Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/f1d0c178-fb7c-3795-a930-d8c3abfd5fb5.roa
File:                     f1d0c178-fb7c-3795-a930-d8c3abfd5fb5.roa (raw, json)
Hash identifier:          DuYB6qqDReyzYG5n47feuuufsgifa6x8ycTYyBsySW8=
Subject key identifier:   12:59:1F:9C:D0:2B:A9:8B:7A:5A:65:95:59:3B:14:A9:D0:8E:69:3F
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B02E4253938AE801B68880
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/f1d0c178-fb7c-3795-a930-d8c3abfd5fb5.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        2620:147:c32::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:2e:42:53:93:8a:e8:01:b6:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=3068cc3f-4e0c-4b50-8d75-68303dc8074a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e3:5d:80:31:4b:f5:ec:5c:21:81:61:be:b9:
                    d5:2d:74:1f:37:01:2b:c7:bc:39:85:cd:cb:43:eb:
                    43:73:ab:68:7c:b9:d1:5a:4f:91:62:64:a2:7f:5f:
                    fb:05:22:fe:c3:53:78:43:4d:02:10:3a:54:9e:ba:
                    0e:9a:6a:bc:e0:67:ff:34:63:fd:66:6a:57:70:40:
                    79:b2:3e:0c:10:22:f9:2b:ab:04:9b:89:a5:d1:32:
                    dc:6b:b7:00:17:37:66:84:64:0f:e1:8f:9a:cb:a0:
                    ed:3a:fc:c4:c8:1b:8e:80:86:a8:0e:f4:87:5a:e6:
                    e9:67:90:12:82:62:89:a3:e6:29:4e:46:5b:58:48:
                    e8:6d:30:04:b4:0e:fb:c5:b7:e9:4a:1f:14:09:d3:
                    68:44:29:61:39:47:32:f7:67:45:e4:21:ff:4f:45:
                    a0:d9:bd:57:05:12:b6:e6:2b:d1:8c:44:88:0b:0a:
                    6f:a4:47:b7:b8:1f:4d:e9:a3:e1:2f:8e:ee:c4:ac:
                    bd:dc:5d:1f:4d:99:4f:95:b2:9e:f0:70:6e:ba:f6:
                    e3:54:bb:50:c0:c0:39:9c:b6:78:02:b3:5f:04:0a:
                    d5:de:43:31:91:9d:10:4d:53:5e:5e:c6:d1:03:d6:
                    52:21:6b:99:7b:ef:8e:d0:2c:09:3e:f7:1f:b8:e9:
                    c0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:59:1F:9C:D0:2B:A9:8B:7A:5A:65:95:59:3B:14:A9:D0:8E:69:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/f1d0c178-fb7c-3795-a930-d8c3abfd5fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c32::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:5f:04:61:b8:ba:98:08:0c:5a:a8:dc:08:44:a9:2d:d2:49:
         0c:a2:be:15:9b:48:8c:51:e3:b3:09:b2:7c:38:bc:6a:6f:4e:
         b6:50:e6:49:69:ce:30:d7:89:57:cd:ed:e0:86:57:4a:aa:d4:
         58:ef:0a:65:e7:ad:29:1a:08:92:aa:f9:e7:46:8d:36:86:f2:
         5d:97:c5:e4:5e:97:53:7e:cc:b6:3f:4e:07:e9:3e:27:f9:8e:
         3f:e0:47:76:ca:8f:51:66:0a:ca:a7:90:0b:b5:7e:ff:6c:05:
         85:3c:4e:b8:a8:ac:ea:21:96:56:7f:13:b4:95:a5:37:55:5f:
         75:f8:7d:d9:e0:64:dd:e1:9b:f4:36:4f:de:b7:40:d6:ff:7e:
         e1:44:27:e1:52:c6:1b:de:30:92:c2:53:17:76:cf:52:28:31:
         0c:4b:da:4e:2b:1a:9f:fb:a0:a9:82:30:51:f4:10:af:1d:8f:
         24:00:13:2c:80:a8:51:d2:0a:65:e5:cc:98:ef:b8:4c:c0:85:
         09:8b:b3:49:24:68:59:0c:8a:f7:cb:e3:d8:3b:80:dc:45:f7:
         dd:4d:5d:6d:a3:90:cb:1c:53:ce:42:53:b8:0c:f5:f8:ea:a8:
         ed:06:8c:9a:1d:ac:e7:20:17:2d:12:18:ec:ff:5e:84:39:3a:
         ba:da:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:45:22 2026 by rpki-client