Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/82929927-aeae-3a6f-867f-694f2e45a249.roa
File:                     82929927-aeae-3a6f-867f-694f2e45a249.roa (raw, json)
Hash identifier:          RNy2ImcW1Q/N/ZBdR02poZsc2h4Kw0Yy2khiuKagpP0=
Subject key identifier:   1B:D1:AD:A4:D8:12:98:BD:D4:70:0B:14:51:D3:1E:E5:29:41:83:0D
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584D5E1A726699CF6DEBFD484800
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/82929927-aeae-3a6f-867f-694f2e45a249.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     62240
IP address blocks:        2604:fc80:3600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:72:66:99:cf:6d:eb:fd:48:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=a5945e75-452c-423e-b9f1-d1919a535006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:70:4e:c7:42:ac:27:ce:d2:a9:ca:9d:ce:3f:
                    5b:82:26:a5:2e:0e:eb:f0:a8:ea:c2:37:d1:fd:b7:
                    2d:3f:b2:32:49:65:d7:5a:04:33:41:d1:83:01:67:
                    b4:d9:02:5a:96:fa:d1:13:dd:22:74:32:ea:f2:30:
                    44:5d:46:18:8e:1f:f1:16:f8:d2:39:f4:45:f7:eb:
                    48:55:e5:a7:b0:3e:62:cd:61:e0:d2:7e:3d:58:a4:
                    2b:0a:fa:92:ea:cd:2e:c0:df:eb:14:ec:64:91:65:
                    2f:0a:7f:7d:b3:e3:3c:c1:a4:fe:8b:51:72:63:ad:
                    59:fc:59:90:65:45:dc:2f:db:ca:ce:b0:07:5f:77:
                    b1:bc:c4:d1:c5:05:d0:ec:a5:3b:c6:6b:5c:d9:d3:
                    ec:22:fb:5f:f2:e8:d8:4c:c9:3a:5c:73:f7:dc:da:
                    f7:ea:68:cb:bc:4b:b8:3f:d2:f9:07:f1:4f:5a:0e:
                    49:20:d3:9c:c6:7c:5b:7b:11:79:d3:25:8e:4d:ed:
                    7c:1b:ae:49:be:13:a0:39:9b:48:53:06:f9:87:e7:
                    f7:7a:0d:d2:ca:93:9a:cd:b0:2e:da:ce:79:cd:23:
                    46:5d:8e:12:18:3b:88:1e:ab:b5:c7:67:01:c7:07:
                    0a:a1:46:21:1f:49:5d:18:e8:d1:e0:4a:cf:23:83:
                    f2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D1:AD:A4:D8:12:98:BD:D4:70:0B:14:51:D3:1E:E5:29:41:83:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/82929927-aeae-3a6f-867f-694f2e45a249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fc80:3600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:2a:9b:40:18:ef:69:e0:38:33:be:8f:5e:a2:ae:f0:64:ec:
         77:10:85:34:da:83:75:58:3e:d7:9d:84:0c:f4:98:55:da:b4:
         14:21:f8:6d:9b:76:4c:98:24:d3:dd:14:5a:4d:05:af:81:c9:
         33:93:46:b8:61:1b:e0:9b:fe:59:44:48:85:a2:29:83:10:24:
         1b:32:6a:ac:b5:9b:41:00:af:12:bd:fe:1d:cc:c9:e1:33:11:
         14:a6:c4:a0:3b:ed:95:d0:1b:c1:51:42:f3:cc:45:46:2b:bf:
         28:ac:4c:ae:de:5d:e4:76:be:8c:42:93:2e:ec:f1:0e:30:92:
         62:87:43:77:28:ff:8b:63:d0:f4:39:40:bb:04:70:d1:2e:91:
         55:98:71:27:d2:db:91:50:8b:56:a4:cb:2e:64:dd:17:a4:e0:
         b0:8e:6c:81:67:1e:28:66:5d:f3:96:0e:bf:5e:89:c9:73:40:
         43:8f:47:42:93:69:8e:27:43:bd:aa:e6:73:7f:5a:56:dc:f6:
         df:e5:c5:10:6c:9e:64:6f:29:60:f2:1a:6c:e0:0d:2d:70:54:
         70:b1:a8:10:68:64:f6:22:8c:61:b9:f1:cd:e1:83:d6:3a:90:
         56:2f:d6:51:ff:4e:e2:82:3e:fc:47:aa:f1:54:cc:f4:72:94:
         31:05:ca:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:32:16 2026 by rpki-client