Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa
File:                     d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa (raw, json)
Hash identifier:          dViQacTsNEcGbM1sSMZYFp7RAlg5mY6SnTklar4cGeI=
Subject key identifier:   88:D4:D7:4E:CA:FA:13:52:91:A7:C8:3A:CD:F1:AD:37:A3:A3:66:B7
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584EA794FD37FBC4F250A5274880
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     62651
IP address blocks:        2604:c980:3400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:fd:37:fb:c4:f2:50:a5:27:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d44d1de0-2341-44a0-ae7f-b3eacfcd6e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:19:26:fc:35:af:79:ed:7f:19:5d:cb:45:
                    3a:af:8f:f9:65:02:d3:1f:9c:50:2d:71:f6:2a:5d:
                    c7:53:fc:c7:60:23:9b:0c:6d:b2:2c:96:3a:8b:ac:
                    e1:b5:49:b7:ba:c5:84:10:d1:65:34:f5:f0:c9:2f:
                    42:70:52:5e:f2:db:0f:20:d8:74:27:16:42:5d:72:
                    67:dd:8a:c2:9f:47:fb:56:df:33:d0:5c:bb:7c:25:
                    4b:9d:5c:18:80:56:fd:30:e0:f3:5f:f3:33:09:4d:
                    65:e5:cd:be:eb:3d:fd:3f:e5:2d:30:4e:e1:6e:ed:
                    66:70:79:9c:41:d7:7c:a8:44:a9:0e:16:86:b1:f9:
                    50:1b:3f:c3:96:15:44:41:7a:d4:4b:9d:ad:f4:ae:
                    a1:6a:33:5b:40:88:95:52:cb:59:a2:0f:57:d7:c6:
                    12:2d:4a:27:95:33:21:c9:0a:41:8c:70:b9:60:81:
                    be:ea:38:9a:cd:d9:d2:fd:ad:1d:ad:f6:e9:36:e0:
                    77:7d:33:7e:17:89:d2:16:3f:1a:d2:59:a4:77:fb:
                    ab:dc:05:23:b6:1d:80:1f:0b:a6:6b:0b:0d:1f:f7:
                    f8:af:49:52:26:3a:d4:40:fb:b3:2a:7c:d6:21:5c:
                    bc:3b:48:cd:92:f1:0b:2d:f9:84:db:49:d7:24:93:
                    db:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D4:D7:4E:CA:FA:13:52:91:A7:C8:3A:CD:F1:AD:37:A3:A3:66:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:3400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:5f:c5:05:1c:fd:83:aa:ee:91:ca:ee:8a:1a:39:23:a8:1d:
         5e:7e:93:62:87:ff:2b:8e:2a:9f:93:ed:6f:98:a2:44:65:3b:
         73:f2:55:41:fd:f8:8a:ab:e3:ca:b8:3a:b4:9a:11:62:48:00:
         a4:7b:d6:b7:96:e8:4d:82:af:8b:80:13:9e:3f:d4:65:3b:5c:
         75:30:f8:b3:45:ae:e6:3c:97:59:c7:71:35:58:ea:a9:de:0b:
         bf:a6:cb:11:29:96:47:f9:6d:5a:79:34:f7:ef:50:3c:76:67:
         95:db:84:35:4f:f3:29:cb:7a:47:e2:87:78:22:b0:13:a8:82:
         3e:42:96:c3:20:e0:c0:cc:80:59:ca:09:63:28:3d:36:a7:76:
         9f:02:cf:7a:48:bb:5c:6d:6d:6a:f4:68:db:b7:17:ce:12:16:
         94:a8:15:0b:06:68:3e:dc:8e:6d:ca:93:fd:23:48:83:cf:81:
         58:b6:cf:d7:2e:e8:27:57:de:63:4a:dd:df:70:cf:99:71:49:
         f7:ac:d3:1e:95:41:f8:0f:a8:d9:79:d9:34:71:84:0b:19:ef:
         7d:77:56:e7:81:a3:b1:de:32:bd:ae:1a:50:4f:0a:45:e6:0b:
         7c:6d:01:06:62:1b:ff:9b:56:de:3b:8a:d4:bf:64:eb:1e:c4:
         85:20:2c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:35 2026 by rpki-client