Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/6e47fe5d-d664-31f9-ab57-4bcbf8d213fc.roa
File:                     6e47fe5d-d664-31f9-ab57-4bcbf8d213fc.roa (raw, json)
Hash identifier:          LCRCpVkrjcxaCiisQ9jeE47aBREAsqVwtA3viJ+pLBc=
Subject key identifier:   2A:4D:9E:96:21:EE:93:64:FE:61:5A:B9:A9:B7:39:B9:37:C1:FC:0C
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584F42781C2E5BAF661B8A1967E0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/6e47fe5d-d664-31f9-ab57-4bcbf8d213fc.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     62651
IP address blocks:        2604:c980::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:1c:2e:5b:af:66:1b:8a:19:67:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=d839b7af-ad2c-46fa-a07c-41c5102d817d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:06:86:b0:c3:46:e4:b0:53:90:21:5a:be:
                    5b:93:c1:27:69:53:d2:eb:4d:0f:64:a0:68:b0:09:
                    ab:fc:8c:d2:7a:6a:ba:1a:19:5e:3f:a0:8e:17:9a:
                    e1:c3:d3:54:07:79:d0:c1:6b:e8:94:b8:d0:93:38:
                    07:bc:be:2d:cd:c4:c5:30:de:14:49:e2:24:b4:72:
                    46:80:01:d1:28:10:81:a5:ab:58:fe:46:ff:64:53:
                    43:d5:b1:d5:18:89:63:9c:a6:5d:c0:35:2d:c3:d0:
                    b8:cd:14:28:ae:0f:99:66:fa:dc:03:9a:e9:3d:cc:
                    ee:6b:be:ec:fd:0c:fd:e4:83:af:0d:c6:59:72:c4:
                    3a:c9:79:73:e8:57:54:5f:86:ed:f0:90:46:e0:35:
                    ee:e2:f3:23:23:f2:37:10:2d:de:47:a6:be:53:92:
                    47:2e:79:05:ed:37:e4:59:12:e1:6e:68:3c:d5:ee:
                    4e:5a:9f:04:18:c5:a2:c4:77:63:c6:4d:52:4e:12:
                    32:c6:35:a3:11:85:65:99:c1:be:42:76:62:56:c0:
                    0f:8d:ab:de:40:8b:65:2e:34:36:d7:3c:fc:7c:77:
                    09:86:3c:2d:eb:94:c5:e7:9e:ad:3c:c0:f3:53:93:
                    2f:99:84:aa:a6:88:25:b8:45:bc:88:2c:41:2b:d0:
                    b5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4D:9E:96:21:EE:93:64:FE:61:5A:B9:A9:B7:39:B9:37:C1:FC:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/6e47fe5d-d664-31f9-ab57-4bcbf8d213fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:bc:58:c8:2e:83:27:69:11:79:e9:24:09:d1:72:c6:88:f7:
         50:21:9f:9f:f8:c6:c9:7e:4b:7c:35:e4:e3:66:66:b0:70:c2:
         06:a4:e5:23:00:61:dd:1c:78:f0:7c:24:6a:9d:ac:ef:cb:a9:
         0a:a8:10:16:c7:32:53:fa:cb:9c:de:d8:60:86:9e:2c:d5:d3:
         ea:df:4e:12:92:8a:5a:61:8b:3b:8f:73:ac:44:29:59:da:d7:
         a4:17:c6:44:72:bb:15:3b:8c:04:33:5a:36:bb:f5:09:61:ad:
         ef:c5:34:63:0a:3a:c2:82:7e:5f:04:20:a7:ac:a6:5b:26:e8:
         33:3b:42:e8:71:e9:e2:b1:fe:57:dc:0d:3c:82:73:0a:ba:92:
         47:43:38:72:c0:91:aa:19:34:b1:dd:c0:1d:84:48:de:d4:7d:
         aa:f8:15:a6:bc:c2:1d:9d:56:35:58:14:fc:69:ba:6c:bc:88:
         91:79:24:77:0e:5d:78:70:8c:7c:35:8f:42:ef:4a:21:0b:13:
         44:55:6d:4a:92:a1:0b:ef:5d:8c:1c:f8:17:91:8c:e4:ba:43:
         44:78:f0:0c:ce:f8:e8:ac:fa:4d:4c:1f:30:1f:64:12:df:79:
         08:f8:56:8a:f9:f7:f7:ff:25:a0:0a:f5:dd:64:24:12:d5:e8:
         cd:4b:ea:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:41:47 2026 by rpki-client