Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/30aedf31-1c65-3dc0-b886-5ba7ae6e5798.roa
File:                     30aedf31-1c65-3dc0-b886-5ba7ae6e5798.roa (raw, json)
Hash identifier:          lBQPc17cRi42BiV/2aqeYBVDaDaH/f7WHyi98Dn7s0Y=
Subject key identifier:   B7:74:62:C5:12:F0:B1:B5:FF:85:A5:EF:76:D8:40:B8:36:6F:99:75
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584CC612136F7D8330B399F96000
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/30aedf31-1c65-3dc0-b886-5ba7ae6e5798.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        2602:28c:3002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:13:6f:7d:83:30:b3:99:f9:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=c1b63915-192a-486d-97b0-def1ae7cbbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f5:51:1d:be:56:31:fe:d1:6f:20:31:f8:b9:
                    d7:7a:d0:f0:27:27:0c:0d:a2:61:90:11:47:cd:13:
                    5b:df:cc:c7:b0:9d:3b:65:2e:a5:8c:58:45:9d:e7:
                    26:6e:a4:3e:4b:f6:81:d4:14:08:e4:44:1d:76:db:
                    53:4b:0c:f8:32:b1:60:a4:1a:7b:c0:37:35:a7:85:
                    a1:61:59:fe:c4:0a:2b:43:7c:77:73:cb:fb:1e:c3:
                    0a:2c:7c:c1:2b:b9:73:e1:39:69:25:d6:47:46:b1:
                    d6:40:85:6a:15:f6:86:ac:50:b8:be:9c:e2:04:4b:
                    88:b4:b0:47:93:2a:d6:ed:d9:7e:82:27:c3:7b:69:
                    b6:cd:36:3e:0a:45:bd:0b:7e:82:c1:26:88:be:41:
                    c0:ca:21:7b:25:1c:ba:e2:fc:dd:37:1f:b5:33:39:
                    14:0c:40:20:45:93:c3:20:ae:a9:e2:92:aa:93:20:
                    36:f2:91:37:3f:37:15:b2:de:5f:b3:bc:50:ad:5a:
                    ae:64:60:f8:61:11:a0:38:7e:9c:ee:4c:8f:34:4b:
                    c6:c6:49:70:22:63:de:73:67:ea:08:1e:b9:5b:05:
                    47:f1:29:25:73:64:05:c2:ed:a2:58:d2:01:d2:2f:
                    aa:15:6e:59:30:89:4e:f8:60:d2:7c:2f:5b:9d:14:
                    f5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:74:62:C5:12:F0:B1:B5:FF:85:A5:EF:76:D8:40:B8:36:6F:99:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/30aedf31-1c65-3dc0-b886-5ba7ae6e5798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:3002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ae:83:69:31:39:3d:ee:45:90:f0:45:04:06:97:13:b1:3f:
         e4:74:5f:3b:87:38:36:23:63:5e:5e:10:b0:e2:32:34:b6:2f:
         e2:16:76:55:cd:8a:41:58:c9:3d:dc:c5:1b:85:61:eb:c9:b7:
         ee:17:bd:13:d5:1c:35:eb:90:ad:62:ac:ac:86:b7:18:5e:52:
         d2:b2:20:4c:8a:67:4f:ad:16:4f:ab:f4:1e:22:40:c5:42:2b:
         ff:48:5b:7c:57:d7:ae:9b:57:dc:bb:03:15:38:db:3a:14:c4:
         3d:b8:42:a9:a9:1a:6c:83:65:9a:68:0a:5f:4a:e8:a2:f1:5d:
         69:5e:72:8b:78:a4:f1:dd:e1:af:e8:ef:81:05:6f:c3:ac:02:
         24:5c:f6:26:d5:69:14:33:0c:e4:69:aa:a8:b0:43:72:33:38:
         0a:33:1d:f9:c4:9a:ff:7d:5a:0d:f0:a7:cf:5e:d0:fe:3d:53:
         9d:90:f7:f3:bc:1f:b7:b7:87:c0:97:c7:78:9a:75:e0:23:f6:
         51:09:04:cf:d3:05:c3:37:77:ca:ba:65:fc:58:86:58:42:74:
         e9:3f:af:5d:4a:8d:07:a3:89:c3:f3:db:40:2f:4b:e9:98:2c:
         d8:6b:56:53:8c:df:2d:32:0b:f3:ff:07:7d:00:27:3f:0d:56:
         0b:78:b9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:39:25 2026 by rpki-client