Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4736ce53-c18b-3c15-8b13-f1e3d12758dc.roa
File:                     4736ce53-c18b-3c15-8b13-f1e3d12758dc.roa (raw, json)
Hash identifier:          USwPCK6sdHEq5ooVtM1kSuIxS83L15lxdPuTbpoKcAg=
Subject key identifier:   26:C8:81:3B:B8:A9:C7:68:3F:F4:D2:75:45:3B:0E:D0:2F:B9:CE:A6
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E86F4F48B491250508AE16B00
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4736ce53-c18b-3c15-8b13-f1e3d12758dc.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     396982
IP address blocks:        2602:28c:3004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:f4:8b:49:12:50:50:8a:e1:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=40b2e8d5-8b63-4d88-a02a-d764dfe10ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f2:d2:08:de:41:57:78:0d:65:df:0d:0b:a7:
                    e4:e3:fc:a2:ad:21:90:76:6b:3e:02:f1:0b:e4:c4:
                    e1:57:5a:13:65:ae:a9:7f:fc:99:6e:9b:da:5e:37:
                    a3:f4:70:16:93:04:59:5b:97:a2:ee:e5:78:f2:b1:
                    42:58:f5:4c:44:51:b2:d4:a0:cd:4e:10:a9:2f:f6:
                    69:23:3a:fe:14:7f:bb:42:82:48:52:ef:82:e1:e4:
                    a5:2f:1a:60:be:38:6a:42:05:20:98:b8:ce:42:07:
                    b0:b2:32:de:86:90:84:3f:ce:a2:f0:35:b1:bc:53:
                    34:08:57:d0:ec:aa:b9:46:f1:f9:40:1a:b5:d5:e4:
                    21:ad:ca:9e:4b:73:7a:04:1c:5c:31:17:f6:57:83:
                    8f:e0:67:ba:f5:62:7c:d6:d6:f3:f5:ba:b2:f5:59:
                    df:e5:ce:da:85:6e:0b:88:2f:16:f3:c3:d1:3c:92:
                    92:d6:fa:1e:65:2d:79:e2:3d:ae:ef:3f:0d:e5:92:
                    f2:58:55:b5:5e:7a:de:03:1a:39:bc:48:4b:54:c3:
                    46:f2:37:db:14:39:f9:89:ec:e1:ed:03:18:b0:6e:
                    68:ac:2e:2f:b9:b8:32:ef:fc:09:ab:b2:02:9d:1f:
                    9f:b3:d9:7e:d0:5e:3f:26:3e:8a:3a:5d:67:47:a5:
                    64:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C8:81:3B:B8:A9:C7:68:3F:F4:D2:75:45:3B:0E:D0:2F:B9:CE:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4736ce53-c18b-3c15-8b13-f1e3d12758dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:3004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:bd:62:f4:01:41:6e:eb:20:2b:13:88:9e:29:53:20:b0:b2:
         fe:1d:5e:9e:94:77:3d:90:da:14:68:96:b4:0c:b8:2d:6b:4e:
         18:67:09:db:4f:8f:f9:77:62:13:03:24:ea:06:08:4b:17:7d:
         50:d9:d0:fd:dc:80:fb:40:f4:4d:28:52:37:56:64:fe:ee:3a:
         d4:16:85:4c:f5:2c:76:5d:f9:9f:8e:74:97:51:af:b9:de:83:
         33:dc:1b:41:06:e0:9b:bf:43:7e:d5:54:b4:ae:a8:c5:9e:44:
         d5:ad:9f:b1:3d:d0:86:71:9c:92:b5:d0:58:6f:49:63:2a:ce:
         8b:32:de:08:25:26:0a:ee:1e:9a:60:a3:07:d0:10:07:cf:f1:
         b2:ab:3f:19:81:1c:ac:1c:30:76:d1:d1:cd:e1:7d:62:fe:fd:
         f9:5f:41:49:36:f9:d3:b7:9a:4a:ed:a7:a7:63:f2:c8:d7:4c:
         b1:62:ae:63:0f:ff:af:a8:b5:95:b0:5c:10:77:79:d9:71:bb:
         59:00:59:5a:aa:f8:0a:f3:e0:b1:53:fc:a2:5b:51:92:d8:e3:
         f6:78:70:5b:c6:39:ac:a8:24:c4:1a:de:ad:57:47:05:f4:97:
         46:20:f8:cc:44:12:05:87:49:a1:5a:ce:f5:eb:52:20:8c:4d:
         d1:45:18:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:58:48 2026 by rpki-client