Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/a64d877d-3e54-37d9-b52f-b9028e7a8819.roa
File:                     a64d877d-3e54-37d9-b52f-b9028e7a8819.roa (raw, json)
Hash identifier:          V/SQ7qe4mfJe2K3OQFVOC1T0Hm/c0guirXrVEeGF5SU=
Subject key identifier:   81:DC:E6:EE:6B:78:12:78:84:09:11:F8:FA:54:5A:AF:C1:8A:A2:BD
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E86F4F5DBE998B5512483ABC0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/a64d877d-3e54-37d9-b52f-b9028e7a8819.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     198949
IP address blocks:        2602:281::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:f5:db:e9:98:b5:51:24:83:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=e777c939-2fac-41d9-b2d3-427b42c6485f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:f3:a5:12:25:2a:ba:7f:28:e7:30:e8:ea:
                    70:1f:97:65:29:e3:61:9f:75:d5:83:01:59:c0:d3:
                    c7:f9:71:56:28:de:36:4e:97:e0:8c:80:b4:a1:46:
                    85:74:a8:39:2b:c6:51:86:cb:46:77:b4:80:5a:48:
                    83:4e:23:47:8d:94:7f:93:41:0d:8e:9e:a3:86:8a:
                    e9:a0:e5:95:c0:ba:ed:bd:74:49:7a:6a:cc:68:49:
                    ac:4a:d0:82:93:71:68:e4:22:3d:6f:1c:06:69:5e:
                    0d:8e:e4:0e:70:4f:06:e3:b0:21:79:29:0d:59:e8:
                    b2:ad:74:e2:61:10:96:d5:5e:54:bd:0b:41:90:1a:
                    47:23:c9:77:c5:b6:0a:ab:20:93:76:e9:3a:91:98:
                    ac:26:1a:a0:3c:27:c7:20:f0:94:7f:45:ab:07:bb:
                    29:86:19:5a:e1:1a:36:81:a3:cd:9b:a6:3d:a4:0a:
                    47:d6:a8:ad:c5:85:e2:05:46:46:0e:2b:7f:63:c9:
                    7b:09:75:bf:52:1e:a1:f5:6d:39:fa:eb:5d:a1:06:
                    bb:17:80:3a:43:d1:bc:86:56:95:04:92:f6:be:69:
                    7e:ac:d0:3f:b0:e5:0e:ed:dc:3f:a8:3e:56:e2:95:
                    06:fe:37:59:2d:af:67:cb:c1:63:7e:d9:03:a4:46:
                    6c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DC:E6:EE:6B:78:12:78:84:09:11:F8:FA:54:5A:AF:C1:8A:A2:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/a64d877d-3e54-37d9-b52f-b9028e7a8819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:281::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:6f:3d:6f:61:db:49:8b:18:7b:78:73:36:e4:f0:34:d2:a2:
         d2:47:c3:dd:b8:96:b2:f1:62:af:32:70:bf:4d:3e:f1:b5:dc:
         2f:76:ff:ac:37:a7:83:45:37:ab:c6:c5:15:28:81:ee:f4:d9:
         c3:08:8e:f3:c5:c8:b0:00:ec:45:0d:da:b3:77:89:bc:2e:52:
         f6:43:5e:93:e5:d8:b3:0b:f7:ec:2e:97:19:c3:47:c0:67:ed:
         59:df:a5:cc:d5:03:5d:e4:d3:f3:44:57:be:25:87:ca:6f:f1:
         23:f6:07:00:4a:a1:84:f9:74:8f:86:86:07:be:78:4c:02:1e:
         68:0a:2f:54:aa:ff:56:07:20:56:2e:94:96:b5:92:93:a1:12:
         fd:29:e5:c5:30:cb:c4:08:6c:58:82:c1:f9:2d:78:28:e7:d7:
         1b:66:3a:50:94:71:35:ba:7d:4c:e7:b6:18:76:62:b5:bf:be:
         c9:6b:cb:26:9c:44:23:e1:94:b1:d1:12:26:05:8c:ea:a5:d8:
         b6:61:0f:bf:a6:5d:6b:00:6b:61:99:64:2c:6a:d4:de:de:5f:
         61:57:a8:11:97:92:7f:d2:5e:70:1a:a7:8f:19:39:7c:15:c2:
         64:bb:4d:3d:78:34:ee:4c:fa:7a:5b:df:06:23:78:d6:3a:3c:
         5e:36:05:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:21 2026 by rpki-client