Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/db83424f-0916-3d91-a722-a905d3202e0b.roa
File:                     db83424f-0916-3d91-a722-a905d3202e0b.roa (raw, json)
Hash identifier:          fiLNBTZ/56RsVJBtcKqtNru+2GHrcdA7hdzFX6vo5f8=
Subject key identifier:   A6:56:22:28:4F:AB:AF:ED:EB:97:03:84:6C:4B:80:3D:79:B4:81:29
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B01C7B62F1B1BB504C4100
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/db83424f-0916-3d91-a722-a905d3202e0b.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2620:147:c12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:1c:7b:62:f1:b1:bb:50:4c:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=39d6dd46-a57f-4e84-bb21-588073d1de86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:82:83:f2:e1:c1:c6:0f:1c:55:d1:fb:73:95:
                    27:72:12:a1:ef:19:74:ac:7d:d9:2b:89:b3:d0:3b:
                    95:24:66:e4:21:20:4a:d8:9d:50:0d:3b:2b:d2:cf:
                    fb:7b:67:0b:9b:a7:7b:d3:6f:2d:66:11:9e:12:a5:
                    ef:7f:71:37:28:63:83:36:e8:e9:23:b8:43:4f:fc:
                    a5:70:d6:10:6d:a9:48:83:ba:a8:6c:d3:da:d8:86:
                    30:34:23:d8:54:40:82:2c:61:7d:e1:b2:87:ec:34:
                    f7:8f:f6:08:f2:3e:32:38:f2:e9:c7:16:e2:a1:a7:
                    87:29:90:12:4f:b3:dc:ea:31:c6:22:64:44:81:0c:
                    7f:a4:da:4f:5b:32:26:d7:ac:d5:e5:ba:26:07:91:
                    d9:8f:d8:e0:8a:b8:7d:69:4c:55:97:b5:f8:fc:4f:
                    e7:84:24:1a:9c:4f:7a:80:6c:07:6e:f3:18:57:56:
                    5a:93:78:79:87:a1:82:55:ac:7a:dc:bd:7c:0a:04:
                    32:10:64:53:19:80:36:13:ee:b6:b8:22:ad:47:9d:
                    27:1e:bb:20:a3:11:6a:74:c3:b4:ee:ca:83:ec:a3:
                    ea:ca:9d:73:14:dc:3a:81:ac:9f:8e:22:bd:76:71:
                    ca:40:66:22:85:84:a9:46:c2:28:90:d0:0d:14:f8:
                    8a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:56:22:28:4F:AB:AF:ED:EB:97:03:84:6C:4B:80:3D:79:B4:81:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/db83424f-0916-3d91-a722-a905d3202e0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:2c:38:72:a0:0d:22:01:11:18:32:34:08:36:5a:71:78:ca:
         d9:3c:7a:ed:ef:f8:dc:56:62:c0:73:c4:e3:dc:bf:5b:19:ac:
         fa:cd:75:b1:b8:b7:99:75:54:bf:f5:ed:ef:58:7b:74:4f:95:
         a4:5b:d3:d3:57:c6:ae:3b:8f:39:c8:bc:f1:38:4d:46:4d:dd:
         d2:98:05:68:cf:0f:da:de:af:da:66:6e:eb:23:c2:44:1a:2b:
         d6:36:f2:5e:ad:d3:e7:03:b1:e3:68:59:1a:4d:76:83:69:28:
         81:bc:4f:6d:ad:47:64:06:7a:f9:71:0a:5a:a6:a4:e7:de:9d:
         30:43:8d:0f:f2:8f:01:e5:29:37:b6:f3:bd:a1:ec:d4:05:c0:
         8a:c8:54:bf:e4:ec:07:29:9e:00:7a:5c:62:ce:b0:2f:95:e6:
         a5:b4:00:50:57:55:26:1d:21:1c:3e:0f:fa:a5:8b:f8:88:4c:
         cb:2d:be:e0:37:09:bf:99:1f:a0:68:9f:f1:f6:2f:b9:27:ca:
         98:f1:04:7c:e1:d4:7c:01:6b:9f:78:d6:eb:b6:a0:f8:05:f9:
         3f:f8:e1:d6:48:72:a4:6b:11:e4:71:7f:b6:5c:ef:7a:50:2b:
         d4:e3:ab:f5:3a:3a:83:78:39:19:ac:0b:31:2c:3f:49:a1:ad:
         3a:ee:9b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:13:19 2026 by rpki-client