Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/80d9d793-e3b6-333e-9df9-e0b8c159682c.roa
File:                     80d9d793-e3b6-333e-9df9-e0b8c159682c.roa (raw, json)
Hash identifier:          wI3AlDbed3c44KJvP3uZcGuZj3jeX9HVjI3Y4n/GbWA=
Subject key identifier:   E8:84:2E:8C:CB:D4:24:75:11:21:23:9A:B7:26:D2:FA:CE:B4:DF:B7
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584D4D5A75F595ED52B987CEBA80
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/80d9d793-e3b6-333e-9df9-e0b8c159682c.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     20253
IP address blocks:        2606:bc40:f0f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:75:f5:95:ed:52:b9:87:ce:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=a8209bd1-f2a7-497a-a58f-740cc892fce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:83:bf:40:1c:96:02:67:97:54:ac:e6:a3:74:
                    b1:c2:2a:8e:79:4c:6d:a1:0a:7b:b8:d9:5f:97:58:
                    b3:8a:e8:35:d1:85:67:78:a2:e8:1c:b6:6e:e1:48:
                    e7:89:b6:6c:db:cd:3b:25:6d:34:bc:ed:b0:95:ae:
                    29:f7:74:69:73:93:20:00:c3:69:85:72:77:a7:dc:
                    0e:42:f4:84:42:6c:2a:cc:e3:37:b3:ea:3f:a3:a1:
                    9e:38:fa:5c:c3:d8:8c:a9:44:18:e7:2f:65:57:39:
                    d2:21:8b:a3:ff:24:7e:83:f4:5e:00:33:aa:a7:6a:
                    1a:a6:2b:23:c7:7c:b2:4b:03:38:8d:6b:b0:8f:59:
                    ee:46:3a:45:34:f6:c9:74:d0:82:9d:fe:a0:77:b0:
                    3a:82:05:86:6c:ac:17:15:ca:fd:37:8d:e3:e2:4c:
                    69:af:be:dd:12:aa:c3:7e:4b:a2:04:9a:bd:1d:1d:
                    50:71:96:3c:50:7d:64:b9:4e:c8:8c:30:c8:35:ca:
                    5e:e1:3d:98:19:ac:7c:e1:a7:ed:25:68:40:67:ba:
                    ee:b8:6a:bc:00:87:e0:ea:7b:22:cc:59:8b:5e:ad:
                    64:3d:a5:8e:b6:b9:b0:0b:39:f3:ec:53:97:5e:cb:
                    8f:ab:dc:fe:9f:7b:45:e5:1b:39:99:e5:ec:53:51:
                    75:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:84:2E:8C:CB:D4:24:75:11:21:23:9A:B7:26:D2:FA:CE:B4:DF:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/80d9d793-e3b6-333e-9df9-e0b8c159682c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f0f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b9:f5:eb:86:f8:4b:81:33:84:c5:55:f5:bf:be:48:6e:30:
         90:16:eb:f5:ff:77:97:b1:3f:b9:c5:cf:b7:b6:e1:81:9d:a9:
         70:11:c2:a3:df:19:d7:42:7d:42:f1:45:60:3a:d1:c9:bc:64:
         00:3b:a3:82:c6:58:78:1d:35:a9:2c:78:64:b1:d4:79:a6:24:
         79:d0:2d:89:e7:e0:29:78:59:74:e7:90:2a:17:ab:bd:a1:61:
         00:c9:6d:b4:3d:10:e1:6b:07:88:55:f4:cb:4a:67:d0:5c:de:
         64:6e:b4:2b:d4:9c:f3:49:08:d7:6f:5a:c4:a9:fa:2f:e4:48:
         f4:26:83:1b:09:c9:13:ad:f1:ca:b1:2d:55:5a:0a:7d:a9:68:
         61:89:94:04:7f:54:27:a2:11:e7:bb:ec:ce:84:4f:59:45:ce:
         61:46:d8:e4:fa:38:d2:dd:cc:9e:d6:6e:9d:fa:c8:c7:83:0e:
         04:5b:d7:c5:ab:99:16:f0:a9:e8:33:32:08:63:66:1f:71:1f:
         40:00:9d:87:36:10:0a:68:fe:79:3d:4d:1a:69:0e:4b:1b:34:
         94:be:3f:c2:59:27:62:ed:d7:4a:84:ee:d2:21:26:36:b2:7b:
         cb:5a:92:c5:49:f2:1d:41:00:f8:93:91:e5:ec:8a:3c:5b:c4:
         d8:7d:ac:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:19:44 2026 by rpki-client