Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/ca484b46-ee28-30b9-9758-dd97a15bb310.roa
File:                     ca484b46-ee28-30b9-9758-dd97a15bb310.roa (raw, json)
Hash identifier:          CMtjt1EYa47WvJzUjkyVnY6ss0EtoKLakYp+6mwoUX4=
Subject key identifier:   50:FB:9B:07:64:76:30:5E:6F:44:C9:81:9C:13:B1:AA:82:E7:E6:1C
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584D83CAB0E30896B56527B49FC0
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/ca484b46-ee28-30b9-9758-dd97a15bb310.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        2607:28c0:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:b0:e3:08:96:b5:65:27:b4:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=937c722c-9a32-47ba-95f1-7a1ec9faa2c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:73:27:7a:71:cd:19:88:14:92:7b:84:3c:c8:
                    e6:3d:13:57:89:99:51:6a:4d:72:1d:ae:da:07:b5:
                    d8:c3:95:96:d7:73:4e:83:68:25:a9:89:7f:76:c0:
                    5e:b0:60:a0:a3:39:29:bc:d8:78:b6:c1:40:fa:aa:
                    21:13:2b:b6:4a:56:b2:0c:12:77:f2:db:27:81:08:
                    32:c8:c9:be:37:f8:0b:f4:f5:5c:f3:6c:61:8e:80:
                    23:6b:b9:9a:69:78:75:60:e0:03:77:6b:38:9f:7a:
                    dd:21:02:9a:9c:8f:16:55:74:a1:6f:88:31:fd:1b:
                    86:2f:b6:9c:83:2a:cb:45:75:8e:5e:8e:1b:39:70:
                    a0:66:6a:fa:6b:11:1e:c9:ab:70:36:f8:f4:f8:7c:
                    00:f9:00:db:83:39:c6:98:53:0e:5d:45:d6:b7:bd:
                    e7:69:b2:4a:e6:00:85:14:46:6f:6d:c0:6b:c6:51:
                    26:4a:a5:2e:05:4d:93:ea:34:4b:a1:e1:de:62:75:
                    4d:80:86:78:2f:4b:3d:2b:6d:e5:75:39:40:a5:30:
                    69:f4:14:1a:34:4d:5f:c5:c1:07:69:24:25:12:d0:
                    2b:c0:d2:60:cc:59:50:5f:a5:e2:ef:46:bf:39:09:
                    58:db:c5:0a:81:f6:f8:c3:e4:b6:83:57:15:fe:37:
                    25:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FB:9B:07:64:76:30:5E:6F:44:C9:81:9C:13:B1:AA:82:E7:E6:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/ca484b46-ee28-30b9-9758-dd97a15bb310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:28c0:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:8e:02:65:96:9c:af:40:f4:5c:b5:0a:d2:dd:18:2d:d5:b5:
         4f:db:da:20:e0:96:b6:a3:b4:85:84:cd:cd:df:b8:e3:ff:f3:
         12:e8:c5:6b:b3:c0:fc:2a:0a:e5:5a:05:5f:87:fc:6c:61:6f:
         9d:02:6a:40:27:33:60:88:3e:61:c3:be:3d:a4:93:6b:88:56:
         31:ee:fb:2b:e9:bd:1c:00:4f:21:c4:94:65:5a:41:8f:0e:98:
         57:ab:e6:a0:f9:c6:cc:b1:70:bc:ac:03:0f:3c:37:54:cd:25:
         88:1d:cf:29:9f:6b:75:28:a2:57:1d:38:d6:5f:f2:72:26:8c:
         c9:10:e2:5b:af:cf:d2:bf:d7:09:61:4c:fb:72:c9:cf:1a:fe:
         e2:0f:43:70:12:d1:26:48:d0:0d:4e:ed:69:ff:d9:88:87:dc:
         01:4f:0e:dc:96:7a:08:f4:b2:6c:a3:7e:58:3a:09:e1:4f:ed:
         b0:68:02:8c:6c:6f:95:40:25:c1:b5:a6:66:58:35:59:eb:a5:
         46:6b:c3:80:9c:5d:cb:39:e4:e8:91:90:18:c1:d4:9e:d2:7b:
         65:81:bb:88:6f:a4:98:9f:34:1e:6b:70:fa:5d:a6:fc:42:10:
         d3:d6:df:5a:a9:57:cb:46:de:e9:47:b9:78:c3:a2:30:4f:46:
         54:a9:b5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:07:30 2026 by rpki-client