Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/1c96ae33-629d-30ba-b7b3-2b17a0a7f485.roa
File:                     1c96ae33-629d-30ba-b7b3-2b17a0a7f485.roa (raw, json)
Hash identifier:          Bxy0H5PWOiN2CCUoOCQSaxp/+eW0YJS77di5ElvKZqg=
Subject key identifier:   88:A8:D4:E9:82:CA:7B:7A:D1:8C:E0:F1:13:AD:C0:C9:D4:B9:65:28
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584E561A04A533C471EB3F0A0E00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/1c96ae33-629d-30ba-b7b3-2b17a0a7f485.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     20253
IP address blocks:        2606:bc40:1e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:04:a5:33:c4:71:eb:3f:0a:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=2fff62ec-a236-433d-9072-c387b3736d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:07:28:2a:f8:93:d9:f4:ea:de:74:af:92:e7:
                    3d:18:2a:8d:1f:ca:ee:66:e0:1c:85:ec:26:ca:3e:
                    c7:73:0d:97:ef:68:39:06:57:01:94:9a:db:f0:9a:
                    f8:bb:3f:bb:9b:39:94:75:25:fd:3a:ee:ab:8c:34:
                    e9:80:b6:9d:eb:41:37:d5:52:4f:9d:02:61:06:0e:
                    bc:65:8c:a9:57:3a:ef:43:6a:40:78:a1:c4:97:32:
                    c6:24:d3:f9:fe:be:ae:8d:90:e0:81:f7:fc:63:f0:
                    4e:91:02:76:fb:7c:1d:74:cd:66:ec:dd:56:57:69:
                    0e:77:b4:15:28:5a:c6:77:a1:44:3a:db:88:6c:07:
                    8d:61:d1:4a:02:df:ea:dc:d1:5c:bb:e0:6d:2c:a1:
                    91:a1:40:f3:f7:54:17:d7:4e:b1:f0:d0:43:b2:a2:
                    33:63:32:e5:29:b0:a0:37:b4:78:8d:e4:ea:ff:82:
                    20:91:d6:0f:97:3e:22:4a:4c:97:57:e0:e9:d7:cf:
                    5b:7e:36:18:e9:66:c0:00:66:6d:74:7f:97:80:75:
                    49:2f:b0:2b:0d:e6:a4:9b:e6:5d:58:d0:4d:c6:0d:
                    1a:73:1e:9b:9b:a5:68:10:d7:73:d7:50:91:e1:ec:
                    5b:38:65:2b:d6:93:5a:14:fd:38:53:4d:de:bf:10:
                    67:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A8:D4:E9:82:CA:7B:7A:D1:8C:E0:F1:13:AD:C0:C9:D4:B9:65:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/1c96ae33-629d-30ba-b7b3-2b17a0a7f485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:1e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:52:3a:88:98:4e:92:57:7a:b7:cb:3e:c7:4e:02:a6:0a:44:
         d9:7e:f2:22:27:88:f4:dc:43:38:3e:b7:7e:79:e1:62:93:10:
         f2:e1:be:0c:c8:3f:86:05:0c:e3:36:ca:be:2a:71:0d:2e:7a:
         71:b1:ac:4b:db:3b:91:21:1a:bc:d4:24:e1:03:fc:b4:01:9f:
         8c:21:44:1a:a0:3d:c8:18:da:0e:70:46:6e:57:a8:47:29:f0:
         93:c1:b1:86:75:c7:5d:f4:81:a8:e1:5f:09:e7:43:73:d5:1a:
         2f:f8:8f:cd:d6:fc:8d:0b:25:c4:b7:41:b3:71:f5:84:f4:88:
         96:c8:37:58:fa:b8:8f:ee:fe:ee:2c:a0:73:27:30:30:24:d6:
         87:4f:39:db:38:98:6e:a4:1a:34:d8:4c:d0:80:bb:0c:db:c8:
         ed:7d:0e:0e:7d:c4:ad:5c:20:7b:61:ae:51:e7:c2:5e:de:52:
         98:ab:37:40:8e:a0:b2:e2:8a:53:84:10:03:cb:c1:6b:47:ac:
         86:e8:4a:f5:0a:8c:76:a5:3e:54:66:55:04:cc:df:fa:23:8a:
         04:b2:e1:8d:a8:8a:43:97:7d:74:29:85:2e:6a:8a:4e:a3:e4:
         de:fa:41:aa:53:a9:40:7a:30:03:df:64:9d:84:2f:55:74:f2:
         0a:e4:34:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:20 2026 by rpki-client