Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28d8023b-5b50-38c4-a6ca-09bf964ed5b7.roa
File:                     28d8023b-5b50-38c4-a6ca-09bf964ed5b7.roa (raw, json)
Hash identifier:          TGIxsX1dLjprdqwHcSOz89kB3vN/+BG5X61JXXH5S70=
Subject key identifier:   00:B6:9D:D7:39:28:1B:91:53:CB:A7:E6:1D:09:42:1F:2B:88:9C:8B
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584DC6CB07EF47F880D0B6CE5F40
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28d8023b-5b50-38c4-a6ca-09bf964ed5b7.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     22781
IP address blocks:        2607:fb50::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:07:ef:47:f8:80:d0:b6:ce:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=603c8c69-06d6-45c3-9e27-a0660b255a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:05:b4:36:34:e1:a7:ab:f4:c1:d1:1c:ec:59:
                    f8:57:1b:67:82:2f:c8:94:ed:cd:50:b3:78:5b:86:
                    de:1d:be:dc:cf:2b:59:47:b0:cf:78:78:c2:c9:66:
                    34:24:c6:f4:31:48:ee:91:a4:16:f8:53:64:37:05:
                    b0:68:ac:d4:af:c2:01:dd:77:94:62:5d:cb:18:6c:
                    53:0b:5e:00:14:2a:6e:39:74:53:7d:de:a8:b6:a4:
                    28:33:0a:d0:e6:22:8c:03:eb:31:9e:e1:f4:63:9f:
                    e8:b0:6a:55:4c:ff:e8:b8:39:45:62:b3:6c:36:0b:
                    f7:de:96:dd:4c:7e:3c:1f:31:fd:04:b1:37:6b:cb:
                    f0:70:95:a1:a8:e9:a8:74:90:c4:73:fc:d2:ab:1b:
                    db:d4:1e:06:5d:5d:9b:33:a2:18:8c:4a:25:28:d3:
                    48:e4:50:c6:8c:4e:08:66:18:d8:d0:a0:b6:10:21:
                    4b:8d:f5:e0:f8:b8:49:22:dd:40:03:90:30:a3:18:
                    74:c6:a7:4b:9e:ab:26:fe:a6:58:bf:ee:b7:0e:4f:
                    de:ea:b0:34:51:da:54:f0:eb:1b:fa:8c:85:44:95:
                    15:90:99:d7:d7:08:2c:c1:31:af:ff:73:96:35:6d:
                    c5:06:43:f1:72:3e:00:3a:c2:a9:29:bf:66:ba:10:
                    0a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B6:9D:D7:39:28:1B:91:53:CB:A7:E6:1D:09:42:1F:2B:88:9C:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28d8023b-5b50-38c4-a6ca-09bf964ed5b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb50::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:12:8f:e2:fb:a3:21:ef:7c:84:37:f0:4a:e7:ba:b4:35:c1:
         61:be:0b:f6:61:51:e0:ad:14:e3:33:7d:d5:1e:a3:6b:a2:08:
         13:7c:14:fc:89:87:43:f9:ca:4b:14:9f:38:23:36:d7:0b:ea:
         06:7b:a7:65:3a:1a:35:55:29:18:30:26:31:44:43:1d:92:91:
         fc:32:93:19:3a:e3:c8:84:4a:a8:c7:a1:d7:ba:17:de:16:97:
         d4:28:38:ab:db:0c:bc:3e:40:09:d4:57:c2:ba:3e:9a:01:f9:
         b6:fa:dc:56:d0:9e:9d:ad:bf:a3:5c:f3:48:80:28:3d:91:9f:
         c3:cc:0f:eb:9c:59:3e:ef:7b:5c:52:df:a6:2a:38:04:8f:e6:
         c7:54:e9:cc:a7:7e:69:98:c1:22:25:04:76:22:51:50:75:02:
         f2:22:a8:ce:45:06:ba:f1:19:40:7c:09:a5:ec:09:6a:a0:4f:
         5a:86:43:c4:d5:88:01:98:cc:b9:38:74:38:dd:c7:5c:16:11:
         cb:2d:1b:64:b8:8b:a8:fd:b1:da:2f:25:f1:bf:87:05:b1:09:
         c3:6b:48:07:e0:c6:85:05:5b:91:bf:74:2c:f7:46:cc:4d:25:
         e6:c3:f4:ad:85:3d:59:f6:25:7e:0f:b5:f7:cd:dc:33:47:78:
         29:4f:2f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:28:34 2026 by rpki-client