Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5ed75551-e8c8-3819-a4bd-817e73ac9d64.roa
File:                     5ed75551-e8c8-3819-a4bd-817e73ac9d64.roa (raw, json)
Hash identifier:          MKSoA5jzXKOpsfSeowm8AcLoCKA1NlQIpncIe/oh3qc=
Subject key identifier:   51:E2:FF:8A:5D:49:0C:32:17:A4:CD:AE:08:27:F8:52:11:81:E2:D0
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584E4AEF4BD45BE7C0563F976740
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5ed75551-e8c8-3819-a4bd-817e73ac9d64.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     20253
IP address blocks:        2606:bc40:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:4b:d4:5b:e7:c0:56:3f:97:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=dce63863-65bf-4fec-80c9-5fd5fc2e0936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:57:51:d3:56:28:78:92:68:e6:d7:84:37:
                    0e:b5:83:41:cc:8b:64:4f:8a:b4:a0:64:3f:31:ea:
                    7d:03:ad:31:03:ec:86:1c:06:1d:df:5a:d0:43:61:
                    39:0c:b4:eb:4e:e6:9a:2f:19:d1:23:68:fc:59:78:
                    98:45:5f:67:b7:7a:f1:f8:2f:ab:01:b2:6f:bc:66:
                    6b:11:26:d7:5a:d2:e3:d5:b3:8d:c6:e2:6d:a2:5a:
                    65:c6:9a:e4:ca:24:a7:13:1a:02:b7:ba:63:d4:58:
                    81:14:55:19:64:bd:1d:23:47:0c:65:d6:a1:e1:14:
                    2f:f4:96:a0:ad:da:2e:43:92:c1:ff:0c:b0:d5:e9:
                    8f:b3:8d:5b:57:de:df:3f:70:f5:8b:37:cc:68:68:
                    3f:ef:b4:7b:11:9f:1e:96:89:03:0e:9f:ef:a6:2e:
                    9f:85:43:6e:48:29:d4:75:06:fb:4a:7a:ba:14:c7:
                    b9:aa:af:08:21:7b:36:f9:f2:49:72:b2:db:20:15:
                    97:d2:a4:35:4a:6a:30:97:39:6f:5d:5e:b8:7c:f7:
                    c2:62:4c:e2:f0:56:a4:e6:0f:ec:79:4e:86:26:ce:
                    36:78:4d:18:2a:0f:b7:1e:92:8f:cf:11:41:54:42:
                    97:e8:4f:7e:bc:67:60:86:e8:99:f5:07:a6:43:6b:
                    54:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E2:FF:8A:5D:49:0C:32:17:A4:CD:AE:08:27:F8:52:11:81:E2:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5ed75551-e8c8-3819-a4bd-817e73ac9d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:97:7d:7f:1a:eb:45:50:0e:c5:f1:3e:28:92:e2:54:e0:d6:
         29:f4:fc:d7:df:4e:31:c0:84:56:2c:c2:db:ee:d7:07:43:99:
         dd:c9:16:1f:8b:5c:fb:63:08:c5:a9:b5:68:6a:e3:ff:a9:45:
         5c:fe:aa:15:85:67:e7:7a:1f:f2:6c:da:78:22:e2:bf:4f:cb:
         3b:15:b5:1a:a9:f9:1d:a8:65:11:69:52:e9:c4:ac:8c:26:5f:
         03:9d:e2:7f:f1:15:22:81:96:82:cc:82:1c:fc:0b:42:0d:31:
         49:c9:4f:f0:fc:a5:13:bc:ee:a5:4b:ad:a5:bf:5b:57:33:7e:
         7d:32:95:3e:13:0e:c5:8d:d4:17:f6:31:0a:39:d9:e0:26:87:
         96:94:b6:e3:43:12:34:bf:2d:eb:28:84:bf:f8:73:b3:eb:db:
         6a:5b:72:43:a9:af:56:82:34:f2:e2:ba:3b:12:d1:b7:5d:45:
         47:b1:73:9c:0d:df:b9:22:10:a8:cc:b6:98:dd:6e:b1:52:8e:
         27:70:2f:73:0c:d2:27:ed:07:b3:78:2f:00:28:19:b4:0b:ea:
         ba:43:56:e8:e0:56:7c:3a:5f:88:52:42:d6:0c:7b:df:8c:f5:
         37:f8:b2:f8:10:0a:b8:3c:4a:43:bd:66:cf:2e:06:bc:13:fe:
         7f:cb:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:18 2026 by rpki-client