Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/7401caeb-f88e-3b5b-9836-1df4c026d695.roa
File:                     7401caeb-f88e-3b5b-9836-1df4c026d695.roa (raw, json)
Hash identifier:          jn4Kea2zmPbXxdcNXfpCm7Z08ETRhpHAcjLaOESHC3c=
Subject key identifier:   30:60:05:FA:78:1B:65:D3:02:17:E2:5F:44:8F:02:C5:C2:19:A0:F8
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584CC6121489692C7C743E283000
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/7401caeb-f88e-3b5b-9836-1df4c026d695.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        2602:28c:2865::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:14:89:69:2c:7c:74:3e:28:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=a200d148-8cc1-44c0-b2dd-7d33115da1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a3:2e:fd:99:a4:c5:af:e2:12:f4:de:96:e3:
                    b3:92:55:89:7f:a6:d3:9e:c6:a3:dd:c3:ce:47:8c:
                    27:ac:f4:60:cb:96:8c:bc:a8:ed:71:fc:7b:14:2c:
                    f0:60:46:e4:86:8f:fa:d1:d5:91:e6:ef:57:1b:69:
                    b1:a5:80:65:68:e9:a8:e2:26:11:dd:a8:13:0c:94:
                    67:70:54:90:c8:5d:ec:42:04:30:2a:a7:af:02:f0:
                    7b:d2:fb:7b:ad:f2:23:38:bd:52:a5:ce:7e:77:eb:
                    1e:3f:5b:01:2d:6c:1b:75:7a:91:c1:dd:eb:dd:c7:
                    2a:a4:b9:da:c7:98:a0:75:87:eb:7f:01:3f:dc:27:
                    75:df:8d:9a:bc:d4:02:bc:2c:16:29:ad:2c:a3:84:
                    f0:bf:b3:df:47:59:80:cd:21:59:25:f6:71:22:6d:
                    1f:05:ee:ae:7e:f1:43:a8:19:4f:a8:ab:8e:0c:21:
                    d8:64:ea:92:86:27:30:41:bc:65:16:da:79:08:96:
                    8d:c2:63:2c:46:26:7b:d8:4c:fe:16:96:a3:58:74:
                    43:75:3d:48:c2:15:be:bb:60:cd:a5:a9:15:eb:35:
                    c8:cd:56:15:44:9b:c4:ed:16:71:67:c2:77:c1:06:
                    58:06:2a:90:58:a6:45:c6:bf:53:2a:b7:51:61:03:
                    09:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:60:05:FA:78:1B:65:D3:02:17:E2:5F:44:8F:02:C5:C2:19:A0:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/7401caeb-f88e-3b5b-9836-1df4c026d695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:2865::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:b1:72:0b:cd:8c:c0:2d:60:17:e8:06:7d:c2:55:11:d2:5b:
         26:10:14:c6:07:d4:c8:84:a2:2a:21:4e:e4:16:0b:41:17:3d:
         18:b3:99:59:bd:e8:41:3c:4d:82:df:11:72:41:fe:81:d4:56:
         55:a2:01:21:f3:73:bb:39:29:5b:bb:57:7d:0f:38:de:ef:51:
         0d:ab:b0:33:c9:22:6b:8a:a9:6f:ed:8d:97:4f:d3:d9:f1:8f:
         f4:6c:ff:f2:c0:1d:8b:34:9d:3e:08:6c:31:cb:0e:b7:1d:cf:
         5c:72:08:18:c7:f9:80:09:ab:d2:30:be:0a:30:ce:1d:92:dd:
         ef:cc:11:31:28:22:f6:a1:61:e5:db:ff:26:a2:71:3f:58:a7:
         f3:25:24:b0:9c:d3:03:82:b9:5a:69:2d:5b:61:1f:3d:4e:a2:
         3e:2f:d2:19:50:fc:f0:75:7f:f0:74:10:2d:b2:ef:cc:d7:24:
         7a:e2:9b:a5:5d:63:50:9b:ee:fd:d9:94:5c:98:fc:c4:b4:e4:
         8a:fa:df:4f:74:3d:b0:2b:f6:75:4d:5b:e1:60:40:08:69:a3:
         17:a0:96:71:88:0b:aa:7c:ea:14:53:ad:bf:3a:c6:e1:e0:cb:
         fa:e0:b1:c0:b2:12:58:b8:75:ce:ec:18:50:ae:74:d5:4b:fa:
         36:e6:5c:d1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzGEhSJaSx8dD4oMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk
YTIwMGQxNDgtOGNjMS00NGMwLWIyZGQtN2QzMzExNWRhMWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aMu/Zmkxa/iEvTeluOzklWJf6bTnsaj3cPO
R4wnrPRgy5aMvKjtcfx7FCzwYEbkho/60dWR5u9XG2mxpYBlaOmo4iYR3agTDJRn
cFSQyF3sQgQwKqevAvB70vt7rfIjOL1Spc5+d+seP1sBLWwbdXqRwd3r3ccqpLna
x5igdYfrfwE/3Cd1342avNQCvCwWKa0so4Twv7PfR1mAzSFZJfZxIm0fBe6ufvFD
qBlPqKuODCHYZOqShicwQbxlFtp5CJaNwmMsRiZ72Ez+FpajWHRDdT1IwhW+u2DN
pakV6zXIzVYVRJvE7RZxZ8J3wQZYBiqQWKZFxr9TKrdRYQMJhQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDBgBfp4G2XTAhfiX0SPAsXCGaD4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvNzQwMWNhZWItZjg4ZS0z
YjViLTk4MzYtMWRmNGMwMjZkNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICjChl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC2xcgvNjMAtYBfoBn3CVRHSWyYQFMYH1MiEoiohTuQWC0EXPRiz
mVm96EE8TYLfEXJB/oHUVlWiASHzc7s5KVu7V30PON7vUQ2rsDPJImuKqW/tjZdP
09nxj/Rs//LAHYs0nT4IbDHLDrcdz1xyCBjH+YAJq9Iwvgowzh2S3e/METEoIvah
YeXb/yaicT9Yp/MlJLCc0wOCuVppLVthHz1Ooj4v0hlQ/PB1f/B0EC2y78zXJHri
m6VdY1Cb7v3ZlFyY/MS05Ir63090PbAr9nVNW+FgQAhpoxeglnGIC6p86hRTrb86
xuHgy/rgscCyEli4dc7sGFCudNVL+jbmXNE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:33 2026 by rpki-client