Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/d99bd456-dc63-3529-a913-40ad313108bb.roa
File:                     d99bd456-dc63-3529-a913-40ad313108bb.roa (raw, json)
Hash identifier:          OciHjE9AEGerpWWd5oeIxogu/j+/kWbv1SQvOUdL6+4=
Subject key identifier:   E7:61:72:84:63:1F:1B:11:96:B5:72:EF:1E:3C:E9:82:BE:65:CD:6E
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E86F508668CF3115ACDB341C0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/d99bd456-dc63-3529-a913-40ad313108bb.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     13778
IP address blocks:        2602:281::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:08:66:8c:f3:11:5a:cd:b3:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=e85b72c6-59e4-4385-9f12-d78cda201938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:42:ea:8a:e6:f6:51:1b:5a:12:8e:62:90:20:
                    00:04:0c:99:aa:ab:7d:9a:88:9b:7c:db:b3:06:5c:
                    e8:2b:d4:b4:84:d3:87:4c:b0:c3:9c:11:cd:83:6a:
                    d8:03:00:da:21:95:4c:37:a4:03:bd:8e:b7:db:10:
                    60:fe:79:42:36:2e:ed:74:4a:b1:77:8a:17:b2:0f:
                    87:19:94:51:66:09:46:c4:4b:3e:a0:52:d2:80:eb:
                    fb:99:70:8e:a7:5e:67:60:c0:6e:78:4c:ba:ae:8b:
                    e4:19:15:8f:c8:aa:7c:14:07:1b:d8:80:b0:1b:c8:
                    84:56:e4:b9:f1:c8:3a:3b:53:21:e1:eb:5a:15:ab:
                    5f:20:81:02:80:36:15:7d:5f:bc:4f:90:02:66:49:
                    9f:71:06:da:a7:d4:1c:a0:6e:a5:16:b7:5e:cc:82:
                    e8:b2:c0:44:46:18:88:ec:b6:e8:0d:f7:90:da:a8:
                    4f:0c:8b:cb:a3:71:90:47:52:1f:0e:84:02:38:ca:
                    d9:96:80:6c:15:1d:29:3b:41:ec:12:f6:90:74:a2:
                    65:c4:49:55:01:ee:9b:e3:1d:dc:29:10:fc:30:dc:
                    cb:7e:7c:8f:38:98:02:fb:85:1c:02:10:73:b6:88:
                    a6:33:40:84:93:c2:ff:b7:a3:cf:d1:35:7f:1f:92:
                    50:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:61:72:84:63:1F:1B:11:96:B5:72:EF:1E:3C:E9:82:BE:65:CD:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/d99bd456-dc63-3529-a913-40ad313108bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:281::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:95:3e:7b:cb:f0:eb:a4:b7:2f:5d:af:b6:2a:e6:2d:e8:1b:
         0b:e3:45:39:56:6f:0c:df:36:d3:ba:c4:ea:f9:3e:11:26:64:
         84:9f:31:44:1e:a5:0e:05:79:c3:7f:d4:06:d8:a2:58:16:e1:
         26:ba:e5:3b:14:ae:a4:6d:e4:03:3e:54:e1:16:1d:d2:12:c7:
         ff:5a:39:37:90:f5:b0:cf:0f:66:6c:d4:08:97:cb:5b:ee:51:
         eb:37:87:90:78:b1:92:33:70:a8:98:0a:50:d3:f5:f4:35:3a:
         50:0c:5c:34:dd:bf:c2:11:88:63:ea:cd:b6:99:7a:96:dc:e9:
         c2:be:80:66:cd:da:3f:29:42:07:52:87:c1:a2:ee:47:b2:87:
         b1:e5:58:b4:e2:de:55:5e:8d:16:07:4d:65:59:7c:f0:ee:12:
         15:cd:a6:a6:2f:65:65:a8:12:21:29:7b:b2:45:8e:7e:02:24:
         bd:a0:01:09:51:3b:f0:54:ab:68:e5:68:b1:74:72:5e:db:b0:
         f4:c3:4f:3c:96:38:cf:61:6c:bd:e7:e5:14:ac:40:c8:90:63:
         07:93:9f:4d:9f:24:fa:b7:7f:fb:70:ac:a4:3a:b9:4f:55:fb:
         2f:5e:f2:15:9b:b1:ea:e1:07:2e:db:1e:e1:1b:1b:0d:24:1f:
         9d:86:77:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:58:39 2026 by rpki-client