Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/b8c26188-42dd-34c9-9794-bc44273d184f.roa
File:                     b8c26188-42dd-34c9-9794-bc44273d184f.roa (raw, json)
Hash identifier:          ifmLbEjW9SrXuWsp2mW+d5Jbyg9cgGlnsxxnEf+4pWs=
Subject key identifier:   36:38:FE:BE:0D:56:52:09:B0:BC:8C:3D:51:75:B5:CC:B7:9C:35:F0
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E86F50EBFC7A862323E38AB00
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/b8c26188-42dd-34c9-9794-bc44273d184f.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     8075
IP address blocks:        2602:28c:3059::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:0e:bf:c7:a8:62:32:3e:38:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=0bdbc7cb-2721-47be-baab-04ecdce8931d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7a:08:c6:f2:a4:14:f1:32:87:23:0d:cf:ca:
                    66:f4:17:09:a9:48:f9:62:da:8e:79:30:f6:56:32:
                    aa:31:72:a4:3d:88:c6:60:9a:5a:bb:84:f9:94:a9:
                    d9:62:ff:8d:59:9b:1a:01:1e:73:9d:52:25:8c:4d:
                    90:83:25:4d:4a:58:4b:37:b0:b4:80:91:cd:d6:f8:
                    77:34:a8:da:54:7a:e6:81:7d:4b:01:e2:0d:83:46:
                    2b:fe:c9:b6:be:a7:25:b4:24:87:3c:47:c1:c7:b2:
                    42:20:8b:c7:6c:5b:70:82:57:47:78:29:a0:01:9f:
                    f5:16:4f:d5:9b:d0:a0:ed:1c:4f:f4:96:85:bc:3d:
                    58:56:91:02:30:d5:bb:14:7b:39:f5:bf:6b:b9:34:
                    65:1e:3d:52:01:53:d6:61:c4:7e:73:5c:38:2f:0b:
                    87:2d:50:10:6a:d6:e4:03:84:28:a6:2a:97:99:04:
                    9f:6e:e9:ab:8b:03:2f:fd:6d:b7:a7:39:d0:28:15:
                    12:b2:a5:11:2b:cb:d9:94:8c:8e:0f:d4:2c:a5:db:
                    97:a5:da:fd:b9:26:89:0d:a4:de:d3:f3:5f:a6:fc:
                    f6:f9:50:e1:21:62:bf:da:74:b9:ae:5a:3a:05:90:
                    42:ae:e9:cf:ea:d3:82:72:a9:6a:70:2b:2d:23:42:
                    b9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:38:FE:BE:0D:56:52:09:B0:BC:8C:3D:51:75:B5:CC:B7:9C:35:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/b8c26188-42dd-34c9-9794-bc44273d184f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:3059::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:bf:e4:cc:f5:11:66:dd:60:8d:69:6a:8f:32:b3:74:b7:60:
         b9:d4:af:5f:5f:62:fa:2a:43:3d:77:18:1b:79:59:42:90:31:
         60:09:44:13:c3:b2:d7:06:49:bc:a2:a8:7a:bc:bf:d2:be:7f:
         7d:83:30:24:52:96:07:78:73:94:b2:2b:53:6e:f8:b8:9d:91:
         58:24:19:ab:b9:53:1a:11:3f:92:d5:79:33:07:63:1a:b4:49:
         3a:66:41:fa:3b:9d:fe:59:59:ab:52:b3:3b:e1:d2:d8:a4:78:
         e6:d0:f4:96:81:69:7e:a4:a1:e6:c3:cb:78:64:5c:60:09:91:
         99:a4:e4:0e:93:0e:25:36:d9:e8:80:68:bf:09:2c:71:ae:cc:
         ab:ad:69:fb:50:d2:25:05:79:ee:e5:22:25:9d:8c:6b:f9:4f:
         6f:20:df:9f:e0:63:22:78:86:df:c8:9f:71:70:66:5f:a6:55:
         ed:0a:c8:39:84:d8:04:13:1a:f4:d3:f5:db:ac:80:97:35:2c:
         30:f3:b6:6a:54:5a:51:ef:ac:8e:21:90:fa:73:e1:4c:c6:40:
         1e:fe:a7:f0:02:39:0b:ce:84:b7:62:5b:b3:e1:87:81:a9:66:
         c6:b7:0a:3e:07:38:65:7c:e1:a7:70:43:ca:03:45:64:01:76:
         06:9a:ed:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:55:06 2026 by rpki-client