Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/3faa343e-a472-3f39-808e-bb7ed55b1bb7.roa
File:                     3faa343e-a472-3f39-808e-bb7ed55b1bb7.roa (raw, json)
Hash identifier:          1GB+PqsdE6a78JRANKWbJ981VNDu/7hKIWol48hqEvI=
Subject key identifier:   9C:C0:58:BC:31:FD:10:C8:27:AD:32:76:0E:63:2C:C2:66:2D:B6:64
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584F42781D74303938E085EC2B00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/3faa343e-a472-3f39-808e-bb7ed55b1bb7.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     20253
IP address blocks:        2606:bc40:f002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:1d:74:30:39:38:e0:85:ec:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=7b7ee6d0-e08a-415b-a555-fd03b77d60a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:08:10:c9:fb:f9:29:de:a6:a2:36:b9:c9:
                    34:8d:bb:2d:e0:d1:29:62:52:b4:4d:b7:73:b1:e4:
                    55:0f:ee:8b:d5:24:e8:bf:b7:8e:d9:49:08:69:5f:
                    4a:ee:23:5a:75:87:f4:bf:a1:53:db:9b:4d:0f:e6:
                    ab:53:36:dd:43:5d:b3:47:3e:af:66:6b:d8:12:79:
                    29:39:3e:7f:fd:6e:f1:79:44:69:80:8d:90:35:ef:
                    93:f7:64:23:e3:8c:ee:56:d4:4a:f4:f3:14:00:85:
                    fa:36:19:de:12:09:9d:33:54:67:7f:66:ab:70:2c:
                    3f:65:8f:bf:a7:a2:cd:e8:c7:8d:9c:7f:fe:6f:58:
                    a7:a0:4e:46:0a:cc:60:4c:49:6c:68:e2:6f:e1:e4:
                    f3:7e:1b:a8:23:93:61:46:74:c0:74:6f:2c:86:9b:
                    7a:f0:d1:bd:90:1a:5f:4d:a9:81:3a:af:48:a4:34:
                    21:1e:29:b9:3e:e8:4c:13:9d:65:46:2d:05:13:5c:
                    ae:01:97:31:0b:68:b6:fa:b6:cc:d4:21:22:44:a3:
                    bf:62:7b:ea:54:fe:49:eb:a6:ee:97:a3:7d:3f:04:
                    ab:14:0a:5a:f5:25:77:c4:6a:8d:ea:57:9b:b3:7c:
                    cd:f9:2a:61:e8:e9:bb:14:c7:ac:a9:95:aa:ab:bc:
                    b6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C0:58:BC:31:FD:10:C8:27:AD:32:76:0E:63:2C:C2:66:2D:B6:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/3faa343e-a472-3f39-808e-bb7ed55b1bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:16:26:0e:96:56:f5:21:44:f1:1f:f2:11:93:50:5c:fa:b3:
         1e:a2:b0:67:25:9c:30:b0:5e:8f:1c:fd:8b:1e:20:8d:9b:6c:
         e3:cc:b9:01:45:63:72:a6:85:32:ef:da:46:2c:09:ab:70:29:
         dd:c3:6a:72:fd:7c:89:48:c2:9e:c5:de:9f:5c:56:40:c3:a7:
         b8:79:6f:0e:8d:68:d9:20:9b:a0:0d:1a:25:0b:da:a3:52:72:
         dc:eb:ed:99:af:f7:2d:1c:43:05:a8:9f:63:d5:23:52:05:87:
         bd:3e:a3:d6:93:ba:42:d2:24:47:30:43:8f:71:ba:b0:37:ee:
         b7:9b:30:8e:8e:d0:27:37:f8:97:02:0a:30:95:df:0f:3e:74:
         99:55:01:c5:14:bb:f9:2b:6b:4d:86:52:53:14:f0:97:95:22:
         6d:92:9e:b9:44:b0:a2:67:49:01:a5:80:e1:ea:4d:89:20:14:
         0f:a6:2c:c6:cf:f7:4c:ab:62:c5:25:61:ef:c0:c3:a9:6c:d6:
         19:f8:c4:c8:3f:70:f8:b4:9d:87:61:88:d7:8a:46:ec:d0:9a:
         eb:16:b7:bb:4e:0a:76:fb:d5:e6:6c:ef:63:f5:74:9c:2c:04:
         5a:85:8b:53:8a:31:be:85:8d:66:1e:3a:c8:7a:5e:26:79:78:
         ff:e8:ec:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:43:50 2026 by rpki-client