Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/9e746b82-f44c-3dcd-8d17-a05ea722ae71.roa
File:                     9e746b82-f44c-3dcd-8d17-a05ea722ae71.roa (raw, json)
Hash identifier:          0WLwLqAP6f1SXlfSqGQIRoflSJEOJZe91m3LtuTjuWk=
Subject key identifier:   6F:B9:F0:53:68:45:16:80:58:DD:79:03:EF:3E:0B:1B:8C:90:9C:12
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584D7A0531C2CB082CCD60C77B40
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/9e746b82-f44c-3dcd-8d17-a05ea722ae71.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        2607:28c0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:31:c2:cb:08:2c:cd:60:c7:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=c98854dd-eb72-4022-a713-89fdd95db2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:42:d2:15:ac:16:e4:91:2d:b8:75:85:50:8b:
                    5a:77:85:96:e2:b8:72:c5:ba:47:bf:2a:bb:0f:c5:
                    d9:f6:85:a5:01:b8:8f:90:48:bb:ce:d5:09:1b:6b:
                    0c:cb:e5:94:0a:5a:6c:31:7a:52:f7:ce:82:26:a7:
                    8d:54:cd:9e:fa:52:c4:85:a0:dc:2a:8b:3f:c8:af:
                    f9:a8:52:d7:26:32:bb:8d:fc:be:be:fd:7d:70:ff:
                    15:f0:c7:4a:91:60:55:f4:49:fa:64:70:6a:85:c9:
                    52:64:27:1b:ca:db:aa:73:73:a4:6e:88:82:1a:c4:
                    03:b8:31:32:d1:17:98:0c:4d:bd:a0:91:82:ab:ec:
                    40:b6:3b:d4:22:ae:41:3c:7d:52:0b:d1:96:ef:88:
                    09:0c:9d:f1:7b:bd:b1:7a:ab:67:7a:6f:64:8a:fb:
                    c6:15:9c:b8:8d:d5:30:ca:d7:13:e8:55:93:1c:60:
                    cc:03:9f:28:33:44:56:22:0d:89:2b:b3:31:b8:b5:
                    cd:13:8b:72:9c:fc:c9:cd:3c:20:e5:07:08:6f:6a:
                    30:ce:3b:10:66:ce:4e:65:5f:37:26:57:7c:8f:30:
                    9e:15:2d:09:d5:1f:f4:14:ad:f9:0b:6b:d6:4e:ca:
                    e5:1c:2d:de:a9:5c:b2:c9:e5:2c:d6:dc:5a:5e:c5:
                    e6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B9:F0:53:68:45:16:80:58:DD:79:03:EF:3E:0B:1B:8C:90:9C:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/9e746b82-f44c-3dcd-8d17-a05ea722ae71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:28c0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:1e:92:4c:03:2b:dd:2a:c3:1e:52:56:0e:00:c8:dd:b4:c3:
         16:98:42:8a:38:2c:43:4b:e1:83:b9:54:0a:b9:17:54:4f:f0:
         a8:8b:4e:fa:7c:80:05:e4:6d:18:a3:a6:fa:d4:45:3e:5c:34:
         12:57:cf:9e:43:f7:12:03:09:c7:a6:fc:2c:94:6d:dd:53:b5:
         e5:23:2b:e2:dc:c2:cc:54:59:b5:4d:4e:10:29:21:c4:89:b9:
         89:a1:03:46:33:cb:5b:57:97:ad:8b:db:ae:ac:d4:27:22:7a:
         a6:f3:5e:da:b3:5e:18:ca:65:1c:84:fc:21:2d:4d:77:06:dc:
         f0:87:3f:ec:38:a8:d6:d4:d6:33:67:ec:25:ff:f3:85:a7:25:
         38:b8:89:07:bd:7d:9b:91:52:d7:3a:96:04:f4:27:b1:ec:2f:
         19:b9:57:60:30:72:41:a5:d1:24:58:bf:04:6d:38:23:64:86:
         09:02:e6:14:94:4d:73:82:ae:27:61:3f:47:a4:96:94:db:e3:
         96:92:e1:e3:5c:8f:36:2d:c2:57:5a:11:87:34:cc:6f:37:b9:
         36:ca:09:da:1b:73:5d:e3:d7:ea:45:f4:30:ab:bc:19:e7:4e:
         f3:aa:b3:d8:25:38:2c:95:92:f6:9e:c3:ac:a5:47:67:04:03:
         a3:73:7c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:33 2026 by rpki-client