Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/e818cdcd-a4af-3c23-886f-2137341ef0ee.roa
File:                     e818cdcd-a4af-3c23-886f-2137341ef0ee.roa (raw, json)
Hash identifier:          jFeHbMzEQl75DKW6l88OvFYalYaS+OETv1k3iwlorkg=
Subject key identifier:   60:E8:10:E2:F7:49:AF:24:EA:89:7D:CE:BE:0B:1C:0B:0F:7D:D6:6B
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584CC61214EB85015B41E5E76900
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/e818cdcd-a4af-3c23-886f-2137341ef0ee.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        2620:147:c15::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:14:eb:85:01:5b:41:e5:e7:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=c697685d-5c67-45a7-bc15-0a90d90edae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:ac:6c:b8:16:1a:e9:7f:09:4a:e8:c2:b9:
                    dc:aa:86:14:c2:b5:08:1d:81:81:f6:e5:de:6b:c5:
                    3c:45:43:a8:5c:07:7e:9d:d9:53:6a:39:e9:a2:09:
                    be:13:aa:6c:5e:1a:2f:df:43:e0:65:b8:32:00:c8:
                    e7:13:31:fe:43:49:6c:da:ee:f4:51:c7:15:a6:dc:
                    7c:81:b6:86:57:8f:95:af:25:52:e9:08:8c:3f:83:
                    fd:b5:ba:f0:18:79:a7:9b:62:6d:36:db:06:a7:54:
                    4f:f1:5b:ec:3b:7d:cd:b9:ff:ef:5e:86:0a:3b:a9:
                    95:68:fa:ea:0d:0c:07:db:89:82:ab:d1:dd:57:20:
                    e9:9c:ed:d2:ad:cd:0f:65:b0:28:0d:ad:47:18:f8:
                    1b:38:32:d1:43:1c:9b:97:99:48:1f:7c:d5:02:9b:
                    c8:fc:47:37:04:36:1b:4e:69:f8:a0:f8:57:c8:2c:
                    5b:aa:d4:64:3d:8a:9d:73:e4:53:d3:c1:f6:6d:48:
                    d7:4e:82:ac:b5:42:6c:e5:4f:89:8e:80:c4:20:0d:
                    1b:8b:35:f9:8a:ff:74:7f:47:fd:1e:60:f1:3d:35:
                    46:24:49:d2:ad:a0:5e:f6:28:45:3b:d5:c8:b3:4e:
                    da:5d:b1:af:91:c7:59:5a:4d:c6:a2:b1:1f:28:5c:
                    de:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E8:10:E2:F7:49:AF:24:EA:89:7D:CE:BE:0B:1C:0B:0F:7D:D6:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/e818cdcd-a4af-3c23-886f-2137341ef0ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:c15::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:99:28:d9:47:85:ec:97:63:35:1c:ae:8e:62:bc:a9:8b:c9:
         dd:60:1c:d4:ca:ac:19:fb:c2:dc:f3:b8:08:01:d2:d8:58:b3:
         b2:1a:ef:6c:6a:ec:31:df:6b:d1:03:ae:40:ca:44:ee:48:f1:
         3f:a2:18:84:c4:1d:26:fe:c7:06:f7:58:44:8c:10:e5:b0:d0:
         0c:3b:e0:ff:5d:06:36:12:3a:7d:0a:d3:cf:ba:fd:dd:da:77:
         63:97:a9:c3:6e:79:60:3f:8d:af:8c:76:1b:d3:6b:66:43:15:
         c3:c1:5f:da:4b:95:14:41:b2:9c:fa:52:bd:a6:e7:91:23:50:
         c1:5d:f5:6c:1d:9e:2a:70:e7:7e:6a:29:0d:38:71:5a:96:1b:
         4e:b8:22:1b:b3:50:9d:15:9e:d6:49:b8:62:53:3e:2e:05:51:
         c3:84:b9:47:82:9c:7b:a9:4d:98:c8:94:cb:23:a6:9f:6e:20:
         b5:3e:f9:93:a6:9b:71:f5:ff:cb:64:2e:ac:54:9d:61:22:84:
         94:80:1d:e5:1b:e8:bd:2a:de:cc:fe:c9:d3:d9:2e:3e:9c:94:
         f6:b3:79:b0:eb:b9:57:2f:5b:59:8a:de:12:0e:86:17:10:8a:
         df:a9:99:b2:15:9b:66:bd:12:6d:0b:c5:d1:92:13:3b:e5:66:
         5e:b3:14:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:00 2026 by rpki-client