Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d54a33d9-0800-39b0-862d-a305ea335a7d.roa
File:                     d54a33d9-0800-39b0-862d-a305ea335a7d.roa (raw, json)
Hash identifier:          3ZEUSMFBXauqi+HdrBzNbnOjcp+Nw+RnBucJcWIcOkM=
Subject key identifier:   E0:23:C9:4B:0B:59:E9:11:1C:3C:EC:A3:58:A5:51:D4:0A:C1:69:83
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584E3E5F46545039088E99CE2500
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d54a33d9-0800-39b0-862d-a305ea335a7d.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     22781
IP address blocks:        2607:fb50:8c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:46:54:50:39:08:8e:99:ce:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=47a30588-3416-4db7-bb2d-f1f67b84fcbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:31:71:32:69:19:96:d0:d7:1b:e6:37:bb:fb:
                    fc:8e:e3:1f:24:6d:3d:da:2d:80:ae:65:9e:6d:d2:
                    ae:1a:5f:e5:ac:30:f1:6f:15:72:ca:01:f3:ef:8e:
                    6b:94:59:f1:bd:8c:6c:d8:4c:18:df:32:5a:47:9f:
                    3e:9d:86:9d:60:9e:5e:31:24:1f:12:5a:93:5e:ab:
                    b3:d8:af:6a:f5:17:f9:f2:cb:e7:99:56:3b:0a:2e:
                    70:68:16:35:03:1d:43:42:7e:93:d8:8c:65:4a:73:
                    42:36:7d:1c:85:34:51:b7:94:db:57:aa:a3:91:f4:
                    99:3f:b5:11:a6:7c:3b:5c:ff:a2:fe:af:63:0a:ad:
                    ff:66:02:5a:19:76:22:52:23:ca:4e:9b:a3:bb:fa:
                    3e:76:5f:73:0c:7b:98:2f:3f:fe:28:59:5f:e5:e5:
                    46:69:05:89:a0:1e:8a:7c:de:4c:69:54:b9:98:c7:
                    14:ac:f1:16:ce:5e:d3:4a:0e:00:bc:4b:f6:57:17:
                    a7:c7:5c:17:5f:de:82:b4:84:23:b0:c9:50:e9:a1:
                    8d:15:83:fc:82:30:c0:a2:03:cb:df:92:2a:fc:46:
                    fb:32:58:fe:49:ba:df:c4:d1:eb:7b:cf:20:5d:87:
                    e5:cd:ab:4e:fd:71:7a:b2:77:61:ea:b8:bf:ae:3e:
                    8c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:23:C9:4B:0B:59:E9:11:1C:3C:EC:A3:58:A5:51:D4:0A:C1:69:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d54a33d9-0800-39b0-862d-a305ea335a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb50:8c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:60:d1:16:70:7a:d8:3f:c5:92:1e:5d:1f:6d:50:b1:6d:ae:
         e3:4f:d6:d5:a5:c7:66:86:a6:7c:70:88:f2:33:11:f2:77:ec:
         3c:8e:e0:76:98:de:74:b3:1d:db:72:a5:5d:8f:63:a6:fe:50:
         84:cf:a7:44:7e:e3:85:a4:d7:c0:68:03:ce:64:8f:d2:dd:8f:
         33:79:08:92:15:7a:ca:e6:26:ee:45:83:8e:00:a9:a6:8c:a2:
         cd:c3:4f:77:88:f5:85:5e:48:37:a5:dd:81:2b:76:81:26:2f:
         3c:2a:52:7d:6e:25:2a:41:67:1a:c2:8f:f3:eb:97:35:b2:11:
         c7:4d:0f:c2:5c:94:dd:7e:b1:43:64:82:13:49:36:99:db:93:
         64:77:6a:d0:f7:a9:d3:40:d5:f5:34:40:fe:9a:30:d5:a2:91:
         60:6c:7d:85:43:fb:e3:3d:c2:05:31:7e:93:aa:bc:ea:62:e4:
         a0:7a:65:27:81:10:42:5e:1e:de:d9:0e:71:5e:5b:15:7c:b9:
         90:47:10:79:11:f4:41:27:eb:b4:73:3f:37:a9:05:e7:01:00:
         8f:d6:f6:c6:21:21:0c:53:00:a8:96:91:9b:49:28:32:e2:2f:
         a7:b9:60:5f:bf:5a:a7:a2:c3:2b:31:75:ae:7d:31:a4:c6:2c:
         0a:07:e4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:34:07 2026 by rpki-client