Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0be9cc58-6678-3921-aec5-884cb4c2f0e0.roa
File:                     0be9cc58-6678-3921-aec5-884cb4c2f0e0.roa (raw, json)
Hash identifier:          aT9UU3pe0QupzG25znFmMVtgiDusXpafE3jcWoCeB1w=
Subject key identifier:   EB:45:D0:22:B1:52:CE:A5:6F:63:FB:EA:D9:AA:C7:95:FD:22:8E:D2
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584F655D7BD28B83D6BAF46FCEC0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0be9cc58-6678-3921-aec5-884cb4c2f0e0.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     9009
IP address blocks:        2604:c980:2800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:7b:d2:8b:83:d6:ba:f4:6f:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=7fe034da-f3d5-4256-bf90-0e87c38f8d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:52:87:8e:03:e5:7d:98:30:34:69:c7:03:70:
                    e7:e4:3b:03:69:cf:04:25:d5:3c:69:fe:e0:d0:25:
                    a7:f7:f8:31:ef:d7:e4:50:17:ec:c6:4c:81:9e:3b:
                    5d:d7:f6:6d:86:e3:68:e4:93:b1:7f:3e:16:b0:16:
                    fa:f9:df:5d:bd:5f:23:26:53:4f:ca:7a:a3:1d:4e:
                    47:1a:36:bf:b0:ea:07:04:65:f5:26:c8:65:2e:ac:
                    b4:e8:ab:56:76:17:49:b7:34:bf:2e:8f:25:97:f3:
                    ba:e6:3d:c8:b6:bd:ac:42:0d:e9:72:c9:ad:f9:36:
                    58:79:44:1f:43:04:45:48:5c:25:60:bb:64:89:26:
                    9d:e6:8a:a3:9e:fc:57:49:ef:d8:af:c3:72:eb:fe:
                    37:1c:06:f7:5e:72:84:9f:31:f9:c0:8a:50:4e:1a:
                    e8:d8:14:46:aa:11:93:f1:6d:a8:d5:28:ee:bd:fd:
                    4a:e2:5f:b3:5f:dc:98:83:f7:64:6b:81:19:42:c2:
                    2d:d3:b1:c7:de:a0:b1:a7:fc:14:62:82:56:c0:f6:
                    94:b1:1f:07:80:a1:fe:b5:2b:c5:19:b6:bd:c2:9d:
                    db:bc:c3:87:fd:b9:f1:71:24:03:10:1d:c5:3e:74:
                    aa:d4:cc:4a:5c:c0:12:e5:54:3c:46:dc:ab:f5:2e:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:45:D0:22:B1:52:CE:A5:6F:63:FB:EA:D9:AA:C7:95:FD:22:8E:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0be9cc58-6678-3921-aec5-884cb4c2f0e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:75:bb:48:34:ef:0f:85:fc:16:58:43:50:60:ac:bd:2e:b1:
         f3:ba:e7:82:c5:36:8d:bd:f4:77:0c:1d:a4:5b:1d:e4:02:ab:
         e1:0d:da:f7:6c:b9:2e:e2:91:c3:43:cf:7f:d8:b6:a4:81:6b:
         2d:94:84:72:52:f6:ba:e8:5a:4e:e8:21:f4:18:5c:22:df:33:
         26:19:2b:fd:88:ee:4e:cc:06:40:b7:79:21:15:c3:40:b2:68:
         3e:5d:a7:7a:25:c6:e0:7b:b8:11:4e:05:76:20:bb:f9:64:4a:
         a9:19:d7:52:c0:4c:6c:7e:c0:88:3a:af:f5:3c:3f:96:aa:02:
         94:49:bb:f5:79:75:b1:0a:8b:69:4e:eb:b3:4c:fd:bc:73:b0:
         d9:08:45:2c:25:e9:2a:35:a9:d8:f9:1a:bc:7d:ad:85:8d:c6:
         08:77:13:d4:ac:1e:06:09:54:01:88:3a:a2:58:98:02:27:d2:
         42:bb:82:cd:f4:30:5b:30:9b:b9:a0:42:46:c6:3d:e4:70:df:
         2a:e8:08:8c:e1:31:3a:27:9a:cf:97:ff:32:73:df:d1:dd:f3:
         17:99:76:f3:78:36:6d:0e:9a:23:53:a0:61:a5:be:c3:8e:4e:
         37:54:4c:b5:e5:6d:e4:f1:fc:08:99:d2:14:90:20:72:19:6a:
         9c:bf:80:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:12:35 2026 by rpki-client