Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7d1fe99b-7346-3d2f-8adc-3008bee21fa4.roa
File:                     7d1fe99b-7346-3d2f-8adc-3008bee21fa4.roa (raw, json)
Hash identifier:          KuVkD/zhFRF0XT5B3wfLYeCQ4ELFtuERLpPSb/6/1Uc=
Subject key identifier:   86:1D:1B:08:C0:09:7F:10:B2:08:E7:1E:14:94:E9:A4:F9:B4:54:EB
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584F549D4ECC133D8192EE657F08
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7d1fe99b-7346-3d2f-8adc-3008bee21fa4.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     13536
IP address blocks:        2604:c980:6200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:4e:cc:13:3d:81:92:ee:65:7f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=5cda5295-02a5-4807-b1b4-2852f6003a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2c:2b:55:9c:06:06:ab:d0:0f:4d:36:90:67:
                    b3:29:62:71:34:47:4b:17:65:8f:26:b2:c0:e2:a1:
                    10:b1:67:d9:63:24:7d:75:5f:ed:7f:fa:27:3d:84:
                    48:e1:68:e5:54:d0:43:4e:5f:75:a9:38:8a:54:98:
                    94:c0:15:2f:1f:11:65:9a:bb:54:73:8a:d7:bd:8d:
                    cd:73:30:76:2b:99:71:f9:5e:bb:8d:e8:cc:88:f1:
                    7d:9f:a7:ac:10:f5:fd:75:ba:80:78:b6:a7:e1:04:
                    d2:12:66:16:26:58:9a:ba:20:6f:da:d0:c5:6c:20:
                    62:24:71:b1:64:8c:d5:9c:5b:6c:62:2a:d2:3b:ea:
                    a3:89:f2:32:39:4e:0c:bb:54:d2:a4:21:8a:c8:f1:
                    3e:44:41:60:b9:f1:77:b4:95:f4:36:a6:7a:7b:30:
                    93:df:5b:10:d7:56:05:b6:a8:23:de:14:05:c6:74:
                    44:b9:69:be:f0:98:21:e0:45:34:54:2b:13:ef:ac:
                    f2:2d:27:20:a7:25:26:73:a9:0b:f7:8d:48:d7:62:
                    78:c1:b2:0d:18:d3:29:4f:a4:f4:04:a4:b4:f9:75:
                    4a:18:d3:60:75:6a:63:32:47:b1:1f:06:5a:5f:c4:
                    af:e1:ce:05:72:cd:0e:d7:ef:06:06:b8:e2:fd:ca:
                    8a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1D:1B:08:C0:09:7F:10:B2:08:E7:1E:14:94:E9:A4:F9:B4:54:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7d1fe99b-7346-3d2f-8adc-3008bee21fa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:6200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:11:18:74:59:ef:1f:cb:a9:f1:57:94:11:db:8e:91:c7:f9:
         a6:28:5d:ea:c4:17:c1:85:4b:99:b2:62:57:40:8f:25:26:1a:
         20:c4:e9:fd:fe:9e:43:a6:c1:6b:9a:8a:75:1e:36:58:5a:d0:
         bf:94:b4:3e:ce:cb:a5:2f:61:bd:b9:49:84:af:a6:96:a4:52:
         2c:e9:e1:f6:13:f3:e5:be:eb:36:7a:8f:c3:d6:1e:d3:1e:9f:
         a4:96:eb:ca:b8:2c:87:d9:07:0d:8f:2e:62:24:96:21:a2:0c:
         18:1f:a7:76:30:47:3a:81:a3:cf:e2:36:64:f3:29:c3:3c:6f:
         28:99:68:e4:69:78:93:e2:b4:e6:7b:e8:3d:d5:80:be:6e:cd:
         a3:8b:79:a8:6c:82:ea:11:e0:ae:a1:ec:43:7c:ad:49:44:59:
         b8:7c:12:2b:6b:38:c9:01:0e:10:45:c1:43:b8:c0:7d:aa:cd:
         00:20:26:70:35:0e:7c:9f:d8:3e:b0:46:a8:22:5e:26:9c:e4:
         a5:43:8b:87:3d:4e:18:b7:29:23:29:d1:84:9f:80:b3:7d:ee:
         82:08:ce:30:82:00:4a:0b:83:ac:3e:f5:47:75:71:9a:4e:64:
         b6:32:4f:67:5f:76:bc:ba:42:7e:c4:94:8a:1d:96:a5:27:7b:
         e4:09:14:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:27:36 2026 by rpki-client