Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/5d46bb36-c6a2-3de1-95de-7c93a502f975.roa
File:                     5d46bb36-c6a2-3de1-95de-7c93a502f975.roa (raw, json)
Hash identifier:          9eJDQ8GYRqQYpjJLuqGPfeobYoW7zzM8/Igju6Kk5cs=
Subject key identifier:   CC:B0:16:4B:A0:3A:47:8D:B1:B6:E2:5D:D2:11:50:7C:CC:08:27:A0
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584CC612112241047677FEE0DE00
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/5d46bb36-c6a2-3de1-95de-7c93a502f975.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     198949
IP address blocks:        2620:147::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:11:22:41:04:76:77:fe:e0:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=6f2355d7-0d9c-4e44-ba28-03cd21eeaf3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:41:a2:0f:f6:54:58:f3:f0:dc:e7:74:6e:
                    1e:d2:97:32:58:ea:93:d2:0b:d9:ac:ca:06:03:95:
                    8c:89:45:a4:19:2d:59:77:ae:03:80:c5:ab:49:40:
                    09:47:73:66:8d:b5:06:24:73:23:d2:4c:9a:50:e6:
                    a7:3d:01:d2:d6:80:07:4c:59:1b:3f:52:d4:b3:c8:
                    81:84:8f:d5:ad:63:69:f6:65:bd:55:a8:9f:69:5b:
                    12:b5:25:26:6b:87:44:d9:87:a4:60:8a:58:74:42:
                    21:39:59:78:2c:1d:c5:c9:89:e7:bf:05:8e:51:de:
                    7b:1e:71:19:df:de:9c:95:68:55:a5:a9:50:71:65:
                    12:6d:93:7d:54:5d:d1:ee:57:8d:c1:2b:2b:91:5c:
                    62:91:91:cc:29:e9:6e:02:2e:f1:c3:b4:e4:e3:89:
                    67:d8:ac:eb:fe:3f:05:67:3c:d1:88:ad:0c:f7:0f:
                    a5:d6:68:f6:4f:25:c9:c3:bf:65:4f:9e:81:8b:48:
                    27:b2:19:a9:85:34:c9:bd:91:ad:9f:c4:50:7f:d9:
                    be:ae:cb:e9:e3:b8:a6:12:54:a9:b4:07:4c:96:0f:
                    75:78:2c:7b:d4:18:90:8b:3f:3a:f8:5c:86:4a:36:
                    82:75:b6:16:9e:c0:9a:65:89:32:40:3b:88:3c:66:
                    9a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B0:16:4B:A0:3A:47:8D:B1:B6:E2:5D:D2:11:50:7C:CC:08:27:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/5d46bb36-c6a2-3de1-95de-7c93a502f975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:40:f5:9e:7a:f9:99:df:0b:10:ab:97:6b:4d:34:27:f2:22:
         41:df:63:4d:37:5e:c6:1a:60:f5:aa:70:6c:f3:ac:6f:b9:27:
         2e:20:48:b8:5d:34:90:15:c4:ec:20:d7:26:e8:68:03:44:18:
         65:09:c1:e5:4d:08:d1:1a:d1:47:f8:68:1e:f1:eb:2f:09:49:
         8b:74:a6:44:d2:b2:47:58:3c:8f:08:e2:8d:15:28:c2:26:70:
         21:5e:e3:bc:19:41:11:9a:29:3b:90:a3:86:61:b8:17:44:42:
         47:e1:dc:bc:fd:ed:82:53:71:c2:14:37:bb:f5:81:4e:45:f2:
         b8:2b:eb:e1:8f:fb:cc:fe:f3:80:66:2c:63:b0:e4:4b:03:bc:
         11:f3:58:c4:54:3c:d2:00:56:3f:a0:ce:b7:ad:17:3a:60:16:
         f7:49:d0:fa:85:12:48:04:e5:85:2c:27:84:6f:43:44:1d:8a:
         5a:0a:b1:fc:b5:82:7d:59:03:bf:11:c7:a8:ae:bf:d0:32:36:
         39:cb:c6:45:32:61:c8:50:54:8c:24:c8:a5:86:01:53:7f:91:
         ce:b7:49:9a:37:66:21:7a:4c:51:ee:0f:e6:18:f6:6f:ab:66:
         aa:53:f4:20:cd:a5:81:9b:3b:0b:a6:d6:5c:93:33:aa:e3:57:
         7f:3d:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:38 2026 by rpki-client