Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0be9cc58-6678-3921-aec5-884cb4c2f0e0.roa
File:                     0be9cc58-6678-3921-aec5-884cb4c2f0e0.roa (raw, json)
Hash identifier:          YnZ7b6onxC2FHOoJxre5OAgf7yg7aVbCg9evyfZzpcg=
Subject key identifier:   AB:CC:BC:C1:13:52:21:F4:DA:FE:55:E8:71:55:D2:0E:C3:9B:C7:99
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584E210EF8411026439F11A85D00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0be9cc58-6678-3921-aec5-884cb4c2f0e0.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     9009
IP address blocks:        2604:c980:2800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:f8:41:10:26:43:9f:11:a8:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=5d375650-c73f-45fb-acb2-06b77f51078c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3a:17:58:1c:5f:d9:e9:e6:43:96:0d:48:77:
                    07:84:58:80:e0:69:5f:a6:d4:9e:45:cf:26:b8:95:
                    af:9b:c1:d0:cd:83:16:db:d9:e9:84:63:13:49:67:
                    5a:e3:7f:e1:17:c4:17:a5:3d:13:ad:bb:ca:d8:b2:
                    01:ce:0c:29:f3:47:79:46:40:26:af:a4:f7:dc:49:
                    1e:20:59:a3:15:8d:fc:87:31:48:e0:14:e5:77:da:
                    2a:1d:0d:c3:71:a2:69:80:c4:fb:3c:f8:6e:bc:2b:
                    f3:f0:db:f9:7b:45:bd:79:74:cf:c5:31:fd:76:49:
                    ab:45:0d:41:7b:75:0c:bd:68:ec:7c:89:7e:c0:44:
                    89:0c:40:1a:f3:1a:c3:c1:c3:6c:a8:44:43:dd:bf:
                    eb:12:ae:fa:80:81:b4:09:3a:ef:c6:56:ff:44:66:
                    73:ae:21:0f:30:bd:37:6f:e4:2d:e0:d4:3b:6e:32:
                    3f:57:77:48:52:bd:2c:a2:dc:aa:28:7b:8d:be:86:
                    13:b5:e8:70:a1:ff:4e:ac:03:2f:96:6d:9b:32:83:
                    5e:bb:e0:e3:a7:5d:09:1c:8a:dd:e2:23:ef:32:bd:
                    62:c5:d8:d8:83:90:11:8d:fd:a6:50:1c:ce:58:39:
                    75:03:14:b9:6c:2f:3e:20:0f:61:83:36:54:c0:76:
                    c3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CC:BC:C1:13:52:21:F4:DA:FE:55:E8:71:55:D2:0E:C3:9B:C7:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0be9cc58-6678-3921-aec5-884cb4c2f0e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:7a:48:b8:7d:d0:3b:68:6b:7f:99:60:c6:07:db:39:c9:79:
         1d:70:f6:fb:84:e6:74:bf:03:45:e6:a2:c0:67:0d:40:f1:e0:
         ec:a2:57:67:bc:ec:d4:26:f8:d0:a2:a6:dd:3b:a8:84:e9:03:
         84:01:d8:5c:5c:fc:f4:4b:1c:9d:39:89:51:43:ac:5c:21:4f:
         4f:9f:4a:cd:d1:2a:81:2f:55:a4:22:f5:9c:24:95:20:fe:92:
         f8:18:1f:32:b7:ae:6e:04:d4:62:17:c7:ff:97:8c:f5:11:33:
         2e:3a:91:c8:1f:e0:7c:ef:5e:92:fb:60:55:74:f5:b4:6e:4d:
         8a:4b:8e:fc:b7:a4:9b:df:c0:e0:5d:05:4e:5f:c6:3e:6d:c7:
         93:f5:2d:e6:7f:0c:48:99:6b:29:a4:b5:36:c2:ec:85:37:99:
         6b:f7:90:57:90:3b:20:3d:34:51:9a:20:bb:51:7a:36:f9:b2:
         a8:a9:e5:75:99:5b:19:2e:d6:44:38:e3:a6:10:ff:31:a5:e4:
         45:54:fa:c1:cc:32:31:81:88:01:7d:9a:6a:6c:76:4c:64:bf:
         55:f3:bd:89:ac:c0:2c:3e:11:bd:e9:9c:52:dd:39:d8:af:46:
         a7:cd:f0:73:ad:66:9a:af:57:62:a4:bd:c8:9e:14:3e:6c:ed:
         12:dc:51:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:12:48 2026 by rpki-client