Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5916936e-3b67-3060-a56c-ec30a03263a6.roa
File:                     5916936e-3b67-3060-a56c-ec30a03263a6.roa (raw, json)
Hash identifier:          18UICmA4jqbURtjjhystOdwJoSq1OlsxDxrv1uWx1CQ=
Subject key identifier:   75:B9:03:A8:A6:96:75:FB:F3:83:80:DC:4D:80:4A:F7:E5:F0:F7:A1
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584D300A4A8945B2905422570000
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5916936e-3b67-3060-a56c-ec30a03263a6.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     55286
IP address blocks:        2606:b300:b300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:4a:89:45:b2:90:54:22:57:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=1d611166-a64e-45f8-bd3b-19dfcc498cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e8:d7:88:c1:dd:61:2d:58:1b:29:32:d3:0c:
                    20:21:e4:76:7b:bc:69:31:0a:2b:40:2c:ab:10:b9:
                    4a:20:a8:66:ef:86:5a:a7:a5:1b:33:ed:6e:5a:cf:
                    df:a1:b2:95:4d:54:fc:5b:0f:54:9b:2d:12:1b:7f:
                    c9:ff:40:9f:72:33:5d:e9:cb:50:37:3c:0e:0c:11:
                    05:62:2a:b5:3c:4a:eb:bd:45:d3:f3:ba:08:f3:9c:
                    12:c0:7c:89:60:88:15:5f:9e:2b:35:95:de:fb:28:
                    2f:eb:a2:c2:d8:6c:00:07:ef:f2:5a:d4:4e:44:9f:
                    a4:0d:b6:cf:94:f7:b6:30:82:b7:04:7a:b2:d3:c2:
                    67:04:29:5c:89:6d:89:fe:cf:f3:8b:d5:69:4d:1f:
                    4e:2c:27:4f:8e:e9:86:f8:1a:89:8e:dd:96:ae:ac:
                    9a:8b:f7:8f:b6:45:44:f8:4b:b5:55:ee:d4:86:1a:
                    d0:87:1b:e6:3f:d3:99:18:66:c2:14:bc:39:b7:27:
                    7d:32:ec:03:1b:96:23:1d:4b:38:f2:18:26:a6:d7:
                    32:42:e0:28:47:e0:ce:d4:d6:ae:82:3c:f3:bb:a6:
                    0f:63:c5:7d:ee:77:78:c3:12:31:1d:ef:82:c9:09:
                    d0:f8:c4:3a:42:65:d9:81:a5:a9:93:f3:0b:6e:14:
                    5a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B9:03:A8:A6:96:75:FB:F3:83:80:DC:4D:80:4A:F7:E5:F0:F7:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/5916936e-3b67-3060-a56c-ec30a03263a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b300:b300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:92:0c:a9:d7:1b:ed:27:de:d2:5d:5e:96:7e:c1:0a:51:c9:
         7d:d5:d5:e4:ff:ba:28:9d:16:c6:6a:9d:15:3b:ff:a2:6b:20:
         cb:ce:5f:52:f4:e5:22:a5:d5:c5:b1:e6:8c:68:ff:7d:f5:0f:
         71:5d:f6:6c:8c:87:bc:6d:3d:a9:8d:5f:1c:cf:a0:e3:43:12:
         a9:95:33:c9:0e:57:8e:31:88:c5:50:f3:69:5f:5f:9e:13:fe:
         1a:0e:c0:40:39:8c:68:a5:7f:82:ab:64:6f:c8:89:7d:e4:cd:
         e7:d5:45:b1:cd:dd:61:59:63:ce:12:b7:82:0e:18:f2:17:ca:
         36:07:e9:3c:a4:81:7b:6b:f2:ab:90:40:65:1a:58:00:c4:dd:
         78:52:f2:1e:68:81:fa:d5:2a:7e:d4:49:67:02:b5:1d:5d:2d:
         5a:46:13:f5:cd:da:3d:e1:bc:fb:05:5c:d3:38:7e:e1:96:70:
         77:29:c2:d9:86:0f:73:29:de:3a:c4:f8:e6:85:c6:71:8d:3c:
         dd:93:9f:74:00:8f:fc:35:f7:bb:d4:5f:57:a1:a0:10:5f:87:
         67:9f:06:09:dd:34:5b:8a:5d:be:f3:e1:f6:9b:45:9b:12:23:
         d6:de:1c:18:89:1b:e0:01:14:a1:3b:1c:c8:ab:d2:d0:be:57:
         74:95:ec:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:47:33 2026 by rpki-client