Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/30aedf31-1c65-3dc0-b886-5ba7ae6e5798.roa
File:                     30aedf31-1c65-3dc0-b886-5ba7ae6e5798.roa (raw, json)
Hash identifier:          2Y4tnNTJo2KvVLJ8nmYIQ7BG81D2erDHcRFXou2Eayw=
Subject key identifier:   3F:E8:48:AA:8A:FB:68:9C:B2:68:4C:38:85:23:54:71:73:C0:0A:AE
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E86F4F5EA0015703C97957540
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/30aedf31-1c65-3dc0-b886-5ba7ae6e5798.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     396982
IP address blocks:        2602:28c:3002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:f5:ea:00:15:70:3c:97:95:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=67f39d08-1f7a-4dec-ba43-fafec3a6fdfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d2:be:9a:ab:b9:74:4e:55:5b:b7:e7:f9:a3:
                    e8:eb:59:f4:20:d1:e9:f3:5c:2e:b6:71:1c:9e:b7:
                    3f:8d:5e:10:92:9b:d4:a5:e3:29:67:78:ea:d9:d1:
                    c4:7b:88:56:f1:4c:9e:80:42:c6:5d:e3:87:e4:8e:
                    ac:45:57:ea:ee:4c:b9:36:eb:a1:4a:38:85:69:ac:
                    5a:48:09:4d:de:d5:47:47:60:8e:90:bb:6a:49:fa:
                    4f:e4:a2:7e:40:f4:9d:ba:ea:c9:54:c9:2f:da:e9:
                    5d:eb:c1:66:e2:0e:fb:58:33:f8:04:82:82:0a:17:
                    37:b4:7c:90:d7:b4:65:68:57:0a:aa:77:89:a0:e1:
                    df:2e:d2:ea:13:26:9f:55:de:8c:64:8c:f9:2e:6a:
                    54:f9:5c:68:60:01:3d:20:7e:b9:6a:d4:70:ee:2c:
                    1f:ae:76:2a:64:ee:b4:00:f6:e3:79:d5:97:c0:61:
                    7f:5e:2b:04:56:29:45:f5:a2:2b:20:70:c4:4a:03:
                    e2:cd:d2:04:b5:12:a4:0f:b5:8d:b6:2a:d8:c4:e8:
                    b1:0f:2f:f7:be:e4:73:89:de:f3:94:bc:8f:67:02:
                    3a:b5:41:17:dd:0b:25:ba:46:8e:a7:4e:0f:96:da:
                    e5:80:f8:ad:7e:10:dc:ae:56:00:da:05:db:dd:3a:
                    8d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E8:48:AA:8A:FB:68:9C:B2:68:4C:38:85:23:54:71:73:C0:0A:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/30aedf31-1c65-3dc0-b886-5ba7ae6e5798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:3002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:af:04:ea:5d:31:74:21:9d:97:fa:a9:e6:f6:cc:52:ab:10:
         90:13:10:d8:9d:90:61:35:f5:43:75:7e:65:f6:5a:41:0d:a3:
         fd:c2:d6:22:07:49:92:6d:76:a5:e5:4e:b0:22:f5:cf:e0:ae:
         38:f6:bb:d3:53:61:8b:cb:98:f4:73:78:ef:11:91:8d:f8:37:
         18:eb:4e:bb:f9:84:8c:12:14:dc:8a:04:84:0e:44:08:68:de:
         a7:c0:82:24:ef:7c:8c:fc:15:ae:2d:22:58:40:52:4f:9d:16:
         9e:a9:c0:d3:e3:6e:50:b5:e1:a4:b6:ba:f3:ec:7a:23:31:08:
         3d:ec:d1:fa:c8:e7:63:53:0c:e7:17:f6:22:0b:13:9c:1b:f1:
         2d:62:bd:6b:0a:5d:95:13:c2:9a:09:71:5b:e5:29:d6:ac:e3:
         55:2d:a1:23:26:2d:e9:56:29:bf:e6:8f:76:c8:a9:36:ee:9a:
         93:e5:b1:00:e9:13:51:74:56:29:34:79:d7:90:41:b6:62:e0:
         97:cd:e0:7a:8a:04:82:9d:89:07:dc:d3:f6:1e:75:ae:04:02:
         b5:17:e7:d1:f2:86:cc:7e:75:15:85:56:7c:56:5e:8e:62:b4:
         be:08:48:17:31:f7:2e:d5:c3:f9:0e:48:84:88:4a:d6:8a:9d:
         ec:5d:ea:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:58:42 2026 by rpki-client