Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0817d47b-1b74-3eb9-8fe1-20dcb173d5b8.roa
File:                     0817d47b-1b74-3eb9-8fe1-20dcb173d5b8.roa (raw, json)
Hash identifier:          2a3Igya3NtIhbr75WWMTji79TfhJYkS+uklr8zRcGUM=
Subject key identifier:   3B:55:97:56:19:6E:4B:C5:0E:DF:F5:4C:49:DC:57:86:BB:A4:A2:39
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584EA0154FC56F04086083680000
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0817d47b-1b74-3eb9-8fe1-20dcb173d5b8.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     20253
IP address blocks:        2606:bc40:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:4f:c5:6f:04:08:60:83:68:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=f3831244-fb62-47ff-bf39-2ec179efd1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:14:0e:2d:6f:66:6a:80:a7:2c:1b:41:40:
                    2b:31:0c:cd:89:98:75:3f:aa:8d:09:fe:0c:d7:98:
                    d8:80:95:d6:77:fb:fb:ae:b1:d1:7e:56:19:6f:90:
                    7e:0d:2a:fc:37:ab:83:76:c4:8a:cc:59:cd:d7:bb:
                    92:eb:69:4b:dc:7a:9a:ca:6c:55:62:5a:fc:3e:62:
                    41:ac:2e:3b:2a:c9:15:31:78:01:c1:be:38:1b:67:
                    5c:63:51:8f:05:f5:21:7b:05:37:34:f5:31:59:48:
                    e8:cc:7e:30:73:39:bb:aa:eb:1c:e1:88:bd:35:3d:
                    60:1a:37:94:f6:52:c6:76:ab:54:5c:da:02:f3:70:
                    0a:96:d7:60:8b:c4:a3:ef:0e:3c:21:07:8e:0e:10:
                    8f:8e:0e:f8:ee:e3:fa:fb:23:04:8a:d1:dc:f9:a0:
                    f7:94:28:d6:2c:ba:ab:9b:7b:22:8c:31:ed:78:77:
                    03:5c:dd:7b:5e:90:18:10:98:09:6f:c3:49:dd:59:
                    ec:9f:4b:a3:76:a0:7e:38:57:bf:4b:87:96:39:74:
                    ca:05:c2:13:f7:c2:96:5e:db:18:2e:16:a4:3f:e5:
                    e1:c4:05:f8:5d:54:46:68:3f:dd:2c:0a:98:f7:d4:
                    ee:a8:a2:b9:d3:66:f3:04:b7:a8:19:29:75:53:a4:
                    72:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:55:97:56:19:6E:4B:C5:0E:DF:F5:4C:49:DC:57:86:BB:A4:A2:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0817d47b-1b74-3eb9-8fe1-20dcb173d5b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:37:a7:b0:b6:1e:07:3d:86:f3:a7:21:97:b8:64:ff:c6:8b:
         47:b1:6c:2e:c5:c3:64:d9:14:18:68:44:bf:92:7c:af:fe:93:
         80:ef:6c:07:69:ae:dc:2b:00:2e:0a:06:07:af:8a:21:88:06:
         44:f8:3e:5d:cf:76:70:06:6e:88:69:8a:be:3f:70:95:96:90:
         65:bb:e2:fa:02:b9:09:ba:03:8e:e5:c6:e6:b2:ef:24:a3:1b:
         88:93:7b:ea:13:e7:72:3d:2b:d0:dd:12:66:14:e3:4d:dd:db:
         87:35:dc:3d:40:45:d4:71:aa:81:cd:2f:c0:f3:28:29:ff:96:
         d6:58:51:3c:5a:e2:d9:bf:9b:96:86:44:04:1d:c9:5a:59:09:
         bf:44:ed:8f:67:2e:22:91:84:40:20:a8:21:01:ed:67:17:e1:
         81:29:51:75:98:5d:37:4d:ea:86:3d:c2:e6:89:be:43:5d:e3:
         99:68:98:c4:55:94:e5:68:9b:fe:a4:fa:1d:f9:84:cf:cd:f8:
         5d:b3:28:3a:f5:03:86:7b:0e:ba:a3:2b:45:2c:d3:3e:46:24:
         99:0b:80:d7:21:98:16:eb:04:95:d4:a5:8b:a6:73:fa:3a:90:
         d9:42:e2:c6:45:dc:48:74:83:1c:de:46:37:25:20:19:73:bf:
         da:a0:61:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:49 2026 by rpki-client