Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c4a3f939-bd64-3487-a242-6fbbe2db4083.roa
File:                     c4a3f939-bd64-3487-a242-6fbbe2db4083.roa (raw, json)
Hash identifier:          JfQrpPWiWooJ+ILL0R5HrGXuLAQHsrUCbAHu8c2npZw=
Subject key identifier:   FC:B7:9F:84:94:2F:EB:C6:63:0C:B9:2C:B6:E4:E5:32:A7:1C:B2:B7
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584CC612147438BE1E83B5B9E530
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c4a3f939-bd64-3487-a242-6fbbe2db4083.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        2602:28c:2907::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:14:74:38:be:1e:83:b5:b9:e5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=acbf77b9-7617-4d6f-a44d-69bce32d477d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:55:1d:41:0d:76:5f:9f:96:05:40:2e:2a:17:
                    eb:13:7b:73:d8:aa:07:2c:f5:2e:83:6e:11:b0:7d:
                    c3:3a:74:a8:aa:28:c5:49:52:11:16:fe:00:e3:d6:
                    97:69:60:c1:5b:cc:5f:05:3d:91:5b:5a:7d:bb:5d:
                    ee:08:95:55:c0:64:33:d4:3d:9c:01:9f:95:60:74:
                    f3:9e:c2:04:89:6c:d1:3f:30:d7:5e:9d:cb:8e:c3:
                    b3:d3:a7:08:dd:60:b4:d9:da:cb:59:c3:a9:23:70:
                    95:4b:5b:e3:68:28:41:76:65:b7:c2:3c:d6:ba:a0:
                    f5:a4:34:b0:04:e2:c7:9a:39:3f:27:12:d7:50:cc:
                    ac:2f:83:5f:8b:e4:45:44:38:a7:5e:41:3d:cb:c0:
                    a6:b2:95:9d:2c:8d:8a:4f:27:ac:c6:bc:a9:a5:a0:
                    bf:af:3b:60:21:c2:71:ab:8d:f2:8f:a0:33:31:f5:
                    37:bd:6e:ab:26:a0:b3:06:8d:2d:48:7c:34:63:22:
                    93:26:83:7d:dd:a7:f7:ef:88:4e:dd:8f:1b:cd:d8:
                    e5:b0:31:2c:21:02:e6:8e:97:a9:1c:af:42:f3:49:
                    96:97:f3:9c:dd:83:a3:87:3e:c9:3d:e8:9b:b5:43:
                    1c:03:2c:6a:39:b8:74:15:bb:bc:b4:86:ba:29:40:
                    75:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B7:9F:84:94:2F:EB:C6:63:0C:B9:2C:B6:E4:E5:32:A7:1C:B2:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c4a3f939-bd64-3487-a242-6fbbe2db4083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:2907::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:67:27:49:72:69:fa:58:69:cd:13:62:f2:3d:7d:fa:72:d5:
         a5:3c:f9:c4:77:82:f9:15:a0:9f:7a:3e:eb:0f:42:0d:a6:e5:
         cd:a1:2f:66:fa:83:ef:9f:af:6c:00:76:de:46:76:78:99:4a:
         99:d3:35:0c:e8:d5:2f:4a:6d:57:7a:a6:fa:60:16:10:43:88:
         da:ce:ba:12:55:06:25:17:19:79:fd:4b:91:35:3c:6d:5d:6e:
         66:85:c5:26:df:5c:52:49:e5:15:57:64:c9:69:30:a2:7f:c6:
         e7:a8:90:54:55:26:c4:82:ae:94:fd:f6:38:53:cc:6b:99:1f:
         fe:29:8e:27:4d:dd:0a:0e:44:5f:7d:f6:61:17:f9:e4:23:76:
         5c:33:5f:b2:7d:d2:6f:d6:4b:77:99:b0:ef:7c:f1:b0:c4:2c:
         2e:11:10:dc:31:31:fe:ac:63:bf:10:1a:b1:6f:e9:64:3b:7d:
         b0:c8:b5:17:8c:fc:8d:88:76:98:97:dd:30:54:cc:2c:ac:2a:
         8a:68:99:39:d9:d4:69:c2:97:7e:57:48:d8:cb:92:60:53:bd:
         e1:3a:bc:45:2c:27:f1:eb:ea:00:33:2d:d2:97:13:f1:04:a0:
         aa:21:df:23:47:c3:b7:bb:62:4b:8c:ba:c2:90:3b:63:32:9c:
         6a:a5:87:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:44:22 2026 by rpki-client