Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c5855ddd-e0f7-3d4c-a3ce-546353d7e0e9.roa
File:                     c5855ddd-e0f7-3d4c-a3ce-546353d7e0e9.roa (raw, json)
Hash identifier:          0pA2ymo8v+6R8t6eOz6G28+AqJWs78atp0kGM6OmRaU=
Subject key identifier:   85:EE:F5:9E:E4:67:8C:D4:88:E9:1B:08:89:CF:08:3F:E0:9F:2E:B0
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584F2957CA4EAF6FA76A6DF2E480
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c5855ddd-e0f7-3d4c-a3ce-546353d7e0e9.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        2602:28c:1228::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:ca:4e:af:6f:a7:6a:6d:f2:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=f08a2951-fc9a-4322-931f-2e79dd910a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:75:af:76:09:5d:90:29:b8:04:2c:cd:47:
                    60:2d:93:90:80:4d:33:a2:e0:07:6a:72:4d:fa:65:
                    07:43:21:b7:ad:23:68:69:7f:ec:38:9a:f2:80:ea:
                    62:21:5a:ed:db:ba:7e:1e:6b:c8:d1:5e:7f:d0:25:
                    db:1b:d8:fc:63:65:03:90:05:d2:62:cf:2d:37:b6:
                    a0:b5:f7:95:88:23:3e:c8:5b:f2:68:21:55:02:a0:
                    77:1f:ea:a2:58:75:74:67:ec:a6:97:90:53:20:b6:
                    d1:f3:f3:e1:43:9d:7b:f3:dc:66:cf:a0:7c:78:38:
                    77:5b:b9:ab:c2:d0:91:59:eb:a8:43:88:3e:6a:95:
                    03:96:fc:9f:11:01:f1:08:1c:61:a2:5a:c6:59:10:
                    a3:5a:6c:18:e6:6d:24:5e:6f:60:ca:28:a2:0c:a0:
                    79:ea:fd:a5:40:14:42:77:fb:be:4e:33:e9:8e:fe:
                    d7:82:20:39:9f:5b:f0:cb:92:a2:bb:75:02:0f:4f:
                    ce:a2:ef:18:8d:63:6a:8a:6e:ea:57:77:4b:d1:af:
                    99:af:fd:02:e6:dc:f2:6f:47:38:99:3f:f5:3b:08:
                    1a:58:48:5d:98:7f:d1:00:74:b8:bc:31:c2:44:60:
                    97:00:2e:be:0f:8d:48:b9:11:9f:44:f5:a6:0e:7c:
                    89:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EE:F5:9E:E4:67:8C:D4:88:E9:1B:08:89:CF:08:3F:E0:9F:2E:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c5855ddd-e0f7-3d4c-a3ce-546353d7e0e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:1228::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:99:a6:69:f8:a4:e6:3a:d5:f2:5a:19:cf:c8:2e:5a:42:3f:
         d6:cf:0f:31:32:70:0c:f5:b2:cf:4e:d7:1a:8c:b2:e6:37:3a:
         f0:30:e4:af:c6:fa:9e:89:9c:60:ba:0a:e2:13:56:4c:e7:21:
         67:64:cf:6d:e3:99:8c:06:9f:d5:89:ed:8a:1e:df:68:b0:09:
         c3:80:d2:73:bb:64:a0:44:a2:20:48:1f:83:cb:55:77:96:84:
         3c:6c:fe:c5:a5:99:df:f8:a9:48:56:18:da:db:5b:2c:36:5c:
         2a:89:d0:02:08:01:56:0d:9e:4a:b3:28:b1:dd:7d:e8:36:7f:
         fe:9e:a9:f0:99:69:39:41:ba:31:73:cb:95:bd:ed:58:e8:15:
         01:7b:0f:26:51:8f:e3:49:4e:43:b0:1b:77:fa:80:37:a0:84:
         79:37:68:84:61:77:2d:49:cc:4b:4c:c1:c1:2e:fe:a6:cc:8e:
         9d:aa:da:de:8c:d4:90:e8:85:69:d2:cd:3c:a0:16:0f:ab:37:
         af:1f:f6:c1:9f:c2:cc:4d:ac:b2:98:5e:16:10:ba:30:1c:be:
         54:e9:0d:09:7c:8a:2d:7d:82:64:c4:de:40:97:e2:3a:0c:ed:
         27:4c:fc:e9:fe:8d:52:90:65:aa:56:4c:9d:59:29:34:93:a4:
         12:ef:32:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:17:38 2026 by rpki-client