Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/965eb9d3-0042-335e-8d3a-cf08fbcc9aac.roa
File:                     965eb9d3-0042-335e-8d3a-cf08fbcc9aac.roa (raw, json)
Hash identifier:          qmv2IV5r9wpTfYlo1baKchI7kl8Rlpre6NB3PJRl+VY=
Subject key identifier:   40:02:8A:D0:7F:70:78:72:9F:75:29:1B:A1:F5:B6:12:7B:E1:25:D6
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584F2957CFB8D97665A719273500
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/965eb9d3-0042-335e-8d3a-cf08fbcc9aac.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     396982
IP address blocks:        2602:28c:2656::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:cf:b8:d9:76:65:a7:19:27:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=2e0bee88-515c-4839-bca8-f7b2f59d4a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:61:82:02:dd:77:62:ef:25:42:13:fb:e0:
                    07:f8:88:de:88:66:f8:33:c9:31:88:62:f2:57:05:
                    7c:78:2d:f3:b6:30:41:15:aa:43:e3:ea:06:8f:93:
                    11:ff:72:30:d8:f1:00:73:06:2d:0c:fa:ee:c0:6e:
                    98:b2:8f:e4:e3:e1:36:47:59:3d:38:da:e8:ab:2f:
                    a4:94:12:a6:08:59:a7:2b:ac:da:d2:aa:b4:33:a4:
                    73:e6:2f:ef:56:15:50:1e:86:40:3e:96:14:42:b0:
                    6e:5a:de:37:c0:b3:4e:2d:42:7b:73:77:98:64:c7:
                    c4:c2:91:c4:cc:c7:ea:58:74:1d:ca:e9:44:da:c0:
                    4c:c0:ec:74:24:8c:97:ed:41:80:e2:25:ae:ac:3c:
                    fe:e5:3a:02:28:2a:be:5d:2b:a4:90:e2:3b:5b:19:
                    60:6c:a9:fe:e6:50:60:f9:3c:70:9b:c6:51:7e:74:
                    a9:32:41:d5:cb:18:9e:ad:c4:d7:2f:15:2d:7f:6c:
                    ab:c4:f1:2f:b2:1f:d2:82:ca:6e:19:0f:77:5d:17:
                    0a:71:12:14:81:e2:60:11:c5:c6:5e:74:96:8b:8c:
                    13:d9:5e:8a:a9:27:cb:c0:9a:e3:45:ee:ea:75:fb:
                    7b:12:a0:a5:99:70:27:28:81:3a:5d:2e:13:56:ae:
                    b2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:02:8A:D0:7F:70:78:72:9F:75:29:1B:A1:F5:B6:12:7B:E1:25:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/965eb9d3-0042-335e-8d3a-cf08fbcc9aac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:2656::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:37:fa:4c:19:e0:8b:ea:22:5e:d6:47:a3:50:c8:4c:22:e0:
         22:90:f7:15:f3:02:b0:7b:1d:40:a1:80:ae:5d:74:a5:59:01:
         c2:b9:a0:9b:04:45:68:f7:af:21:81:6a:7d:50:24:8d:7c:92:
         8b:ab:24:2c:5f:c6:fe:97:ca:24:cd:92:8b:d7:d9:bf:4e:0a:
         cb:af:e0:28:61:6f:ea:be:8c:44:0a:56:6a:fd:e0:04:08:97:
         16:77:8b:2d:3a:c7:3f:aa:be:b9:c0:72:6b:75:09:f4:90:83:
         0e:69:69:21:40:9d:98:b1:17:89:47:25:e7:11:c5:ad:c6:d6:
         ec:98:f0:c7:5b:90:d7:c6:06:2b:80:28:24:36:43:6e:10:9e:
         08:d7:aa:fd:b1:6f:f1:90:b3:c5:de:0a:dd:2a:e6:8e:bc:38:
         b9:57:b9:38:4e:db:b0:b7:ee:95:93:25:9b:76:96:86:aa:a0:
         2a:79:2b:56:69:da:cc:68:ce:b8:71:c9:5d:06:31:85:87:e2:
         a7:1c:27:12:7c:17:3c:d8:b6:61:07:bf:6e:51:46:24:57:c9:
         0c:d0:d6:36:38:2d:2e:8a:e1:4d:cf:c0:05:6c:ad:ca:9c:db:
         f6:60:14:87:81:ca:5b:4a:12:68:1d:91:aa:5d:c3:e0:42:0c:
         15:df:4e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:02:53 2026 by rpki-client