Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/416ba7af-3a2d-3b9f-a3dd-a7df29d3e257.roa
File:                     416ba7af-3a2d-3b9f-a3dd-a7df29d3e257.roa (raw, json)
Hash identifier:          lXpJmvxAOo4KG44woggKDSTgiDiUwC/MsCC9d8Ym9vQ=
Subject key identifier:   95:DE:74:55:04:4F:3F:38:95:D5:85:DA:0E:6A:2D:88:0B:B7:91:F9
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E86F4F662E6061953E9F4FC00
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/416ba7af-3a2d-3b9f-a3dd-a7df29d3e257.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     198949
IP address blocks:        2602:282::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:f6:62:e6:06:19:53:e9:f4:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=4741d365-1bda-4770-987b-160285627038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:a8:75:24:92:6e:5f:a1:7b:30:b5:90:cb:
                    90:22:8b:f7:51:f6:80:02:33:92:22:b9:da:b4:bc:
                    35:ef:20:4a:80:cf:5f:a4:7b:14:55:9b:7f:e0:cc:
                    a0:10:77:35:f1:9c:84:34:33:09:b2:16:ce:8f:ce:
                    fe:e3:bc:25:c3:12:0c:54:54:4a:f4:f2:2a:52:9f:
                    2a:5f:fd:65:b4:73:84:85:d0:b3:fb:a7:7b:f4:b1:
                    9e:20:eb:cc:67:dc:23:ff:ae:dd:42:b8:cb:29:9a:
                    50:b4:26:0e:5a:66:5a:40:a5:b7:73:58:1b:cc:62:
                    d4:ea:90:dc:67:e0:fa:8b:dd:4f:40:79:ae:24:02:
                    5a:5e:24:25:71:e2:f4:e3:c0:34:f2:03:3d:2b:99:
                    3b:2b:01:12:f2:7f:cf:74:50:f1:38:50:17:03:7e:
                    52:a8:70:72:fe:a6:31:f0:5e:ff:f5:1e:4a:d6:db:
                    51:e7:b5:26:c6:b5:64:44:91:3e:d1:0c:f3:21:0e:
                    04:5d:12:e6:5b:f2:a1:be:3d:80:7a:02:fc:42:24:
                    d2:35:4b:21:e0:bf:79:f1:b4:b6:be:30:6c:ca:07:
                    64:70:99:2c:c3:9a:30:d3:32:8d:7c:1f:ae:bb:75:
                    a4:cc:ad:c9:85:76:18:bf:1f:51:23:40:9a:d6:25:
                    55:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DE:74:55:04:4F:3F:38:95:D5:85:DA:0E:6A:2D:88:0B:B7:91:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/416ba7af-3a2d-3b9f-a3dd-a7df29d3e257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:282::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:53:0a:4b:00:36:00:45:c2:ee:40:19:cd:96:26:e6:62:3f:
         dd:f5:1e:14:19:5b:61:25:8d:98:db:58:4b:3e:33:27:fa:57:
         74:38:8b:d4:ae:14:63:de:0f:e2:eb:75:7b:8d:8c:7d:83:28:
         f7:64:6a:c2:4d:61:cf:1b:93:75:3a:5f:8d:5d:60:60:5a:18:
         25:86:6c:ac:7d:c0:9c:4b:a4:48:fd:08:fa:ea:c8:b7:7b:35:
         38:f7:35:55:ac:b1:54:d3:b2:9e:7f:88:d2:1d:d7:67:74:85:
         28:bb:2d:7c:2b:01:0d:4f:e3:c4:e1:5f:0e:d3:b2:f6:19:a6:
         28:98:87:3b:5f:39:9a:64:21:e1:26:b0:ea:11:7f:a1:38:e5:
         97:62:bb:a7:50:bc:e3:36:5c:dc:6b:61:3e:ab:d6:44:a6:17:
         e8:b7:56:21:79:1a:e1:4c:db:8f:40:5e:c8:3d:fc:f9:e7:2e:
         0f:be:e4:d0:69:e1:4c:ee:18:c4:fe:30:b1:73:71:59:cb:7f:
         e5:06:ed:5d:3c:60:37:d4:c4:e4:c7:c4:bd:55:eb:b5:e6:b4:
         e4:7b:5a:d1:c8:a4:0c:70:85:80:8d:15:99:e5:4b:bb:ce:8a:
         ba:3d:e2:98:37:1f:71:3e:b5:c4:55:f0:c8:69:56:09:3d:0f:
         f5:60:7a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:01:37 2026 by rpki-client