Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/56c020df-3c3a-3909-b7c8-6e2c3fb0fe24.roa
File:                     56c020df-3c3a-3909-b7c8-6e2c3fb0fe24.roa (raw, json)
Hash identifier:          7U/XGVqU2Fc2cdIQttovhwBGbU/eZTg7XhaA8MyXFRg=
Subject key identifier:   43:D4:70:39:7D:68:44:1D:B2:E4:9F:15:CC:80:20:B5:C0:A6:51:7A
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584E66DA033677278E3D8E78A4C0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/56c020df-3c3a-3909-b7c8-6e2c3fb0fe24.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     62651
IP address blocks:        2604:c980:5800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:03:36:77:27:8e:3d:8e:78:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=6e4ec8fc-99cf-400b-9ac5-b8f9b6b0a75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ab:c8:77:cc:a8:e7:fa:59:3a:d9:fc:e3:8a:
                    19:d2:be:63:dd:fc:a2:88:f9:21:9a:0e:b4:a5:52:
                    3b:27:c4:ee:ac:f1:cc:56:e4:45:1a:59:45:c4:f1:
                    9a:d2:d5:65:84:92:a2:44:93:a0:fe:94:fd:33:c1:
                    e2:9e:5b:d7:85:b0:40:b7:d9:6f:3f:52:61:d8:8a:
                    dc:fd:a8:ae:0d:02:28:81:03:f1:98:be:b5:6a:77:
                    3f:ed:d8:29:86:82:20:e7:ca:20:b0:34:35:2b:8f:
                    1f:63:ab:8d:89:96:70:74:3b:b8:1d:80:f7:07:67:
                    67:ed:82:1a:99:78:be:9e:65:d2:21:50:ec:da:32:
                    6f:a2:77:3d:ae:99:d6:dd:63:5c:d1:28:b9:81:44:
                    c8:93:f1:b6:8e:06:55:54:f6:db:29:f9:94:60:60:
                    79:21:ba:73:1b:95:98:56:aa:d2:01:95:28:08:f9:
                    13:fc:38:3d:32:7e:6a:f9:ba:39:ae:5b:da:a1:05:
                    78:96:13:b1:5c:9d:ec:c8:21:6f:4d:1f:5c:e2:e6:
                    2c:f3:51:de:4d:ae:78:7f:f0:e1:3c:17:26:5b:7e:
                    ef:7b:6e:32:69:5b:5d:1d:40:58:e7:94:a7:bb:21:
                    ef:2c:9f:f8:08:bd:ae:ac:f9:6d:11:e0:78:38:47:
                    30:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D4:70:39:7D:68:44:1D:B2:E4:9F:15:CC:80:20:B5:C0:A6:51:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/56c020df-3c3a-3909-b7c8-6e2c3fb0fe24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:5800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:c9:f3:90:76:de:14:c7:83:bf:d3:5c:88:a6:f4:a4:0c:c8:
         e2:3e:55:6e:c2:5f:3e:ec:1b:21:6e:41:2d:3b:35:77:cd:d1:
         5e:55:f8:1c:d6:6c:fc:0d:75:3f:30:43:36:6c:81:ab:7a:bd:
         15:a7:2b:9d:ff:58:d7:04:99:ad:01:aa:10:7c:58:a4:52:41:
         bd:e7:77:51:78:25:2a:6f:1f:73:45:95:bf:d7:92:30:79:69:
         d1:f2:72:03:e9:be:68:83:cb:0c:ea:c0:92:b4:6c:f2:7f:dd:
         58:48:42:b1:1a:1d:00:33:39:de:39:21:92:7c:5e:ba:6f:77:
         59:09:12:8e:36:2d:ae:8f:e7:96:8e:83:e4:27:c6:6e:eb:b2:
         42:a4:a9:21:3c:3a:c2:dd:96:16:a4:82:e1:1d:dc:ea:10:a1:
         85:a6:a0:20:3c:4a:34:64:44:67:c6:25:5a:b0:a6:18:f2:58:
         0b:6f:73:ea:e8:94:e7:cb:15:91:6b:b3:c0:f1:44:12:44:4b:
         a6:70:f1:43:31:92:e9:7d:33:47:9d:f6:e9:b7:96:1f:cb:01:
         fc:a5:39:22:40:f4:7b:7f:dc:86:84:5e:ca:fc:84:08:c8:11:
         e6:47:a0:39:3c:85:4c:3d:f2:b9:fe:25:39:aa:bc:e3:51:c6:
         01:a3:e0:e0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5m2gM2dyeOPY54pMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
NmU0ZWM4ZmMtOTljZi00MDBiLTlhYzUtYjhmOWI2YjBhNzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6vId8yo5/pZOtn844oZ0r5j3fyiiPkhmg60
pVI7J8TurPHMVuRFGllFxPGa0tVlhJKiRJOg/pT9M8HinlvXhbBAt9lvP1Jh2Irc
/aiuDQIogQPxmL61anc/7dgphoIg58ogsDQ1K48fY6uNiZZwdDu4HYD3B2dn7YIa
mXi+nmXSIVDs2jJvonc9rpnW3WNc0Si5gUTIk/G2jgZVVPbbKfmUYGB5IbpzG5WY
VqrSAZUoCPkT/Dg9Mn5q+bo5rlvaoQV4lhOxXJ3syCFvTR9c4uYs81HeTa54f/Dh
PBcmW37ve24yaVtdHUBY55SnuyHvLJ/4CL2urPltEeB4OEcwcwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEPUcDl9aEQdsuSfFcyAILXAplF6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNTZjMDIwZGYtM2MzYS0z
OTA5LWI3YzgtNmUyYzNmYjBmZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTJgFgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASMnzkHbeFMeDv9NciKb0pAzI4j5VbsJfPuwbIW5BLTs1d83RXlX4
HNZs/A11PzBDNmyBq3q9Facrnf9Y1wSZrQGqEHxYpFJBved3UXglKm8fc0WVv9eS
MHlp0fJyA+m+aIPLDOrAkrRs8n/dWEhCsRodADM53jkhknxeum93WQkSjjYtro/n
lo6D5CfGbuuyQqSpITw6wt2WFqSC4R3c6hChhaagIDxKNGREZ8YlWrCmGPJYC29z
6uiU58sVkWuzwPFEEkRLpnDxQzGS6X0zR5326beWH8sB/KU5IkD0e3/choReyvyE
CMgR5kegOTyFTD3yuf4lOaq841HGAaPg4A==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:34:34 2026 by rpki-client