Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42446862-1602-3fe1-8bf3-b4a41f6898f6.roa
File:                     42446862-1602-3fe1-8bf3-b4a41f6898f6.roa (raw, json)
Hash identifier:          DPfmE/B+weyzQ0Jh3kAcS8Dsg8ZRQuFRXSfmYX1ww8I=
Subject key identifier:   63:CC:7D:BD:20:D3:63:B3:F1:FB:1A:C1:72:ED:5F:B1:C6:83:87:9C
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584DFBD5ED868063986E8684D1C0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42446862-1602-3fe1-8bf3-b4a41f6898f6.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     54138
IP address blocks:        2604:c980:2400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:ed:86:80:63:98:6e:86:84:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=67810611-d195-48d6-bdc1-3f8224f1aaf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:23:6b:f2:b8:37:27:33:40:23:26:6e:64:e0:
                    a6:d1:41:ff:83:a2:29:25:49:d1:67:1f:d7:5e:c3:
                    2e:78:af:dd:ae:bd:48:63:de:cc:e7:4e:8a:fc:ad:
                    18:bf:3d:76:3a:33:43:03:c8:5a:59:62:5b:e5:95:
                    f2:a6:d8:4c:39:42:1f:00:cc:bb:ef:d3:45:67:f6:
                    4e:7a:60:7f:67:df:8e:93:dc:8c:17:ef:9d:9c:11:
                    b6:80:7c:44:dc:d9:ee:4f:d8:e2:08:b5:44:13:bc:
                    87:aa:23:94:ca:9d:d6:d1:ec:83:1d:4c:c8:61:20:
                    27:9c:22:5e:36:ff:88:96:de:d1:e1:14:b8:c5:05:
                    e5:5d:fe:b4:a3:de:41:b0:5a:4b:f7:99:22:05:2d:
                    b2:71:1f:d8:63:f2:ab:67:1d:b3:7f:c0:11:84:39:
                    0e:1e:e2:be:a5:37:ce:22:15:d6:de:30:30:4c:7f:
                    ef:30:26:d0:69:70:f0:77:9e:57:de:06:c2:8d:18:
                    34:a6:87:56:0f:b5:8a:d3:bb:29:79:ec:4f:b1:bc:
                    2c:ea:1b:60:b3:fc:36:3c:ce:c7:6c:75:d4:b1:ee:
                    a9:5f:50:db:97:c1:6d:8b:a7:b4:51:af:ff:77:c3:
                    29:e1:62:b2:48:36:e6:c7:8c:55:82:e1:4c:aa:fc:
                    64:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CC:7D:BD:20:D3:63:B3:F1:FB:1A:C1:72:ED:5F:B1:C6:83:87:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/42446862-1602-3fe1-8bf3-b4a41f6898f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:2400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:53:0c:be:3d:a9:c6:3f:8a:4c:e2:59:32:fc:ad:2e:16:97:
         c6:14:fb:35:62:b5:4b:29:67:44:7b:4d:7f:ec:bf:94:93:e4:
         0f:82:d2:f0:ff:ba:99:f9:9c:dd:d6:ab:f9:92:6e:4a:27:d4:
         0a:9a:9c:9d:a3:99:ec:cd:f1:a3:d3:51:43:dc:5c:cd:ae:58:
         b0:0e:37:30:d9:32:1a:09:42:3d:dc:46:02:f7:39:6a:98:08:
         ff:eb:d1:ec:55:32:c7:57:79:70:e5:bc:ff:06:19:33:07:63:
         5f:69:50:66:41:80:35:85:cb:5e:e0:59:72:aa:fe:66:da:a7:
         7b:a8:6e:40:20:67:c3:9a:1e:1b:dc:cd:f4:be:cb:7b:3f:94:
         f0:cb:34:94:9e:46:7c:ca:11:23:13:d6:90:21:af:87:b6:1c:
         a7:82:42:ce:4e:c4:57:d7:ec:bd:a3:2d:19:e3:61:8b:91:18:
         bc:80:56:92:42:ed:54:5c:3f:7d:ee:60:7a:8f:28:24:57:e9:
         6a:a6:bf:2e:8d:8d:49:98:a1:b3:bc:b7:66:0a:f7:ce:5a:46:
         ed:b3:a5:a0:29:54:90:36:d3:9d:5e:f6:10:67:cd:26:4a:d8:
         74:fd:a1:0c:02:c5:15:4f:7e:1e:3c:c5:59:b8:15:b2:47:48:
         90:a8:66:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:11:50 2026 by rpki-client