Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/cb16cb14-014b-3f5d-b3e7-7671f3b2bcd1.roa
File:                     cb16cb14-014b-3f5d-b3e7-7671f3b2bcd1.roa (raw, json)
Hash identifier:          sU0e84hqTrJ8i+U0h6oTXmcU7EnFH6/Wnb54Qe0qM+c=
Subject key identifier:   6B:9C:2A:D0:F2:CF:A4:71:96:88:2E:6B:F6:F0:B3:A3:07:15:CE:35
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584DA5A20C95537338521BC7B154
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/cb16cb14-014b-3f5d-b3e7-7671f3b2bcd1.roa
Signing time:             Mon 27 Apr 2026 15:56:28 +0000
ROA not before:           Mon 27 Apr 2026 15:56:28 +0000
ROA not after:            Sun 26 Jul 2026 15:56:28 +0000
asID:                     13213
IP address blocks:        2604:c980:5400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a5:a2:0c:95:53:73:38:52:1b:c7:b1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Apr 27 15:56:28 2026 GMT
            Not After : Jul 26 15:56:28 2026 GMT
        Subject: CN=f90592e8-fc97-4d94-9215-63fe29b6abee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:4f:53:37:76:85:29:7a:58:d0:0a:9b:f5:
                    00:56:85:b8:07:85:71:ab:39:5c:dd:c0:0d:99:d3:
                    08:63:a7:d9:bd:e8:b8:a3:1c:a6:25:b3:90:6a:87:
                    c7:e5:88:b9:dd:57:b4:9b:2f:14:97:26:b6:d3:68:
                    14:ce:ae:55:88:54:d5:05:e8:11:e2:b4:95:d4:57:
                    6f:f8:24:8a:9f:6b:40:c1:84:b9:c9:49:0c:41:be:
                    13:7d:c4:0b:5c:0d:fd:db:5c:98:6c:5f:fc:ec:3d:
                    94:c2:02:fb:30:0c:f4:58:0e:1e:46:4e:59:63:ff:
                    6a:ca:92:a8:d6:6b:0c:17:c0:c3:03:4e:5f:3f:d0:
                    cb:cb:82:ac:02:64:a2:1b:82:5b:38:10:9c:0f:35:
                    a1:b3:dc:5a:c6:74:ee:04:f4:2f:72:e3:11:fc:e0:
                    3c:28:f4:ed:c1:0b:4b:a6:6f:26:9a:69:7a:ae:a5:
                    18:d4:07:e6:1a:99:a3:50:ec:1b:5d:9b:29:77:cf:
                    a9:99:46:a5:5d:e9:26:40:c6:43:69:83:a3:e2:fd:
                    6d:e1:ff:5c:e0:87:0a:3d:90:d7:a1:c3:fe:9c:94:
                    26:5f:66:2d:c2:df:95:87:49:e7:29:ba:c9:43:fa:
                    84:e9:f7:e7:dc:ae:a6:63:11:11:90:43:95:d7:83:
                    0e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9C:2A:D0:F2:CF:A4:71:96:88:2E:6B:F6:F0:B3:A3:07:15:CE:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/cb16cb14-014b-3f5d-b3e7-7671f3b2bcd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:5400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:88:96:bf:b5:c3:6c:64:42:6c:08:3e:cb:47:f7:7a:8a:8b:
         2f:c1:f8:75:c0:6e:ee:af:13:df:a2:a1:34:73:d9:fb:58:c4:
         4c:4c:da:3f:48:4d:87:0c:d3:d3:38:ab:4a:14:3c:6a:eb:40:
         ad:fe:5f:9f:5e:40:d7:a3:25:2b:c7:09:ba:52:d1:72:e4:10:
         9d:91:3f:61:04:4c:21:66:56:e4:63:ef:31:5e:3a:b2:b9:9a:
         bb:24:33:d7:3d:52:be:73:e2:a1:20:0d:d1:71:8b:c4:d7:fe:
         8a:25:36:02:b2:e4:45:b4:e3:7e:c1:fb:0d:9e:95:0f:66:e7:
         5d:c1:b9:e3:eb:e9:70:d8:cc:37:36:63:cc:d3:dd:8b:07:02:
         ee:87:ef:4f:58:84:23:d2:99:2b:8d:2b:18:9e:d6:d9:5c:34:
         1a:f3:8b:e9:f9:07:34:fd:aa:89:59:fa:2e:d1:ca:ff:00:3b:
         67:7b:35:14:a0:71:63:4c:23:3c:c5:97:69:aa:e5:c2:87:1d:
         48:cc:ec:4a:ba:3c:fa:19:31:9e:17:0f:dd:69:eb:6e:63:cf:
         b6:29:d9:08:2e:7a:04:28:af:44:93:be:8d:e0:59:e1:3d:a9:
         89:f7:cc:92:83:85:03:3e:d6:e0:a7:b1:c9:0d:d5:ab:b1:f5:
         6e:27:bd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:08:28 2026 by rpki-client