Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9bf28957-a534-3183-b51b-e544c0e393fa.roa
File:                     9bf28957-a534-3183-b51b-e544c0e393fa.roa (raw, json)
Hash identifier:          qdAGjP/T3mbvswFoUU78LhUcBii0yWTolWFk0ZOPpQM=
Subject key identifier:   12:2F:02:0E:8F:C2:32:A1:7E:B4:0E:E6:F2:25:5F:15:5C:A4:A9:B4
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584F2957D29BB8592AF72B6E7C00
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9bf28957-a534-3183-b51b-e544c0e393fa.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     14618
IP address blocks:        2602:28c:2907::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:d2:9b:b8:59:2a:f7:2b:6e:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=87d60320-9b04-46c3-8613-1acce6c340c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:45:3e:c0:4f:23:53:38:31:1f:87:4f:80:d1:
                    ca:a2:1b:da:50:e2:1b:62:b8:0f:3e:f8:31:fd:0d:
                    04:bf:7e:fb:21:0a:66:32:8d:3a:9c:38:db:49:d0:
                    bd:4f:73:ff:64:18:09:90:70:02:b5:d7:03:a5:a3:
                    06:49:ac:94:0e:6b:df:e0:4e:a2:e5:ad:0d:ab:4d:
                    46:a0:5c:8a:6b:33:32:dc:6a:0a:07:9e:f7:3d:eb:
                    81:51:0f:5b:e3:f5:3e:11:6c:9b:3e:4b:64:9c:ee:
                    1b:75:4f:12:7d:47:8b:e9:a6:77:6d:48:e5:b2:dd:
                    4f:80:1d:de:bd:9f:d6:94:25:0e:37:7d:47:d6:ca:
                    51:f5:f0:3f:91:90:08:31:93:fe:d6:c2:54:6f:a1:
                    2a:02:be:f0:c2:ed:0f:13:38:a7:70:72:07:85:a7:
                    19:09:be:c1:4a:b0:a0:d2:8e:c0:8b:46:44:fa:8c:
                    ba:b0:1b:9d:79:60:7c:71:d7:71:17:04:21:a4:7d:
                    ff:cb:e8:56:ae:82:3f:c5:ba:e2:e3:11:58:bf:90:
                    7b:2b:a9:68:02:32:df:22:74:f0:84:df:dd:a9:68:
                    c8:52:9f:77:ee:47:05:10:6d:23:74:d9:26:8c:4b:
                    86:20:32:b6:a9:44:7b:8d:3c:c7:96:ca:47:9c:d0:
                    73:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2F:02:0E:8F:C2:32:A1:7E:B4:0E:E6:F2:25:5F:15:5C:A4:A9:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9bf28957-a534-3183-b51b-e544c0e393fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:2907::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:06:04:a0:34:bc:a9:58:9d:91:83:4d:fb:90:ab:5e:a9:bf:
         1d:3a:c7:32:15:6a:f0:68:ba:dd:32:f5:9a:09:bb:ae:56:77:
         24:bd:3c:bd:51:8c:90:5c:e5:47:40:11:ee:b3:14:0e:84:74:
         b4:0a:d2:7d:ae:31:7c:6e:21:3e:bc:00:c3:48:a2:c4:ec:8b:
         b0:16:a3:9b:a7:62:79:e8:e7:7f:07:c7:32:af:88:37:ce:90:
         81:53:82:ba:6d:60:4d:1c:5d:4f:12:9d:1c:ba:06:44:64:2c:
         ed:44:54:6b:06:57:68:f1:75:3a:29:e8:f2:c3:1d:ee:81:3b:
         52:b2:eb:34:17:9f:fe:b5:3a:f0:57:c1:d5:51:1d:24:d3:30:
         89:e8:bd:37:da:ae:b8:32:2f:d4:42:a2:5a:e5:b0:83:d8:a8:
         23:f2:52:08:18:ad:01:2b:e9:77:e7:42:5a:9d:df:8d:81:ae:
         21:ff:34:9d:93:c2:0b:f7:6b:a6:7b:e7:b6:4f:d2:7b:95:21:
         da:b3:28:86:e9:6b:af:83:cb:23:a4:07:97:ef:18:63:52:81:
         2a:09:04:6c:57:15:14:c3:1a:2f:8f:21:1d:3c:bb:0c:00:e2:
         d3:16:42:50:48:02:18:15:8c:7f:af:35:47:12:56:4d:cd:a9:
         fa:99:cd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:04:56 2026 by rpki-client