Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ca7acfee-cb07-3908-a03b-682e867f02d9.roa
File:                     ca7acfee-cb07-3908-a03b-682e867f02d9.roa (raw, json)
Hash identifier:          SDfeK5W1lKRjv3BSE+quNhJ2Y3drWYR+ZmuNycCStPY=
Subject key identifier:   7E:46:57:16:86:5B:41:ED:FD:61:24:8D:F8:64:CC:BB:8E:0F:8E:FF
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584E2D9F3DE07900940E6D7E8F40
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ca7acfee-cb07-3908-a03b-682e867f02d9.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     62651
IP address blocks:        2604:fc80:4800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:3d:e0:79:00:94:0e:6d:7e:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=24cf9ade-0827-4246-8c33-5691be095680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:f0:af:ed:b7:e5:c5:15:af:f0:ef:fd:9a:
                    90:d1:39:7a:64:80:5a:99:de:d9:56:a7:b0:c0:6e:
                    c6:e9:5e:8a:08:52:75:b3:a4:6d:c1:5b:6b:16:2e:
                    a1:af:13:7c:0c:a4:d7:72:17:1e:51:47:0e:49:68:
                    00:d7:2d:a3:2b:34:dc:fd:97:b8:a5:88:53:cb:46:
                    58:37:be:9d:47:ba:8d:fa:04:f9:d6:66:84:ec:83:
                    8c:ad:ba:60:b0:f4:20:65:78:be:ad:fd:61:c8:4f:
                    51:25:02:cb:e8:92:1e:54:c5:7c:01:4e:aa:15:4c:
                    b0:bc:f8:f6:b3:7f:7f:b9:71:3e:a4:9e:6b:cf:e2:
                    55:41:1b:a2:7d:2c:ff:b6:4f:98:62:04:62:50:11:
                    01:17:fc:d1:31:7b:97:6c:e1:a1:e9:b8:ae:08:3a:
                    3e:dc:b2:18:77:83:c8:7e:6e:dc:7a:bb:e1:67:d9:
                    1d:01:c0:27:f9:7d:93:0a:7b:a4:4a:e4:4b:5d:08:
                    6c:1f:ec:e6:fa:f3:7e:6d:0c:e2:5c:bf:ae:b1:81:
                    e7:ce:ab:bc:0f:5e:a7:9b:ae:11:f1:84:48:ee:9c:
                    51:c6:3e:cb:e5:45:62:d6:cd:7b:76:be:17:ee:2f:
                    b3:eb:cc:4c:b7:e8:81:b5:ae:78:de:d1:cd:f1:e1:
                    59:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:46:57:16:86:5B:41:ED:FD:61:24:8D:F8:64:CC:BB:8E:0F:8E:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ca7acfee-cb07-3908-a03b-682e867f02d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fc80:4800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:bc:d8:39:ec:de:f6:7a:49:4b:f3:90:dd:0c:9b:14:d2:70:
         b5:5e:40:ff:34:10:32:ff:da:92:d9:75:0d:28:62:ee:03:3e:
         dd:5b:b0:21:9d:75:0b:ca:85:32:72:71:de:15:d5:63:48:0c:
         2b:10:5c:53:5a:11:97:fb:8e:84:a5:06:a1:ae:75:7c:15:e9:
         ea:44:ea:23:21:01:30:9f:f7:96:18:7a:f7:6a:04:93:11:e1:
         22:ae:63:22:e8:8c:4d:ca:c2:18:52:1e:b4:75:1e:d2:03:4f:
         b4:c7:b7:94:fe:64:2b:1e:9b:2a:5e:cf:58:eb:de:49:79:d5:
         ba:fb:ac:1e:b5:e6:86:ef:8c:cc:42:26:f6:1a:1d:a6:e2:1d:
         8d:22:1d:5f:0c:3d:73:a5:5f:e6:46:33:65:97:63:c2:6e:2a:
         72:ed:1f:c3:8b:76:aa:a0:7e:99:d3:00:80:7e:71:77:44:38:
         c0:e9:00:5f:32:d9:71:9d:be:40:4f:2f:c0:a5:71:49:de:72:
         26:91:cb:7c:6a:62:b2:22:3c:33:f3:78:f1:34:d1:73:70:8d:
         99:c0:9a:66:16:70:ea:1f:34:ff:68:09:f9:e3:8b:87:4c:3e:
         c9:c9:4d:38:aa:ab:dc:9f:48:26:55:77:31:a6:15:4a:38:80:
         6e:01:97:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:35:12 2026 by rpki-client