Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0ec42ddd-cc23-38a1-a154-30e65583853a.roa
File:                     0ec42ddd-cc23-38a1-a154-30e65583853a.roa (raw, json)
Hash identifier:          A7bzAzaTjuCMuooSrBAtsD3XCgnkEkfJxdgkLok6bE0=
Subject key identifier:   43:AA:DC:01:45:C7:89:2D:1E:A3:66:C2:DE:75:66:00:60:FB:3E:30
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584CC61211F2F06E78D42BB5AF80
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0ec42ddd-cc23-38a1-a154-30e65583853a.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     198949
IP address blocks:        2602:283:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:11:f2:f0:6e:78:d4:2b:b5:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=3366ba40-38ea-4014-9a13-7dbe86dbc1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:15:f2:eb:c7:5d:f8:42:81:0b:fd:9d:8f:
                    5c:6c:56:31:21:41:b2:49:c5:1e:c7:ed:f5:9b:54:
                    00:6d:f9:23:9a:b7:ba:92:21:54:75:53:16:7f:39:
                    fb:1f:65:cd:db:58:74:91:5e:ce:95:88:3a:76:0a:
                    c0:86:41:fa:3c:45:9e:f4:f6:3b:57:57:7b:79:4a:
                    d3:c2:4b:ae:b2:6c:49:bc:84:70:16:3a:0b:02:9a:
                    40:b9:c8:a6:65:0a:17:a6:7d:0a:29:7c:bb:9c:cb:
                    c8:b0:80:62:80:d6:b7:38:c3:ab:ca:e8:bd:28:3b:
                    5a:70:a8:ca:7b:98:38:57:71:5a:44:95:0a:9e:08:
                    32:76:fe:c7:e8:5a:06:a5:d4:68:1f:c4:c7:86:cd:
                    c3:1c:9f:53:3b:3c:89:2e:10:17:47:e9:93:b6:4e:
                    99:c5:2e:d2:7b:f6:8f:dd:10:69:04:b5:a2:60:70:
                    27:75:21:cb:04:62:b4:b7:cb:56:c1:f2:c4:a9:3c:
                    f3:01:3d:98:ca:92:c7:3f:13:21:2c:ba:b5:c5:63:
                    01:73:00:c7:c8:b9:6f:56:eb:d8:29:fa:c7:de:f0:
                    70:a0:15:20:6f:0e:4e:8e:9b:17:c9:5e:b9:be:9c:
                    67:35:98:33:73:64:c9:14:a9:7a:93:f0:1a:da:eb:
                    a7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AA:DC:01:45:C7:89:2D:1E:A3:66:C2:DE:75:66:00:60:FB:3E:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0ec42ddd-cc23-38a1-a154-30e65583853a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:283:8000::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:2c:88:82:40:92:0e:c4:30:9a:cb:59:e7:da:51:1b:16:9c:
         5f:78:53:c1:1a:a3:0d:c2:65:d4:b2:b2:7b:a3:8d:10:77:b7:
         52:bb:89:17:11:6f:ef:73:91:8b:9e:e1:62:57:9b:ce:6b:f0:
         91:18:85:1c:a9:f8:4b:0a:f4:90:df:3c:5f:bf:01:24:41:28:
         ce:c6:09:d8:04:09:7d:c7:d5:44:0e:2a:e9:36:22:a0:a7:7d:
         d4:91:7e:ef:bd:7f:e4:58:99:b6:fa:1c:dc:2d:74:11:61:46:
         c4:00:2f:66:e1:ae:8c:4a:42:cb:ff:a3:4d:19:76:74:eb:d6:
         5b:1f:e7:34:ac:e5:ce:a4:7c:09:e4:01:f8:3f:be:2f:74:53:
         1f:b7:58:d4:75:f6:57:5c:b2:1b:e4:64:30:74:bb:e3:06:9a:
         45:e2:0b:63:2f:a7:6d:b0:e1:d4:fe:c0:db:6a:4e:b1:df:1f:
         ad:0c:5b:66:31:01:72:70:79:36:2e:e4:ee:29:59:0d:57:dc:
         6d:68:3e:c5:0d:a8:e2:d8:20:a4:f3:a8:2f:91:b7:3e:2b:e8:
         96:31:7b:77:e5:ab:68:0d:cc:ee:c8:a7:42:3e:01:e6:1d:69:
         06:41:e3:59:4d:5b:ab:af:4b:9d:50:db:f5:cf:79:0b:db:14:
         f3:c6:37:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:52 2026 by rpki-client