Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/27f744e0-d955-3c3c-8552-4cdcf67011b2.roa
File:                     27f744e0-d955-3c3c-8552-4cdcf67011b2.roa (raw, json)
Hash identifier:          xpCRINB8d6oupa2AjFAStbhfuTkIrPGlkRlxadmGd2Q=
Subject key identifier:   F7:0C:16:08:86:19:91:A5:57:85:E3:F1:AA:20:F3:1C:22:8E:C9:5F
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E86F50F322556410DE32EF0C0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/27f744e0-d955-3c3c-8552-4cdcf67011b2.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     198949
IP address blocks:        2602:288::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:0f:32:25:56:41:0d:e3:2e:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=11eeadc7-b72b-4127-b4ba-4b1fc7b31401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:20:74:84:4f:f3:49:6e:f6:47:c7:2d:8a:0a:
                    5d:1d:29:49:17:69:ea:d8:24:b6:5c:95:d2:ee:a2:
                    03:0a:29:9c:63:16:5b:04:f4:71:ac:23:65:36:e5:
                    63:5e:be:20:be:39:b1:1b:e4:a8:91:bc:0f:0b:af:
                    11:c4:ad:62:74:39:dc:e6:20:a8:db:d2:e8:d9:1e:
                    df:e6:0f:0a:f1:16:f1:12:af:ee:9b:e5:60:92:dd:
                    38:e8:33:a1:c2:9d:9f:b0:3e:8c:f4:7a:f1:43:c0:
                    a7:a0:c0:1c:a5:73:93:fb:8b:e5:31:28:28:f1:92:
                    0d:ea:37:87:e5:53:15:7f:86:f4:5c:fe:2b:6b:40:
                    e8:b5:c9:a3:52:56:61:49:45:20:10:6c:43:50:c7:
                    07:02:dc:36:ee:b9:16:fe:a4:ec:61:1a:1f:6d:db:
                    8c:29:39:73:d7:1a:cb:a8:bc:32:9c:90:60:36:1f:
                    17:04:8f:8b:5c:b4:1f:61:92:5d:1e:ac:bd:1d:a1:
                    51:f1:79:53:7f:e2:ed:22:4d:1a:94:b6:6d:81:7e:
                    d4:c4:03:73:79:67:86:32:41:9a:3c:48:7c:6b:90:
                    b2:c0:23:18:fd:94:ad:76:76:80:e6:8f:29:ea:85:
                    e8:f6:bd:3e:af:a9:a4:b2:a3:c3:38:ac:5e:50:c0:
                    ff:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0C:16:08:86:19:91:A5:57:85:E3:F1:AA:20:F3:1C:22:8E:C9:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/27f744e0-d955-3c3c-8552-4cdcf67011b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:288::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:84:21:f3:01:b0:52:4d:45:93:13:26:61:8a:db:a0:ba:84:
         8d:13:50:fb:24:20:90:a5:b9:8b:a7:64:9e:72:12:8a:48:4f:
         8e:75:91:b7:cf:12:d3:6b:8e:13:20:c9:16:2c:2a:9f:17:fb:
         68:9f:a9:f8:98:e7:30:57:06:33:20:0f:b0:5f:d2:93:58:5d:
         5f:b5:ba:a8:e3:72:2c:38:86:94:b8:47:59:d7:2e:74:56:cd:
         56:39:92:70:19:41:18:a1:40:23:e7:c3:8b:cc:ea:99:5f:8b:
         23:bd:57:dc:2b:cf:ac:06:d1:07:5a:4e:a3:9d:77:b7:4d:ef:
         89:d9:54:e9:11:8d:5b:24:09:fb:5c:83:06:20:b5:15:c4:db:
         e1:02:fd:fb:62:e8:08:5b:45:0b:7a:2d:3a:83:b9:0d:be:10:
         5a:7e:7a:bd:64:d2:96:6d:63:3b:f8:d3:a0:00:6d:db:e1:88:
         50:c5:3f:7d:39:94:76:ed:0e:e6:10:ff:b5:95:c0:34:83:9a:
         d5:04:6c:06:20:58:0f:3b:ca:88:24:58:c0:55:bc:9b:db:d5:
         d9:e2:36:9c:de:7a:8d:cc:fb:78:d4:08:9c:66:3f:9c:c4:ac:
         b5:92:79:6c:26:43:15:f2:4d:3e:aa:0c:2e:d6:b0:50:a7:89:
         ee:7d:59:52
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6G9Q8yJVZBDeMu8MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk
MTFlZWFkYzctYjcyYi00MTI3LWI0YmEtNGIxZmM3YjMxNDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSB0hE/zSW72R8ctigpdHSlJF2nq2CS2XJXS
7qIDCimcYxZbBPRxrCNlNuVjXr4gvjmxG+SokbwPC68RxK1idDnc5iCo29Lo2R7f
5g8K8RbxEq/um+Vgkt046DOhwp2fsD6M9HrxQ8CnoMAcpXOT+4vlMSgo8ZIN6jeH
5VMVf4b0XP4ra0DotcmjUlZhSUUgEGxDUMcHAtw27rkW/qTsYRofbduMKTlz1xrL
qLwynJBgNh8XBI+LXLQfYZJdHqy9HaFR8XlTf+LtIk0alLZtgX7UxANzeWeGMkGa
PEh8a5CywCMY/ZStdnaA5o8p6oXo9r0+r6mksqPDOKxeUMD/hQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPcMFgiGGZGlV4Xj8aog8xwijslfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvMjdmNzQ0ZTAtZDk1NS0z
YzNjLTg1NTItNGNkY2Y2NzAxMWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgICiDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBUhCHzAbBSTUWTEyZhituguoSNE1D7JCCQpbmLp2SechKKSE+OdZG3
zxLTa44TIMkWLCqfF/ton6n4mOcwVwYzIA+wX9KTWF1ftbqo43IsOIaUuEdZ1y50
Vs1WOZJwGUEYoUAj58OLzOqZX4sjvVfcK8+sBtEHWk6jnXe3Te+J2VTpEY1bJAn7
XIMGILUVxNvhAv37YugIW0ULei06g7kNvhBafnq9ZNKWbWM7+NOgAG3b4YhQxT99
OZR27Q7mEP+1lcA0g5rVBGwGIFgPO8qIJFjAVbyb29XZ4jac3nqNzPt41AicZj+c
xKy1knlsJkMV8k0+qgwu1rBQp4nufVlS
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:20 2026 by rpki-client