Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/344cb703-d8a9-3110-8af8-17d66f1a083b.roa
File:                     344cb703-d8a9-3110-8af8-17d66f1a083b.roa (raw, json)
Hash identifier:          aL/vKEHcZeVp838TvjQbrMpUO7aeWQ8jpj0BpqzDUpA=
Subject key identifier:   4D:EC:89:F4:1B:6B:98:EA:20:7D:3D:BA:B2:58:DC:4F:F0:AA:54:F6
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584DE1507526BE6FC3C83B86F600
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/344cb703-d8a9-3110-8af8-17d66f1a083b.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     62651
IP address blocks:        2606:b300:b000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:75:26:be:6f:c3:c8:3b:86:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=90249e6e-42e6-4cde-89e6-e06d1733c2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:fb:7f:56:1c:4e:df:c4:58:59:3b:e9:ea:
                    d6:ba:be:02:46:fd:4e:8d:21:de:3b:50:36:70:32:
                    0e:ed:e0:b1:5a:a4:ed:5d:a1:9b:c4:d6:9a:2a:b9:
                    71:c8:0e:1d:12:b8:a7:39:99:09:32:06:87:89:fc:
                    b3:c8:86:2e:20:87:67:0d:3c:a2:b9:5a:6d:20:72:
                    1b:a7:f1:10:e2:38:c0:f0:38:09:f9:37:e2:74:4e:
                    77:c3:a8:31:96:51:d0:00:35:4a:1d:fd:d7:34:c3:
                    66:83:bb:d0:00:41:4d:73:f0:76:d9:84:dc:58:8f:
                    3c:7c:44:69:c2:9c:89:ea:75:47:a0:d5:67:bb:05:
                    67:dc:cb:15:4c:8f:27:1a:94:e4:82:6e:ea:47:f0:
                    a9:83:19:cc:a4:aa:f1:b9:07:e0:ef:e3:59:8f:9f:
                    29:f4:a6:22:a5:65:fc:ae:89:16:c6:59:9d:1a:4f:
                    a4:8c:77:44:f1:f2:34:1c:ba:dc:e1:dd:64:da:df:
                    1a:ac:91:84:3a:0d:74:27:c9:6a:70:83:9a:53:aa:
                    e2:fe:01:cf:ed:59:f7:40:4c:5c:8c:e3:a8:0c:a1:
                    06:f0:7e:04:4c:8e:64:dc:a8:6a:08:f5:23:44:08:
                    e0:44:67:8f:48:82:2f:32:fc:f1:27:4a:fd:b1:83:
                    e7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EC:89:F4:1B:6B:98:EA:20:7D:3D:BA:B2:58:DC:4F:F0:AA:54:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/344cb703-d8a9-3110-8af8-17d66f1a083b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b300:b000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:7a:4c:94:7f:19:e6:d0:5a:66:7a:8b:64:b5:31:bc:cc:fc:
         f0:81:64:5e:9d:68:89:b0:d6:a7:40:78:1b:bc:8c:8b:9c:8a:
         1f:c6:4f:42:74:71:79:bd:3b:fb:a0:a6:fc:e9:89:a7:88:a9:
         ed:97:1e:b7:6f:91:19:8c:a9:11:2c:19:06:7f:9d:57:51:53:
         ad:be:76:59:61:ce:8a:88:29:19:ff:1b:d2:82:c4:f3:a6:19:
         bb:7d:7f:a9:00:4a:b6:64:58:d5:0d:18:34:4a:9a:40:1c:b6:
         f0:e0:c6:db:6e:ed:f0:9c:cb:a5:67:76:b0:00:69:80:54:97:
         4b:87:11:89:ab:89:64:88:35:76:6b:da:f7:4f:80:5c:1a:d0:
         df:49:bf:a0:12:67:23:46:70:a2:25:64:5c:16:2f:80:e2:3f:
         1f:05:78:4e:cb:31:cf:24:7d:60:50:9c:32:03:78:b3:12:94:
         0c:af:4b:fd:32:a9:f2:7e:4b:96:b1:e6:79:6a:89:25:6f:75:
         59:24:16:43:2a:6c:90:87:57:34:7f:f2:6f:90:01:92:94:e8:
         c2:7b:21:04:41:4a:71:d4:42:d8:b1:5d:a9:e7:d2:8f:81:35:
         de:a4:45:95:82:70:a0:fc:ff:2b:0b:92:8d:7f:60:f0:a9:00:
         2f:d0:59:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:07:59 2026 by rpki-client