Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/61971812-78c9-30bb-a30b-5e5b1ca3855d.roa
File:                     61971812-78c9-30bb-a30b-5e5b1ca3855d.roa (raw, json)
Hash identifier:          EeKcTgSq47mQO9RTv37OdZ5ZpEbvw2k9zdAE4KdMUOc=
Subject key identifier:   A5:33:A8:DF:AE:F7:5F:D0:A8:F6:0D:95:7D:2E:F8:67:06:93:53:E3
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584D300A56096FE270F89B50AF80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/61971812-78c9-30bb-a30b-5e5b1ca3855d.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     62651
IP address blocks:        2604:c980:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:56:09:6f:e2:70:f8:9b:50:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=db00cb70-05b0-434d-a90d-b1f77a3e32f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d0:1b:e9:f8:75:b8:06:44:35:80:75:33:b2:
                    76:0e:37:8d:53:0e:5e:15:20:d2:91:da:f4:a2:5c:
                    9a:9d:10:a3:e2:fb:e1:56:49:b4:a9:df:d6:87:c2:
                    d8:75:90:4c:1c:47:a0:99:d5:d7:b3:56:a8:df:2c:
                    a4:06:47:ee:03:09:6a:44:7d:da:12:b1:96:77:ee:
                    ad:61:e6:be:93:e7:4a:96:39:15:7f:41:a5:28:bb:
                    97:81:06:1f:2c:7c:0e:94:de:62:2b:c9:38:7c:59:
                    a5:b4:74:da:68:f9:37:d4:f9:04:f2:bf:88:17:0b:
                    71:92:61:a6:c8:c9:a9:5b:d3:22:c6:eb:4a:cd:15:
                    62:f0:d1:50:8f:48:ac:43:cb:a0:fa:dc:e6:fb:4c:
                    d9:59:36:b4:3f:1b:0a:45:a4:60:9d:80:f9:77:fe:
                    d9:f4:85:23:d0:57:10:5d:8f:54:96:55:d6:20:74:
                    e1:cb:65:b5:e4:5c:1f:c7:07:d0:bc:a1:87:5d:a1:
                    a8:b8:14:f0:ca:50:09:a8:3e:15:31:88:cc:d7:f4:
                    f6:dc:bf:6b:0b:45:e5:14:0c:5b:8f:c7:bd:bf:68:
                    f3:eb:1c:47:72:dc:76:d6:9e:8e:31:d2:f8:89:09:
                    e7:2f:3a:b9:1f:eb:c4:79:4f:d5:55:a0:b8:c4:2d:
                    8f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:33:A8:DF:AE:F7:5F:D0:A8:F6:0D:95:7D:2E:F8:67:06:93:53:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/61971812-78c9-30bb-a30b-5e5b1ca3855d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:36:da:56:7d:60:a7:26:e4:8e:6c:62:8d:bf:ea:cd:45:b0:
         bc:03:7c:f4:a1:0d:af:84:e5:a3:0d:a4:ec:2e:97:ef:09:36:
         66:d7:39:4f:75:29:b7:13:f9:b4:9e:31:af:86:f4:26:45:96:
         28:3d:1a:9b:c3:64:95:04:bd:0e:e2:45:2f:3e:50:0f:f7:aa:
         e8:2e:af:17:57:b3:40:02:a6:53:1e:38:f9:7e:57:80:cd:c9:
         b0:fa:40:fe:41:2c:d7:30:51:49:8c:ad:fa:fe:53:e1:f8:d9:
         7f:35:8e:0d:3b:59:88:4a:b9:e0:fa:62:3c:1d:72:0b:27:1f:
         a0:4a:09:dc:9a:d1:a4:8c:64:e3:bf:87:5d:5d:25:75:4d:78:
         71:29:57:9e:ba:db:86:1b:96:58:64:4b:ce:e1:09:47:99:a7:
         0b:1f:ac:89:86:c6:3b:26:7e:99:e2:18:ee:bf:ef:b5:c3:a1:
         d3:0a:b9:96:1c:93:43:34:28:99:15:e2:16:ba:c0:28:72:f0:
         58:0a:c5:e0:c7:08:32:09:ae:fd:f3:32:ed:c0:32:a8:81:ef:
         d0:8a:b0:56:08:2d:40:f1:b6:3e:dd:2e:e0:9b:2c:a0:04:cc:
         fa:40:6f:4a:f8:81:5c:f3:41:31:6d:65:d4:a0:e5:ab:11:4c:
         6b:d9:9b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:00:21 2026 by rpki-client