Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32c94f2c-139f-3c92-b7aa-8043897d49ae.roa
File:                     32c94f2c-139f-3c92-b7aa-8043897d49ae.roa (raw, json)
Hash identifier:          yDVcChfjyYnjBxrOsccG8hBOWB14wJtFhXSxmEkgTZs=
Subject key identifier:   EA:4C:6C:5A:5A:0E:96:CF:E6:01:DC:2F:12:26:CA:81:05:DF:17:C6
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584D956797982596841FC617F340
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32c94f2c-139f-3c92-b7aa-8043897d49ae.roa
Signing time:             Tue 21 Apr 2026 20:25:45 +0000
ROA not before:           Tue 21 Apr 2026 20:25:45 +0000
ROA not after:            Mon 20 Jul 2026 20:25:45 +0000
asID:                     62651
IP address blocks:        2604:c980:6600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:67:97:98:25:96:84:1f:c6:17:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Apr 21 20:25:45 2026 GMT
            Not After : Jul 20 20:25:45 2026 GMT
        Subject: CN=06236a0f-0306-47c7-a110-18ed78d7b2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:25:a1:97:37:24:73:ce:13:7a:9e:e4:f0:
                    ad:f0:fd:05:7d:4d:94:97:10:dd:7d:cc:78:0a:4e:
                    18:68:b2:bd:5a:ce:0e:04:bd:1f:27:39:de:dd:71:
                    22:b1:23:63:34:3e:63:c0:2d:2e:b7:24:7e:85:38:
                    fa:bc:40:4b:b3:b9:d0:ae:85:f9:da:87:7d:e5:90:
                    d6:2c:32:77:43:da:7a:f0:ea:1a:1b:fc:99:2f:d1:
                    49:30:bb:5f:2a:e8:db:75:87:a1:5c:51:07:de:f5:
                    5d:a8:d2:39:e5:20:24:24:42:ca:bf:5d:1c:ce:64:
                    8b:7c:67:0a:d0:b0:65:43:b3:60:ed:78:b7:90:15:
                    da:41:a7:80:c2:74:e7:dc:3f:4f:95:da:b6:ff:eb:
                    3c:8f:0f:3b:e5:0a:c4:43:c3:35:1f:e5:dc:09:ac:
                    0b:cd:7a:32:31:80:41:62:89:6f:d7:6d:14:04:f3:
                    a1:63:14:13:f0:b8:ff:27:7f:61:14:8f:7f:3d:8a:
                    84:4a:70:7f:0c:2f:98:34:52:1f:72:ca:9c:1b:19:
                    1c:c9:24:73:04:9a:77:09:cc:42:8f:6a:cf:6f:a1:
                    00:8a:8a:5b:6c:63:8c:83:9f:3a:1c:06:f2:dc:13:
                    dd:24:d3:fb:4b:9e:28:e4:d5:77:94:a0:7e:b5:92:
                    63:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4C:6C:5A:5A:0E:96:CF:E6:01:DC:2F:12:26:CA:81:05:DF:17:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32c94f2c-139f-3c92-b7aa-8043897d49ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:6600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:3c:a1:9a:b3:77:57:2a:d7:c6:37:03:a0:24:f1:28:80:7f:
         1c:1d:6e:70:88:41:e7:9a:2e:60:2c:ba:78:3b:7e:0c:b8:ed:
         56:08:fa:6a:07:54:e5:b2:9c:dd:7a:19:89:59:9a:c7:33:35:
         60:d2:9f:db:34:80:ca:ac:68:cd:64:71:58:36:e2:9e:cd:1a:
         25:57:b3:66:71:6a:58:c8:02:9d:b3:7a:b5:96:1a:ff:e1:85:
         62:cb:88:fb:99:9f:bf:39:42:ab:f2:3b:93:03:fd:90:60:a5:
         47:91:14:66:79:22:77:c4:d8:91:77:0a:88:c4:31:0e:90:c6:
         06:f3:48:62:87:79:db:7d:84:fb:c0:66:1e:1a:1c:9e:8c:bb:
         d6:12:3b:1b:6a:ad:7d:75:94:e6:ca:b1:ab:b8:ab:3d:62:72:
         cc:42:e5:ab:cd:37:a1:d2:de:f7:0b:ce:50:81:63:31:c9:f4:
         8a:00:6f:83:b2:30:21:21:e0:a9:9a:9b:4e:af:1c:94:6a:cc:
         3c:c5:98:e5:11:66:b7:7d:5b:9f:b3:9a:ba:f1:40:76:a0:71:
         c9:ac:d1:b6:f3:fb:bc:47:7e:3a:69:4d:8d:8b:f7:cd:28:5c:
         14:15:2c:d8:dd:8b:39:49:38:4c:1d:b4:57:8d:6d:a1:4b:53:
         d4:02:7b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:04:16 2026 by rpki-client