Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/22d49540-82c0-3ced-9af3-076c24330d21.roa
File:                     22d49540-82c0-3ced-9af3-076c24330d21.roa (raw, json)
Hash identifier:          kd+aynOOZ7zkDmaZBLml90lNg4+CzBe4xCtPprLMehQ=
Subject key identifier:   95:70:4A:20:72:E4:CF:22:86:53:F3:40:D4:D6:1D:D6:94:48:2F:92
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584E4F1F3981A4AEAD0C4A866D00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/22d49540-82c0-3ced-9af3-076c24330d21.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     20253
IP address blocks:        2606:bc40:f24::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:39:81:a4:ae:ad:0c:4a:86:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=3e72e90c-8bec-4545-a134-7f6f6c75a2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b4:c6:7f:19:b8:24:97:c6:b0:a2:51:ff:d6:
                    61:3d:eb:cb:ec:c0:64:26:09:f7:87:3e:3d:b4:0c:
                    8b:db:be:54:f6:18:a2:de:89:fe:0d:98:11:8e:7e:
                    0e:7d:fa:a4:ef:74:1a:c4:21:83:c7:f8:22:b1:3a:
                    c5:15:82:86:e0:44:46:c2:8f:d3:55:e0:f7:8b:b6:
                    6f:31:6b:b1:61:52:cb:63:2a:89:ae:3a:6f:4d:18:
                    32:ef:a8:13:36:4c:f6:bd:61:70:2c:60:73:03:7b:
                    a0:7a:94:82:a3:81:61:49:14:30:ec:f1:38:65:53:
                    ba:65:64:0e:5b:85:89:7f:50:48:1a:ae:06:61:6a:
                    a4:8b:d2:eb:09:60:53:04:af:d6:d6:79:cb:e4:f8:
                    fc:f3:72:73:09:25:a3:e7:0c:a9:1a:0a:b7:2e:5b:
                    b9:0e:ad:f2:58:b3:41:e8:04:bb:d2:9e:5f:2c:8a:
                    70:20:4b:9d:2e:63:b9:4e:20:17:3e:0c:2a:0c:4f:
                    3f:2b:51:f9:5a:81:45:89:03:32:04:76:14:1b:31:
                    0d:d1:2c:de:3d:6c:0d:a2:49:f8:d0:5a:5a:68:46:
                    5e:13:59:0a:8b:3b:5f:9b:d0:4c:77:0f:df:23:e8:
                    a0:2f:41:db:36:da:75:20:6c:df:81:b3:9b:a5:7b:
                    29:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:70:4A:20:72:E4:CF:22:86:53:F3:40:D4:D6:1D:D6:94:48:2F:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/22d49540-82c0-3ced-9af3-076c24330d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f24::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:57:f6:ff:17:48:cf:1c:e2:d4:a5:4a:64:0d:9c:46:bf:6d:
         db:5b:34:79:15:08:9d:5f:a5:60:97:24:07:22:8d:ee:a3:b8:
         cc:37:96:50:05:9d:3d:06:9d:16:88:7b:0a:6a:c7:24:ee:9a:
         02:d9:5e:3c:ac:70:a3:b7:75:06:93:9e:9b:52:67:1a:74:da:
         1f:6e:92:f2:3b:21:43:16:60:e1:70:f1:67:4a:24:2b:72:17:
         c7:7f:3f:21:ed:93:02:d1:a0:fd:6b:06:22:d0:06:0d:d5:37:
         68:7c:db:5a:03:45:3a:47:a5:5a:ed:a0:8c:88:c9:78:b9:f7:
         1d:c2:2d:69:de:9e:02:10:c6:67:63:30:86:6c:3c:2b:4a:37:
         48:41:65:47:fc:f2:90:c3:54:b2:7c:9c:21:89:92:8f:e1:fb:
         99:f6:c3:51:7c:6a:aa:a9:9b:5f:1d:6e:67:89:55:88:af:13:
         56:8b:04:78:26:28:3b:68:ea:ac:d0:5c:79:98:24:ea:62:4b:
         0d:d7:b5:cc:e1:0d:94:83:37:20:bf:0f:eb:3c:0a:a3:c0:a4:
         c0:88:ee:f1:b7:56:0a:a1:ee:51:6c:34:d1:1e:6b:bb:56:c9:
         43:5f:47:28:a5:9c:05:84:c4:f3:a6:41:58:d1:8d:6b:2a:2f:
         aa:69:51:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:23:26 2026 by rpki-client