Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/f56df86a-6493-33a9-8bd4-c723e8f562d3.roa
File:                     f56df86a-6493-33a9-8bd4-c723e8f562d3.roa (raw, json)
Hash identifier:          xzIEIzfMX/mctDvC6kKBQYL6xiC8iuNGkwlGEAb0XgA=
Subject key identifier:   22:48:64:AF:D2:17:CB:89:E1:F7:60:C9:B5:DB:C0:FB:45:4A:DE:74
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E86F50E03A7960BDDB04DC140
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/f56df86a-6493-33a9-8bd4-c723e8f562d3.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     8075
IP address blocks:        2602:28c:2182::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:0e:03:a7:96:0b:dd:b0:4d:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=ab76d828-c071-4d85-8fbe-72bffefd0791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:f3:ae:57:9e:68:a6:53:1e:e7:45:60:e7:
                    e6:a3:73:5c:56:d5:a6:25:b4:a4:88:a5:31:cb:80:
                    3a:92:19:07:95:c7:8d:f5:85:e7:67:b6:5f:43:0c:
                    69:35:04:1b:47:ff:fb:cc:44:6f:82:df:24:0f:9a:
                    d6:f1:45:a2:e2:d9:e9:36:fb:1f:c8:d3:21:5a:a1:
                    c4:a7:71:24:5e:25:7e:d8:75:7a:5b:ae:cd:b8:9b:
                    a9:0b:9a:fa:34:1f:f5:d9:b4:76:56:06:14:fb:66:
                    d4:c9:05:0e:6a:3e:3d:4c:f4:f6:f1:f5:2b:b6:e3:
                    ce:c2:74:b5:b9:cc:25:b5:9a:56:f5:81:ad:e2:63:
                    87:a2:71:22:07:5b:03:a4:f0:25:83:7f:df:fe:04:
                    dc:aa:4e:a7:f2:d7:0e:f0:dd:10:ad:94:58:b3:b1:
                    e1:c5:b5:48:54:81:85:d4:b9:a4:e6:14:4c:f4:e8:
                    d8:5e:92:a6:15:6e:86:64:9a:a7:be:a3:b5:f3:ca:
                    8f:ed:18:44:ed:0f:63:a2:91:8e:21:bf:6a:f6:4b:
                    ca:8c:c0:0c:f2:09:a6:27:1d:57:8c:47:ab:ee:fd:
                    98:73:59:e8:1d:be:14:f2:fa:b3:22:37:b3:27:7c:
                    a2:ae:3b:e8:22:0f:22:7f:2f:91:45:95:a2:02:d1:
                    6a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:48:64:AF:D2:17:CB:89:E1:F7:60:C9:B5:DB:C0:FB:45:4A:DE:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/f56df86a-6493-33a9-8bd4-c723e8f562d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:2182::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:e8:e8:b6:37:3a:7a:1d:5c:be:59:a4:89:cc:99:28:f5:0a:
         ed:5b:68:30:f9:f0:55:d3:b7:2a:fd:74:3f:35:a4:42:4a:2d:
         88:7a:46:15:f7:68:d7:91:8f:f8:bf:29:dd:41:a7:1f:86:64:
         bc:12:8d:30:12:ef:39:fd:01:86:8d:ac:93:0b:5f:4b:d8:15:
         78:cd:f5:32:0d:16:0a:26:83:7b:50:c5:3c:0d:a4:88:99:e2:
         ff:a1:f3:43:34:5c:16:43:1d:de:e1:5a:eb:80:18:bc:62:c1:
         17:6f:26:7d:11:9f:5a:41:1d:d3:41:d6:56:06:b4:16:34:ea:
         c8:b8:86:c2:75:59:e4:40:24:d7:60:7f:22:a5:a4:b4:17:71:
         4a:85:1a:52:d4:76:1b:86:64:ad:aa:ec:e6:5e:80:54:b0:5f:
         98:1f:3f:e3:d8:65:a1:af:54:54:56:3e:ae:ff:59:58:af:fa:
         c0:54:95:0e:fd:4a:b9:64:79:cd:f7:da:de:78:6e:44:ab:be:
         f6:d9:44:b3:5b:7f:cd:2d:62:1c:0e:41:ed:f7:65:56:62:80:
         a0:0d:a5:1b:a5:29:82:7e:76:78:0e:3a:9d:96:9e:3b:48:48:
         df:0c:fc:d5:b3:ef:ed:f0:9a:f5:de:eb:36:dc:81:25:fc:9f:
         45:cb:88:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:55:15 2026 by rpki-client