Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/506338e6-772c-35cd-b900-3dca729580cf.roa
File:                     506338e6-772c-35cd-b900-3dca729580cf.roa (raw, json)
Hash identifier:          tVF6cK9zb7/fj2LRzAr2Athg/ICGZXO8AAmDxdmcjTs=
Subject key identifier:   22:4F:DD:CB:05:D8:89:29:16:4C:E4:88:3C:E9:E6:FB:A4:16:15:88
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584D6AAA87C6CEF06ACB90E71300
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/506338e6-772c-35cd-b900-3dca729580cf.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     61317
IP address blocks:        2604:4500:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:87:c6:ce:f0:6a:cb:90:e7:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=35632091-09c4-4756-88d8-6bf7f62267f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f9:e3:ec:61:f7:03:56:bb:5a:1b:05:14:64:
                    92:19:39:d4:60:9d:8a:d6:c1:6e:9c:c1:80:76:9f:
                    56:c6:04:61:46:e5:10:32:a4:b8:48:c4:fa:28:11:
                    60:ef:03:f7:60:93:2f:06:67:cf:1f:f3:2c:1c:4e:
                    18:38:48:bb:8b:d2:a9:d2:a3:78:14:58:e6:09:70:
                    76:7c:44:98:0c:d3:f1:e0:f9:c7:d4:ed:2f:69:07:
                    b2:0b:e5:d3:bd:b4:32:1b:39:b3:dc:66:b8:40:94:
                    d6:be:db:19:56:60:81:11:7e:45:33:32:c8:d7:e1:
                    9f:29:47:21:3d:ff:c3:a8:ea:be:71:60:6e:11:aa:
                    2e:6e:46:81:b3:7b:ec:d5:de:20:4b:f5:22:fe:d4:
                    a8:4f:97:d8:16:64:57:f4:b3:2a:f7:06:6e:28:33:
                    ae:0b:49:dc:42:4f:c9:96:80:ef:da:3e:e2:e6:35:
                    f2:44:ff:53:7b:c5:02:c3:7d:58:9e:8e:b2:49:6e:
                    1c:bf:40:f3:7e:d9:d6:8e:d5:eb:cf:a9:b4:3b:2d:
                    d8:37:e4:2c:78:cf:a3:2c:59:b0:50:1f:98:9a:b3:
                    f9:0f:d4:58:11:a6:1d:44:02:d9:9d:22:68:7f:7d:
                    b5:3f:c6:81:0a:5c:38:e3:2a:2e:1a:3d:cd:4c:6f:
                    95:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4F:DD:CB:05:D8:89:29:16:4C:E4:88:3C:E9:E6:FB:A4:16:15:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/506338e6-772c-35cd-b900-3dca729580cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4500:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:89:84:cc:8c:ae:4b:60:b2:0e:51:86:41:7e:81:ec:66:3c:
         16:c3:bc:51:c9:9f:a3:00:05:cc:3b:4a:aa:38:14:d9:1e:99:
         68:54:f1:79:da:e2:58:7b:b6:58:8e:b2:62:c7:ee:8e:0d:ee:
         5d:5a:88:94:8d:fd:2a:7e:8c:28:5b:b4:0e:c8:80:4d:d8:42:
         fd:a3:4c:03:d7:c7:7f:ed:96:8c:8f:ad:eb:0e:9b:d9:cf:32:
         c5:0f:e6:da:f1:8f:75:b4:78:a1:e2:7f:e0:9c:31:88:2b:57:
         34:d1:03:55:02:8b:d1:70:1d:8b:56:95:8e:64:05:b3:50:00:
         a3:00:95:4c:61:9d:ad:e3:e2:a1:9e:8e:76:a8:d6:88:69:cf:
         47:b9:5a:b7:7e:35:d7:ea:21:c4:32:29:ea:bf:1b:40:d5:83:
         d2:22:14:40:05:3c:04:b4:08:10:e0:d0:f5:82:e3:bc:b0:67:
         c6:64:14:bf:52:58:f4:ed:c6:fe:f7:6f:33:c1:6c:5b:08:28:
         62:f9:2e:68:24:03:40:7a:c7:c3:2d:90:4c:18:2f:84:0a:08:
         05:11:82:1d:a8:04:9f:4d:b8:3d:9a:e9:50:12:ae:3e:ef:d1:
         16:43:a2:c7:10:13:a3:b0:03:ab:80:8f:27:bc:d6:e4:61:00:
         fe:ff:dc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 20:48:08 2026 by rpki-client