Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c0be9fe9-34d0-3224-9175-766e7ab4174b.roa
File:                     c0be9fe9-34d0-3224-9175-766e7ab4174b.roa (raw, json)
Hash identifier:          hK3rSepFOlfUrxSyj5fHLt7Qap+Qw/kHLISvf/muJlc=
Subject key identifier:   AD:19:19:11:F3:DA:EE:8C:15:17:B7:E8:A6:6B:0B:3E:8F:BD:79:03
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584E4F1F3AAF0EE2CE756DC92380
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c0be9fe9-34d0-3224-9175-766e7ab4174b.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     54203
IP address blocks:        2604:fc80:4400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:3a:af:0e:e2:ce:75:6d:c9:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=b3e48b36-5380-490f-ab48-68f38fb5c9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:79:da:de:b4:64:b6:f3:b9:b3:95:9b:84:6d:
                    fd:81:b8:2d:f5:e8:cd:af:47:73:88:ac:19:ab:be:
                    69:8a:7c:c7:f6:3c:37:11:db:b7:5b:b2:c0:cf:bb:
                    64:3a:f5:68:e5:fb:21:e2:53:3d:6d:7e:24:ce:16:
                    ea:56:6c:4d:7f:45:55:70:e3:96:8f:83:1e:03:8f:
                    10:95:7d:bd:8d:33:78:24:be:aa:ba:b0:ca:66:96:
                    35:66:5a:26:d9:fa:76:6e:3a:4c:67:d4:e4:19:b4:
                    ea:d5:48:79:e1:7b:3b:7c:50:b6:29:03:6f:67:ba:
                    5c:fd:06:a0:11:6e:99:0a:e3:93:91:96:28:78:2d:
                    8f:18:20:4b:e7:c9:bc:b7:6d:43:37:ef:08:45:f9:
                    c5:78:6b:30:f8:6d:e0:03:96:07:21:8d:99:30:7b:
                    4c:23:1e:3e:04:06:5c:91:e1:91:16:5d:53:38:cf:
                    84:19:13:55:f8:f3:8a:36:e1:d5:de:1c:77:7a:d2:
                    19:11:38:79:9b:f2:e0:62:99:92:1f:0c:95:19:af:
                    36:78:90:12:f6:2d:b1:36:88:c1:3a:b9:0f:48:cf:
                    65:54:e0:75:c6:3e:90:44:5f:19:3f:b7:d1:88:1c:
                    65:4c:8a:1f:e0:df:a0:86:be:3f:03:8b:eb:77:da:
                    45:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:19:19:11:F3:DA:EE:8C:15:17:B7:E8:A6:6B:0B:3E:8F:BD:79:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c0be9fe9-34d0-3224-9175-766e7ab4174b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fc80:4400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:59:7b:3f:b4:73:4c:85:4f:b6:dc:26:8b:16:d4:86:85:85:
         87:50:f7:72:96:51:4c:26:fb:1d:3a:9b:ca:41:49:1b:fc:72:
         e1:c6:7b:3c:0a:a5:3d:ef:e5:73:7d:58:0d:2d:42:c6:70:76:
         41:06:40:68:c3:9c:d8:68:2a:bb:d7:ec:8b:16:f6:81:4d:2d:
         a6:b8:b2:00:4c:08:3b:13:81:d7:c7:d7:59:ed:07:89:47:83:
         9d:02:b4:cc:fd:4a:6f:05:c9:2a:34:12:19:78:d4:98:d5:53:
         cb:61:e8:22:bd:e5:a3:0a:34:05:e3:89:a2:da:90:42:66:cf:
         eb:7b:c1:4a:ad:50:ca:b5:85:5b:ba:56:06:c2:77:68:d1:39:
         7e:07:8a:e0:92:0e:fb:25:04:2b:4d:fe:35:ee:be:6f:3a:ea:
         c1:d1:a0:6f:7b:80:76:12:16:8e:fc:48:04:7c:04:19:44:ef:
         38:95:f6:83:f9:a1:ff:ed:2e:9b:22:fa:01:f9:20:cc:0b:6c:
         2c:47:65:ef:af:76:00:9a:bd:08:d0:06:4d:bf:59:7e:36:8c:
         5b:78:d5:0f:a2:b3:17:71:35:32:5f:30:18:07:7e:e3:7a:3a:
         f3:19:51:ee:3a:de:06:75:13:24:64:de:c8:bc:bd:57:42:fc:
         ff:df:97:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:25:23 2026 by rpki-client