Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/e3c82883-566a-34e1-9ea2-191c5c27c53f.roa
File:                     e3c82883-566a-34e1-9ea2-191c5c27c53f.roa (raw, json)
Hash identifier:          PxXNZ2yRUv9Vtg2+uDM8LYYOHcmsCDD0WyIQfT/emEY=
Subject key identifier:   42:87:D5:15:4E:97:EE:FB:D9:B5:02:48:52:93:18:89:EE:72:A9:11
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584F2957AE96043D14801B2D1800
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/e3c82883-566a-34e1-9ea2-191c5c27c53f.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     396982
IP address blocks:        2602:28c:2909::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:ae:96:04:3d:14:80:1b:2d:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=502cb071-3ca5-4c71-90fd-6190c21938e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:f4:cc:6d:1c:6c:ff:38:dc:28:0a:70:23:
                    1a:0b:f1:cb:13:7f:2c:18:b7:b3:59:51:a8:bc:c2:
                    2a:4b:fc:84:af:19:12:aa:49:d4:78:9b:3f:17:1c:
                    1f:84:2c:3f:96:0e:ea:40:66:ac:39:7f:a3:c6:b3:
                    cc:90:53:51:b7:41:ba:31:18:df:30:31:11:dc:cd:
                    c9:cc:a7:97:1c:fc:69:6d:7f:95:ba:e0:4f:e4:8c:
                    81:c0:c4:67:27:a4:12:41:59:4c:57:08:a6:74:97:
                    d4:bb:23:2e:81:c6:36:7c:db:f9:bb:80:3a:81:a2:
                    43:05:d8:2d:e1:70:81:ba:b6:b0:03:48:51:b6:56:
                    47:14:79:57:5f:bc:51:3d:15:77:e7:af:93:e6:22:
                    53:11:53:f2:81:98:f1:db:cc:57:77:34:64:8c:56:
                    21:c5:df:be:21:b4:c2:35:92:da:4f:87:06:2f:c1:
                    15:81:f3:87:df:12:b4:3c:28:8b:93:47:0e:74:b1:
                    42:f5:55:f1:e7:31:57:10:9f:c5:08:37:ae:99:27:
                    fd:e5:80:35:cf:15:8e:e2:41:42:ae:4e:da:7b:34:
                    5e:ac:26:fd:09:d4:32:89:e7:19:0a:51:42:20:f0:
                    18:03:bd:5c:a2:f6:64:91:40:d1:ba:33:ec:cd:39:
                    7b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:87:D5:15:4E:97:EE:FB:D9:B5:02:48:52:93:18:89:EE:72:A9:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/e3c82883-566a-34e1-9ea2-191c5c27c53f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:2909::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:0d:a9:c0:72:7f:48:63:af:b3:5a:45:3a:41:6e:95:b3:8a:
         a1:77:7a:a6:78:93:29:27:f5:b9:73:cf:e5:68:84:da:4a:c2:
         5d:e5:ce:05:49:79:ca:94:b6:2d:e4:16:7e:dd:9c:71:d0:be:
         22:72:77:f3:5d:f1:be:4a:8c:30:d4:f9:74:b3:16:ff:ce:ed:
         9f:ea:d4:0f:f8:bf:ad:61:30:d7:fd:54:bd:9f:84:d4:44:f8:
         ef:36:ec:a3:2a:09:35:9d:63:3b:e4:21:c3:5a:0d:53:21:b2:
         2e:ff:3e:12:18:ff:54:12:13:84:b6:65:ae:f7:44:05:7b:8e:
         25:a4:41:db:22:d2:70:cd:e8:72:c0:c7:db:b9:18:10:75:01:
         c7:48:41:de:53:64:60:2b:e3:76:cd:c1:7d:1d:30:c1:c7:dc:
         83:72:ce:09:56:ca:81:dc:50:1a:c0:61:1e:e4:03:58:ad:8e:
         2f:02:88:fc:ce:4e:3e:97:7e:fc:5a:70:55:2b:d1:23:40:aa:
         97:dc:dd:15:9f:45:39:de:f3:da:ec:4b:e4:fa:0c:fa:57:f1:
         8b:09:ec:da:98:63:41:77:8a:f8:ed:00:18:2e:93:cf:27:95:
         0a:17:a5:36:c8:5a:76:63:ba:ad:e5:97:4a:92:c2:31:60:da:
         d6:06:0f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:37:57 2026 by rpki-client