Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/c7c7e277-9401-3b75-9002-1a9ce20bc59e.roa
File:                     c7c7e277-9401-3b75-9002-1a9ce20bc59e.roa (raw, json)
Hash identifier:          XrYYUDT2mCe1sGWnc+hH/iJmr9phTTsFeWwTPAlQEZg=
Subject key identifier:   9E:1B:F9:FC:73:A4:9E:74:AB:4B:72:43:E1:24:17:41:B3:3F:FB:B0
Certificate issuer:       /CN=99df77a9-4870-495f-bbda-89f8e0ae31d2
Certificate serial:       010D0C9F4328584D98BAAA9A775F4AEC0E1E5D00
Authority key identifier: 16:8E:FE:48:0C:1B:58:1B:50:C1:6A:BE:E1:DD:D6:B3:9D:EB:97:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/c7c7e277-9401-3b75-9002-1a9ce20bc59e.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     13725
IP address blocks:        2602:f9a5::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:aa:9a:77:5f:4a:ec:0e:1e:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99df77a9-4870-495f-bbda-89f8e0ae31d2
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=9c5a89a1-bbec-4ec2-80f0-2b9ada8b32ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:45:30:1e:21:d7:54:fa:c2:ac:a0:bc:f6:6e:
                    d3:49:f5:0c:d0:90:84:a4:52:a4:49:a7:67:67:1d:
                    f5:75:c7:ba:a6:d6:31:5a:78:aa:1a:5f:ec:e0:c7:
                    7e:5c:c0:57:f7:a6:37:75:f9:9b:31:5c:28:b2:72:
                    02:ff:eb:13:ab:db:f4:e6:97:3d:c3:0a:4a:7a:1d:
                    f2:a6:e3:5b:9b:38:c8:47:41:1a:76:b5:dd:1d:66:
                    93:73:f4:e4:25:e1:7b:59:89:af:cd:e2:5a:c7:8f:
                    19:87:7f:3e:fb:03:0d:e6:65:0d:f3:ef:ca:eb:5e:
                    6d:a7:ec:f8:5e:e4:b4:a9:7b:79:16:b7:93:a5:cf:
                    e9:ef:77:44:b1:7c:52:68:73:9a:8a:5d:1a:db:19:
                    0d:7c:c9:3b:77:b6:62:5b:56:39:ce:e9:da:55:84:
                    11:9e:10:3e:49:46:bf:73:f5:67:1d:c2:bf:1b:80:
                    1d:d6:74:e9:b6:45:e1:64:37:05:00:18:a2:0f:6b:
                    a1:fc:c2:93:71:bc:0b:0a:a9:83:5c:b2:9f:57:80:
                    12:6b:49:1d:60:31:17:88:da:d8:78:84:15:2e:b3:
                    6e:25:15:69:41:8e:aa:bc:c0:db:42:32:56:b0:ab:
                    5f:79:f4:8d:3c:65:c1:73:81:5b:f5:ad:4a:02:86:
                    1e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1B:F9:FC:73:A4:9E:74:AB:4B:72:43:E1:24:17:41:B3:3F:FB:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/c7c7e277-9401-3b75-9002-1a9ce20bc59e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.crl

            X509v3 Authority Key Identifier:
                keyid:16:8E:FE:48:0C:1B:58:1B:50:C1:6A:BE:E1:DD:D6:B3:9D:EB:97:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b9:b8:55:85:85:54:db:6a:8e:40:0a:d5:a3:a3:dd:95:ed:
         e9:67:cc:88:89:c4:09:76:5d:45:86:5c:8e:c9:9b:6e:db:77:
         2c:72:fe:6c:21:8a:7a:f0:a7:2d:20:3a:3b:9e:9e:99:77:ad:
         3a:97:e7:48:af:ab:5b:ee:d2:00:09:57:28:49:94:bc:88:75:
         aa:32:06:3d:2c:ca:1e:51:c5:37:3d:18:fb:5c:25:c4:f0:cc:
         98:64:ae:9c:fa:60:8f:bd:11:00:83:76:f0:75:67:cd:3e:38:
         11:6d:b7:03:51:d5:c8:36:3b:21:72:f6:92:d8:1e:9d:a7:f4:
         38:e5:ce:03:0e:c7:19:7f:58:44:78:2b:7c:fc:f5:fc:a5:f7:
         7e:f4:88:9d:18:2f:4a:22:a8:76:17:53:65:77:be:d3:da:f3:
         a5:cc:10:16:24:29:33:4f:08:cf:78:a4:03:7a:41:6e:2e:1c:
         88:13:4f:13:53:91:89:f5:fa:16:e1:21:18:89:bd:27:3c:72:
         0c:c5:6f:88:ad:54:aa:f1:33:88:7c:25:f0:02:08:da:4b:81:
         42:33:43:05:2a:30:0a:69:73:bb:eb:78:85:0d:ba:68:5a:18:
         c3:49:18:aa:58:68:35:29:3a:91:e0:7c:02:3d:dc:c1:7f:91:
         bf:35:6a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:59:50 2026 by rpki-client