Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/203f9651-52ba-397f-8a32-968fec6b1d7a.roa
File:                     203f9651-52ba-397f-8a32-968fec6b1d7a.roa (raw, json)
Hash identifier:          nkf8RL2kuOiCd98l/Tl/3RjBqVMMl12B32l+zVczKaY=
Subject key identifier:   9E:E6:DD:FC:FC:D8:DA:1D:AB:C8:21:DD:1C:25:F2:35:F0:B5:E5:01
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584E3CF9C9829394D90BA418E680
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/203f9651-52ba-397f-8a32-968fec6b1d7a.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     396356
IP address blocks:        2604:c980:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:c9:82:93:94:d9:0b:a4:18:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=a00459f2-52e2-46db-a3ef-6ed64275e9ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:8d:64:64:db:5f:28:97:79:94:b5:de:73:
                    1b:39:c2:e2:eb:1c:83:95:3e:86:35:7d:53:e6:71:
                    46:f4:27:71:f6:e2:72:17:c4:fa:9d:4f:d2:12:94:
                    09:26:b8:06:42:6d:97:a9:5c:ac:c1:6c:25:5a:47:
                    7a:d6:2c:cd:ef:1c:0a:9e:2f:67:96:f8:87:16:c5:
                    fd:c2:27:b4:5c:fc:a3:18:0d:b8:ad:1e:4d:47:7e:
                    2c:db:b5:b9:f0:32:91:bf:68:58:55:a1:6e:dc:8a:
                    25:7a:87:55:ec:60:2e:d2:63:93:98:e0:44:48:9f:
                    f0:16:9a:58:0f:ab:77:04:b2:95:c6:c2:f9:1b:90:
                    8f:31:6f:81:77:cf:98:43:9c:06:51:57:22:af:da:
                    d2:c0:d8:7f:1d:ec:f9:6a:47:06:03:56:64:f3:33:
                    b0:27:15:6a:31:e0:a9:6b:71:3c:7b:f5:62:6d:07:
                    62:07:e5:61:91:f7:2e:1e:f6:e6:04:bc:70:5e:74:
                    1b:c3:86:64:d3:bd:53:50:d8:51:5a:e1:ab:00:a8:
                    bc:ac:31:e2:a3:e7:c3:65:b3:5e:15:84:6e:fa:ce:
                    93:48:59:0d:d9:3f:21:f2:62:e2:a7:94:da:f3:54:
                    c4:7e:37:ce:e5:13:17:a2:0f:7e:d6:23:de:4f:d3:
                    54:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E6:DD:FC:FC:D8:DA:1D:AB:C8:21:DD:1C:25:F2:35:F0:B5:E5:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/203f9651-52ba-397f-8a32-968fec6b1d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:5e:91:dd:0c:28:c0:0e:72:73:3a:4a:ab:86:c6:e4:f6:60:
         58:4f:7c:23:bc:7b:7a:53:3c:bb:8f:17:4e:f0:e2:eb:63:2b:
         36:de:1a:8d:43:f9:24:02:97:46:8c:14:26:e9:1f:8a:43:3e:
         e3:0e:d7:b1:05:ba:c2:67:c1:a3:fa:41:9f:04:85:1e:f9:2d:
         b7:84:e6:ac:d1:40:ad:49:b6:bd:5a:c6:02:2d:cd:15:83:cc:
         3b:23:3c:b0:40:01:53:e9:5e:33:9f:37:2e:be:5b:1e:35:0d:
         ef:c3:4a:32:c4:16:e1:74:48:f9:7f:f3:1f:f0:20:36:c9:d9:
         89:57:9b:b7:9f:09:71:e5:e8:9f:fa:80:73:2d:ab:9f:8f:0a:
         23:dd:ff:ec:17:39:f4:b5:79:7e:31:22:46:4b:c4:18:c8:4a:
         28:ff:2f:79:bb:0c:6e:87:81:a0:cf:f5:48:38:04:98:c9:1b:
         4c:3a:6c:96:81:61:e7:4f:58:2a:e8:ab:c3:5f:8b:dd:58:ee:
         72:6a:ea:8b:74:37:ee:c8:82:4f:8c:c9:a0:c2:8a:69:e9:22:
         60:58:fe:94:e1:4c:f3:c3:b3:8c:58:d7:66:2e:b9:83:7b:9f:
         bd:44:5d:cb:7b:ed:49:76:7e:ef:97:80:68:43:b4:2c:05:fa:
         96:99:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:34:46 2026 by rpki-client