Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/212b7173-baeb-33dd-9326-2a6b0e137290.roa
File:                     212b7173-baeb-33dd-9326-2a6b0e137290.roa (raw, json)
Hash identifier:          IgxbFN56JL0dG71+9aK1WV6anN2xk+2z984OhVWJVpM=
Subject key identifier:   43:DE:FC:E4:8B:72:F6:76:62:9B:5A:28:E0:E4:59:E8:0A:EA:CB:11
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584F49768583B2693F0C976BA5A8
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/212b7173-baeb-33dd-9326-2a6b0e137290.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20253
IP address blocks:        2606:bc40:f201::/48 maxlen: 48
                          2606:bc40:f202::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:85:83:b2:69:3f:0c:97:6b:a5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=203f740e-52f2-4c21-a1cf-e2b530fbf9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4d:ec:98:3b:0a:05:8c:20:57:ff:8e:3b:b1:
                    3d:89:a2:b5:94:dd:d6:6a:97:4f:d9:09:3f:27:4b:
                    14:55:dd:17:f4:55:e9:bb:1d:00:94:e9:b1:99:78:
                    b5:57:a2:6b:f7:a6:59:ed:e0:a7:b8:48:1e:56:76:
                    84:e4:6d:84:5b:48:a8:f0:8c:e7:7e:e5:58:59:ff:
                    ce:ee:34:3c:09:b3:78:e2:1f:6d:67:8c:a8:56:0a:
                    60:52:ce:49:90:ea:a5:5b:eb:a8:b5:93:9d:f7:93:
                    d9:88:71:bc:31:0e:54:c4:00:e1:37:c3:a4:c5:92:
                    bc:39:0e:7b:a5:5b:cb:d5:4b:f4:f6:e9:20:ad:ea:
                    c0:19:c4:0a:f0:ea:97:4f:6d:3e:72:0c:cb:75:f0:
                    9f:f0:53:ae:a6:75:5a:cd:ec:93:4b:27:cd:a1:1e:
                    70:1c:40:dd:1b:95:3e:54:9a:7c:37:8f:2d:b1:17:
                    93:19:da:a8:9b:c4:4e:1b:40:12:5e:07:5c:70:c3:
                    ad:0e:53:c5:63:e0:8e:9f:51:4e:87:25:65:fb:d7:
                    af:9b:1d:8d:fa:f8:f1:6c:1d:3a:70:6d:67:46:8d:
                    b1:98:31:1b:79:f8:5b:a7:07:6f:14:60:c7:ef:a0:
                    d3:78:36:e8:34:75:87:9f:47:de:7c:0d:d0:f9:4a:
                    d3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DE:FC:E4:8B:72:F6:76:62:9B:5A:28:E0:E4:59:E8:0A:EA:CB:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/212b7173-baeb-33dd-9326-2a6b0e137290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f201::-2606:bc40:f202:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:83:49:c2:4f:00:6a:d2:c4:89:15:bb:3f:a4:3f:0b:9e:c2:
         4a:65:ae:c6:2a:3b:9d:ac:76:8a:89:ac:f1:ea:63:83:4a:3c:
         f7:46:fb:5b:9d:ce:58:33:ee:88:76:cc:8c:20:7f:6e:8e:21:
         64:7f:68:90:ae:8e:54:80:28:0f:9c:ba:17:c9:0c:54:42:2a:
         c7:47:5f:23:b1:0e:d4:8f:f8:b5:3a:6d:08:6d:d9:64:a5:e1:
         23:ed:99:5e:ce:ab:bd:87:31:7a:05:45:42:08:79:8f:5c:01:
         f1:81:a1:62:29:0e:41:d7:11:23:1b:2d:3b:54:0a:76:46:77:
         9d:38:b2:cb:f8:cd:7e:ea:c8:e0:7d:f8:ef:59:4d:89:6e:b4:
         58:d8:08:3d:2b:f0:e2:e9:18:d0:c4:55:2a:51:30:dd:65:10:
         a7:58:f6:00:94:17:38:1a:9d:99:bf:d9:8b:71:5a:26:b1:14:
         09:71:68:0c:aa:6e:21:3a:9a:a4:6d:fc:32:3e:c5:1d:80:6b:
         dd:a2:db:aa:95:ec:f2:22:b8:e6:92:1e:bb:4a:8c:03:c1:ec:
         f3:b4:f4:82:d6:3f:9f:96:af:39:93:72:95:19:3a:b4:c9:ac:
         8e:10:4b:5b:e7:a1:3e:01:fa:4c:00:4c:f2:e0:9d:9b:67:77:
         51:37:7e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:09:08 2026 by rpki-client