Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/37043548-8c04-3089-a47a-b02b8d4ea124.roa
File:                     37043548-8c04-3089-a47a-b02b8d4ea124.roa (raw, json)
Hash identifier:          aSdH6pqh23ekF4st8ZL9AIRgXZ/U7ybQKQBmTX5hJ80=
Subject key identifier:   21:62:F9:EE:BB:13:F5:A5:D0:42:0B:06:AB:83:0F:72:FA:EB:8B:82
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584F58CD5470E080D63C6AD26A80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/37043548-8c04-3089-a47a-b02b8d4ea124.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     55286
IP address blocks:        2604:c980:4200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:54:70:e0:80:d6:3c:6a:d2:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=b4804c4f-64b7-4d70-90a9-8e39515aab7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:37:95:89:dc:6a:a2:b6:34:63:c2:00:e0:b1:
                    2f:79:f4:dc:96:5c:8d:40:ff:47:97:9f:cf:9d:39:
                    68:8f:f1:ca:e4:e6:73:e6:d6:7c:14:ff:ef:3f:3a:
                    dd:63:85:d4:b0:20:d5:5b:07:d1:ed:7e:24:92:5c:
                    e9:a7:51:05:19:89:9d:8b:95:78:3d:62:16:88:a3:
                    1e:02:8b:13:91:cb:54:60:e4:24:36:54:6d:10:c6:
                    c1:bd:4f:da:f8:00:67:7c:5f:df:e7:d2:96:62:bc:
                    18:c7:f1:67:31:3c:2f:d4:42:d7:78:b7:e3:16:20:
                    da:09:19:65:f4:1b:c7:4b:2f:77:29:b8:ee:d5:da:
                    0e:7f:42:5f:41:83:0a:47:91:d7:e9:78:cb:20:4b:
                    de:28:7e:4e:57:5e:ce:bc:6a:66:be:4c:ff:25:b1:
                    01:9b:b8:83:50:59:7f:e2:7b:66:18:0a:d1:b6:9d:
                    77:bd:34:e5:66:2f:16:32:04:3f:f4:32:09:f7:0a:
                    c3:14:b7:37:68:41:48:4b:7b:7e:f3:36:63:2d:5a:
                    b3:37:16:a3:7c:ae:39:d0:22:27:ee:bb:e6:00:ca:
                    5c:00:2b:5e:dd:bd:83:e1:4a:48:8e:ce:54:95:b6:
                    a8:d3:6e:fd:79:75:bf:57:10:28:fd:fe:4e:3e:e0:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:62:F9:EE:BB:13:F5:A5:D0:42:0B:06:AB:83:0F:72:FA:EB:8B:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/37043548-8c04-3089-a47a-b02b8d4ea124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:4200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ab:41:7d:ee:f5:eb:bc:6c:46:b5:c4:ce:e4:36:b2:d1:06:
         84:25:4c:37:49:87:bb:48:a1:4c:2d:5e:c8:bb:62:a6:11:cb:
         56:c9:e2:1a:b8:ef:b1:6c:47:cb:41:3e:84:4c:9c:de:d7:8d:
         33:1b:22:5a:3f:68:34:20:92:23:98:14:62:bb:45:68:90:9d:
         f1:8c:f6:79:ba:8d:d4:dd:1f:89:16:df:26:db:97:bc:69:60:
         09:5c:d8:35:8c:db:c4:d6:07:64:72:fa:c7:4e:17:ae:df:b8:
         68:1e:eb:97:01:95:1d:77:e5:e9:5f:9b:be:fe:1f:14:52:0e:
         b7:a3:7d:1a:47:68:33:db:4d:df:53:06:d8:15:f4:74:a4:58:
         f7:1d:2b:d4:dc:4d:eb:13:6f:01:62:8d:3b:58:5c:33:93:21:
         d9:c0:73:63:d0:82:0b:e4:44:3e:fc:eb:43:90:9d:a8:44:bc:
         d5:84:dd:23:22:d9:87:7d:d8:47:e2:6c:36:d8:06:c8:77:b0:
         15:e4:88:48:e5:00:48:a5:e7:34:b3:11:c5:93:cb:30:f1:28:
         47:a7:11:15:8d:eb:fc:72:72:fe:ee:34:86:79:c9:e5:23:2b:
         45:94:a4:7d:dd:95:c3:04:77:93:ef:04:9d:9d:de:63:98:8f:
         3b:4f:f3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:15:46 2026 by rpki-client