Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/297768e8-9a41-36b4-bfa4-cbd33ddc9ae4.roa
File:                     297768e8-9a41-36b4-bfa4-cbd33ddc9ae4.roa (raw, json)
Hash identifier:          afEFXYYPjiOW/MxOP4CBmYc+KMGnRcaKNl4Qu5gabfM=
Subject key identifier:   76:FC:CA:D9:BF:A0:82:F9:3E:FC:7B:28:66:27:50:F9:DD:56:0A:FA
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584DEB15ED40D1D410BE1D54F500
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/297768e8-9a41-36b4-bfa4-cbd33ddc9ae4.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     62651
IP address blocks:        2604:fc80:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:15:ed:40:d1:d4:10:be:1d:54:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=03472a5a-e9de-4c34-a65f-aad5b3226407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:12:b7:14:e4:39:69:f0:6d:1b:b5:3f:1d:a1:
                    5f:b2:26:98:55:71:a2:47:f3:b7:ce:9b:39:bd:30:
                    4d:48:de:4b:a8:46:58:46:aa:ef:15:5b:1d:80:6d:
                    8a:18:3b:02:5b:d8:37:8a:01:7e:75:d4:e8:e9:1d:
                    a2:b9:7c:ef:10:dd:b7:55:9d:38:1b:26:34:80:04:
                    b8:39:fb:fe:cc:dc:87:eb:3b:15:66:d6:00:72:85:
                    ca:5b:5a:c9:5c:54:15:82:4e:fd:66:e1:76:d9:70:
                    50:72:01:87:31:07:dd:32:56:a6:67:0f:fe:9c:40:
                    9a:4d:71:8f:02:3e:cb:58:5f:b1:1e:74:88:6f:a4:
                    a1:b6:34:46:54:61:60:b7:82:fc:42:fe:30:79:69:
                    60:3a:13:fa:72:91:40:80:a7:76:dc:87:8e:7e:d1:
                    0c:b1:e7:ef:c0:7a:26:6a:74:3a:b9:1c:fa:4c:e2:
                    b1:16:cc:57:65:6b:e1:10:17:3a:95:80:69:cc:c6:
                    ca:c1:14:77:c5:c6:f8:05:fb:f8:9d:05:42:a3:87:
                    ae:36:9e:cf:44:eb:4e:30:86:54:ec:bb:fb:6f:4a:
                    79:36:95:d6:dd:ac:1a:b6:2d:20:fa:50:c9:f6:bb:
                    e2:49:cb:8e:26:b2:15:79:66:a7:50:96:b2:1b:59:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FC:CA:D9:BF:A0:82:F9:3E:FC:7B:28:66:27:50:F9:DD:56:0A:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/297768e8-9a41-36b4-bfa4-cbd33ddc9ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fc80:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:8f:61:83:8f:d1:3b:d7:f2:82:e0:f1:6c:b7:27:a7:01:48:
         db:0e:d8:bd:fe:d9:0d:c8:c3:a7:59:79:35:b6:78:b5:ff:d9:
         69:fd:78:bd:b8:64:03:fa:6d:cb:c2:4e:c6:e2:2a:f8:da:ce:
         8e:98:36:6a:d4:61:96:84:ac:2a:32:60:20:8d:4a:8d:97:11:
         1a:da:eb:75:d7:a3:36:c2:7a:c6:78:1e:ca:3f:cb:07:0d:1e:
         96:1b:ea:e7:b7:32:1a:7c:cc:07:31:98:83:03:d3:f4:65:e7:
         07:c0:5d:7c:ce:d1:3c:83:5d:08:63:ae:f8:52:f4:fe:5b:e6:
         32:19:57:b0:96:fd:ab:9b:ac:31:df:9c:08:22:c1:a2:cf:0c:
         77:ee:df:44:c2:87:fa:61:34:fd:48:ca:c4:e2:fc:27:cd:a8:
         59:41:ee:38:ef:e3:2d:f6:94:e8:97:88:2f:f9:be:5a:d0:51:
         bf:f0:9f:f6:81:a0:a0:35:88:83:bb:d2:1b:30:71:5d:f7:46:
         ff:9a:bb:da:c0:67:e8:b6:bd:91:5b:5b:a9:c8:25:0c:a4:52:
         04:5c:36:79:62:40:43:cf:e3:5e:e0:23:2a:60:95:bf:85:e3:
         c9:9f:28:ae:e8:d5:4a:85:e7:25:00:23:68:d2:ad:66:5a:6e:
         11:ae:5b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:17:29 2026 by rpki-client