Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/28adbf23-0f6a-3314-9581-26660c494877.roa
File:                     28adbf23-0f6a-3314-9581-26660c494877.roa (raw, json)
Hash identifier:          53q5FDFV6RHIFuRndhQJeGAsdiCIuXqe7ZoRbRDAW9E=
Subject key identifier:   C2:94:F6:DD:BC:47:43:1E:2E:36:F9:1D:37:42:01:AD:28:F4:8E:B2
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F7FE2EE8351E0423EE4936E00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/28adbf23-0f6a-3314-9581-26660c494877.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     62610
IP address blocks:        2604:980:e03c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:ee:83:51:e0:42:3e:e4:93:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=0c953361-93c0-40d6-a81d-4adeeb9fa5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d3:30:1b:df:9b:cb:7f:38:97:fb:8b:40:b4:
                    30:47:b0:66:7e:e4:25:1b:e1:3a:f7:6f:55:0f:d4:
                    79:70:d7:83:84:00:c7:22:b8:1e:ea:2a:47:60:3d:
                    42:e2:3c:f7:76:06:af:38:7c:f6:12:ed:e1:68:01:
                    29:cc:fa:f3:c6:e8:d3:07:b9:4e:ef:3d:63:a3:c1:
                    ec:d1:0c:74:bf:01:12:b6:62:38:3b:55:c3:25:c2:
                    d2:67:7f:5a:7d:31:5f:57:05:09:11:60:2a:e3:2a:
                    f1:6b:1c:04:7f:58:36:07:06:a4:32:18:de:cd:8b:
                    11:2e:2d:7b:35:a2:a3:4a:a4:db:f0:f9:f4:97:8c:
                    0a:c9:a0:b1:4b:96:68:90:0c:c3:d5:0d:0a:cc:5f:
                    09:d0:4e:e0:a9:d5:f1:1f:2e:cf:d3:64:a2:e5:43:
                    38:18:25:ab:db:f5:4c:27:75:22:a3:cf:6f:95:65:
                    c4:47:92:af:da:f8:83:48:89:10:b8:f5:2f:af:ed:
                    ce:ff:20:63:91:98:24:b4:88:bd:d3:63:a4:5e:0c:
                    50:1b:6d:79:35:cd:13:85:c5:45:5f:90:2a:ff:52:
                    42:0e:9d:72:90:99:3e:a5:59:a6:84:5e:fa:6e:91:
                    db:af:bc:02:e7:4c:57:ac:e1:42:d0:a1:fd:a1:ce:
                    13:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:94:F6:DD:BC:47:43:1E:2E:36:F9:1D:37:42:01:AD:28:F4:8E:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/28adbf23-0f6a-3314-9581-26660c494877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:980:e03c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:88:68:cf:6b:ca:fe:b3:d7:ab:ca:cd:a0:db:60:77:33:66:
         f0:4b:58:c7:21:19:a8:68:fa:30:ad:87:58:c6:ff:49:55:14:
         7f:92:12:c9:38:a2:ee:b9:d2:23:0d:d0:0e:50:81:e7:75:a9:
         25:e5:8e:9a:b8:3b:7a:bd:8a:a3:63:0e:60:e8:34:51:b8:04:
         cf:aa:6b:83:f8:99:6b:16:b4:81:c2:1d:97:6e:94:a6:b6:27:
         31:52:b2:7f:6b:ba:5c:52:a7:75:f5:08:13:32:0e:4d:bb:e1:
         6d:97:f0:77:31:34:4d:c0:de:bb:05:2d:7a:8d:3d:65:47:11:
         4e:5b:ae:e8:05:c5:68:85:9a:91:1c:72:70:b2:3b:c7:88:28:
         b7:f9:54:0f:86:7c:0a:a2:ff:aa:19:c0:99:29:76:27:87:7a:
         fb:26:f0:c0:a6:f8:42:a9:56:a5:6b:c1:28:43:79:18:c3:6b:
         69:15:e4:c7:d9:79:1d:f3:d7:f8:fb:5d:88:4b:2a:37:5a:94:
         f0:c4:be:62:db:03:6a:aa:a8:bd:14:78:f8:dc:91:4d:f3:00:
         7a:0f:32:d6:50:4a:e4:f2:f4:8b:bc:c5:ef:d7:26:5d:0f:95:
         55:82:a9:0d:f6:22:0c:65:04:44:28:a9:e5:78:39:c4:11:b4:
         56:d6:33:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:34:13 2026 by rpki-client