Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1f3baa01-d519-3749-ad08-f9a7023cd9aa.roa
File:                     1f3baa01-d519-3749-ad08-f9a7023cd9aa.roa (raw, json)
Hash identifier:          DNdXgxbvsRwzfblTCErTpKM2N/zL7g0CWGgbIjy/BUw=
Subject key identifier:   5E:F0:48:29:47:AF:D7:1F:C8:2A:8A:7F:B0:0F:E9:7C:73:06:53:BF
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584F3FAD3D9B82B2D0B500ED7700
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1f3baa01-d519-3749-ad08-f9a7023cd9aa.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     52423
IP address blocks:        2604:c980:1200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:3d:9b:82:b2:d0:b5:00:ed:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=75958fd9-4d5a-482b-961f-107aeb2ec5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f8:19:d8:71:05:3f:20:39:1a:71:71:09:b1:
                    e1:82:87:cc:af:92:a5:44:a4:77:09:7d:84:7a:b1:
                    d2:7a:18:e2:8f:fc:03:5b:26:38:c0:20:34:be:a0:
                    83:2f:1e:ea:dc:52:db:2e:43:22:6c:b7:53:88:fe:
                    df:94:6f:e6:5d:be:93:f3:a0:36:ef:3f:2f:a8:d7:
                    05:da:32:9b:54:9c:7d:d4:e3:e6:b0:66:73:7c:8e:
                    0c:ea:68:75:69:db:ab:27:e2:0d:54:47:6f:1a:59:
                    55:03:cb:41:fa:16:18:71:4f:1c:3f:60:a8:8d:eb:
                    17:8e:6e:d8:ee:6c:1e:15:d2:2b:ef:11:5b:a3:b5:
                    98:bd:07:82:41:67:42:32:2b:77:72:94:fa:d7:0f:
                    36:2d:eb:9d:a5:1e:c0:19:42:69:d9:08:dc:6b:57:
                    42:c6:c9:81:8f:dd:7d:62:38:10:c4:3e:44:b8:84:
                    12:1b:8d:b7:38:2f:a8:5e:b9:6b:6e:17:06:30:2f:
                    f0:48:ee:7d:5f:a9:99:18:a1:a4:de:27:49:13:61:
                    2b:a0:45:15:ec:ab:de:77:8a:73:ad:2b:e8:8e:79:
                    9c:14:48:ad:35:70:a2:8c:a2:a2:e5:b4:79:08:bf:
                    43:df:ed:8f:39:5c:27:50:66:3d:e8:a9:79:66:27:
                    d7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F0:48:29:47:AF:D7:1F:C8:2A:8A:7F:B0:0F:E9:7C:73:06:53:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1f3baa01-d519-3749-ad08-f9a7023cd9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:1200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f8:90:04:2a:60:5d:0b:8e:d5:74:02:19:4a:88:22:c8:08:
         ea:63:fc:d6:3c:40:2c:02:48:86:f0:ed:e0:e1:ae:27:58:a4:
         bc:6f:7e:af:41:2d:89:8d:58:b0:7d:37:84:e9:32:ef:68:36:
         b4:cb:3e:89:31:ca:7a:12:8e:22:5a:98:6d:82:a5:11:0e:b5:
         85:09:fb:5c:5d:58:01:b5:59:cf:48:26:4c:f0:d2:b4:29:4b:
         8a:74:ed:39:0f:c8:0f:40:d0:38:82:a3:20:b7:cf:54:b9:ee:
         a2:dd:71:28:a3:67:72:fa:ef:3f:19:3d:67:bb:81:4c:10:2d:
         e6:56:4f:f1:37:11:28:0d:2d:e2:d5:37:e9:3f:24:7a:f9:46:
         c7:7e:07:86:44:bb:4c:3a:d6:5d:13:cb:51:6b:c0:88:e5:ff:
         e1:1c:1e:ea:dc:fd:32:92:62:fd:6a:1a:b6:c0:b4:4b:95:c1:
         1f:18:01:4f:cb:46:cb:e7:43:35:ee:63:0d:47:03:e3:1c:1e:
         a2:a2:f0:7f:60:06:fe:21:79:bc:9e:5a:85:64:44:a1:4c:40:
         82:7d:37:b3:c8:3a:c0:12:dd:dd:1b:4f:39:85:5b:c9:65:37:
         c8:d3:d1:c2:7e:4f:97:c3:a3:69:c0:63:ce:17:5e:df:71:5e:
         89:96:15:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:03:43 2026 by rpki-client