Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/37043548-8c04-3089-a47a-b02b8d4ea124.roa
File:                     37043548-8c04-3089-a47a-b02b8d4ea124.roa (raw, json)
Hash identifier:          XppfM95DisT+kCH3fkI6XzAlMTG5nmyzY1wVUdt724Q=
Subject key identifier:   1B:25:9B:AA:96:48:36:ED:23:C6:04:4B:6B:DC:8D:5B:09:52:66:25
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584EB6E1A4876450489995800C80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/37043548-8c04-3089-a47a-b02b8d4ea124.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     55286
IP address blocks:        2604:c980:4200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 31 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:a4:87:64:50:48:99:95:80:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=0d88e8fc-8f94-450b-9745-17796c58f69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fd:32:8c:93:4f:ff:2c:67:a6:1d:39:c1:e0:
                    78:11:a7:17:21:af:3b:a1:f3:5d:0b:33:71:de:4b:
                    a0:71:37:25:86:5d:a4:aa:59:bb:6c:23:4c:83:f1:
                    23:60:75:0e:f7:76:ea:82:ed:93:69:8a:5d:09:5f:
                    71:a2:3b:7d:e1:aa:89:71:b4:82:35:d9:06:b5:8a:
                    f3:84:60:d2:10:b7:85:7e:e3:28:63:e6:81:81:14:
                    7e:4c:3d:49:0d:86:a7:30:2f:b1:c9:93:b0:26:a1:
                    cd:e8:51:19:7c:ed:13:24:c1:50:ce:79:84:53:88:
                    1a:07:f4:9a:51:d7:25:45:18:b0:e4:79:52:f5:b2:
                    d9:e5:a1:9c:69:49:43:cd:58:48:c2:18:1a:ab:e4:
                    40:56:9f:b0:93:ae:05:00:8c:3d:e8:4b:46:1c:f5:
                    92:0a:5a:9a:6a:9e:40:d0:95:ce:bc:f9:bf:37:0e:
                    4a:84:ba:ab:e4:91:9b:94:20:8f:8d:93:40:55:1a:
                    f9:48:81:29:b0:d2:28:a3:f9:fb:a0:67:88:e0:3a:
                    a8:1f:a5:ce:d7:b6:3c:7d:69:54:14:a8:d5:02:96:
                    3e:4b:9b:93:00:46:4e:0e:3d:8d:9b:6d:84:35:15:
                    c1:de:6d:f3:60:7b:80:11:37:31:ef:7a:c9:3c:86:
                    4b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:25:9B:AA:96:48:36:ED:23:C6:04:4B:6B:DC:8D:5B:09:52:66:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/37043548-8c04-3089-a47a-b02b8d4ea124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:4200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:19:0b:5b:6b:89:16:44:f6:ef:11:b8:a8:70:d2:5d:cd:f2:
         dd:a9:69:5e:03:ad:1b:44:e1:ea:55:70:a2:20:02:76:df:90:
         c8:55:9d:a4:88:7e:ff:43:0b:06:e9:1b:6c:c8:3e:8c:60:17:
         5e:5c:a0:52:1b:b6:fd:73:fc:5c:9d:99:4f:00:82:0c:1e:95:
         88:0c:44:0a:f9:56:6a:14:10:d1:c7:93:6b:5c:c7:90:3f:c3:
         26:c5:49:cd:6b:91:2c:a4:04:1d:c3:0d:d7:8b:81:cf:95:82:
         6f:8f:9a:79:66:92:55:fb:d8:66:fb:c5:6d:c6:98:d0:69:4e:
         c4:49:bf:3e:2f:cd:5b:68:1b:19:7c:a1:64:f2:e0:4b:79:a4:
         f6:ed:79:db:85:90:64:cc:8e:b0:ef:7b:65:1c:f1:9f:73:a9:
         d1:07:bd:27:49:43:b6:05:52:5b:15:0e:73:06:13:79:b2:fb:
         5f:02:99:3b:15:af:5b:cc:51:39:67:67:94:79:3e:76:22:c7:
         40:21:a3:b3:fa:32:29:47:58:b6:f3:9c:30:b0:51:56:4d:a0:
         6c:62:ee:72:e7:39:65:9e:b3:eb:09:dd:40:c0:f0:6f:9a:52:
         53:3a:a6:d4:d5:16:ab:b2:fc:49:68:ff:f0:14:4f:ad:bf:4e:
         40:0d:4d:97
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE624aSHZFBImZWADIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk
MGQ4OGU4ZmMtOGY5NC00NTBiLTk3NDUtMTc3OTZjNThmNjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv0yjJNP/yxnph05weB4EacXIa87ofNdCzNx
3kugcTclhl2kqlm7bCNMg/EjYHUO93bqgu2TaYpdCV9xojt94aqJcbSCNdkGtYrz
hGDSELeFfuMoY+aBgRR+TD1JDYanMC+xyZOwJqHN6FEZfO0TJMFQznmEU4gaB/Sa
UdclRRiw5HlS9bLZ5aGcaUlDzVhIwhgaq+RAVp+wk64FAIw96EtGHPWSClqaap5A
0JXOvPm/Nw5KhLqr5JGblCCPjZNAVRr5SIEpsNIoo/n7oGeI4DqoH6XO17Y8fWlU
FKjVApY+S5uTAEZODj2Nm22ENRXB3m3zYHuAETcx73rJPIZLVQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBslm6qWSDbtI8YES2vcjVsJUmYlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMzcwNDM1NDgtOGMwNC0z
MDg5LWE0N2EtYjAyYjhkNGVhMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTJgEIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAEBkLW2uJFkT27xG4qHDSXc3y3alpXgOtG0Th6lVwoiACdt+QyFWd
pIh+/0MLBukbbMg+jGAXXlygUhu2/XP8XJ2ZTwCCDB6ViAxECvlWahQQ0ceTa1zH
kD/DJsVJzWuRLKQEHcMN14uBz5WCb4+aeWaSVfvYZvvFbcaY0GlOxEm/Pi/NW2gb
GXyhZPLgS3mk9u1524WQZMyOsO97ZRzxn3Op0Qe9J0lDtgVSWxUOcwYTebL7XwKZ
OxWvW8xROWdnlHk+diLHQCGjs/oyKUdYtvOcMLBRVk2gbGLucuc5ZZ6z6wndQMDw
b5pSUzqm1NUWq7L8SWj/8BRPrb9OQA1Nlw==
-----END CERTIFICATE-----
Generated at Fri Aug 28 17:19:28 2026 by rpki-client