C4:67:AE:72:D9:D4:76:4B:61:FE:54:A9:B5:1C:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c556b2e1-840f-3e72-9687-6b941796b423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c45::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:f1:b6:20:e3:db:1e:1b:e2:f6:8c:b3:4f:e6:ec:2f:28:6a:
         55:dc:97:54:47:f5:af:30:fa:ad:ea:0a:7c:d5:3c:10:b6:73:
         45:be:df:be:bb:ad:6e:65:0a:72:f4:23:4d:2e:01:9e:54:79:
         52:43:f6:d6:41:4b:fb:3f:03:bf:f2:14:1c:c9:17:72:70:21:
         aa:cf:37:db:c7:12:c1:49:bc:c8:f1:a6:a0:c1:98:84:85:67:
         85:3e:82:c5:b4:f5:4c:8b:26:d1:88:50:67:4a:2c:d8:d0:ce:
         b7:52:ab:5b:22:95:15:ec:52:c3:51:1a:77:4c:65:22:b4:fe:
         56:bb:23:f5:c7:da:03:32:38:5f:ce:15:38:2e:12:ba:4f:9e:
         1f:5c:6e:86:ea:39:7b:de:79:e2:fd:58:80:e1:e3:93:f0:5a:
         c4:f9:2b:72:e7:80:0a:ac:ba:36:f9:f6:61:57:11:7d:5e:0c:
         5b:c3:40:ed:6e:22:88:85:98:b6:b2:22:bf:7b:05:01:83:4d:
         69:33:d1:79:92:cc:87:2c:f7:76:bc:1d:18:6d:91:ad:44:1c:
         78:8a:9e:fb:26:bf:3f:91:d7:74:44:a3:ec:02:2a:3f:be:f9:
         56:c7:52:2e:6b:6b:5c:a6:32:d6:37:0e:19:a0:72:e8:c3:13:
         04:f0:dd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:13:25 2026 by rpki-client