Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0aefd27d-01a6-3cc6-acdb-87787f51d6fd.roa
File:                     0aefd27d-01a6-3cc6-acdb-87787f51d6fd.roa (raw, json)
Hash identifier:          5ztByMxDkooeg5ANrCThZAtE6Unr+b9Xiv+qaweRwao=
Subject key identifier:   EF:01:A0:55:53:9F:34:CD:A0:4C:C7:6A:CB:6F:51:1F:7E:99:0E:2B
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584F2ABD19EBA5189D84DDB41700
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0aefd27d-01a6-3cc6-acdb-87787f51d6fd.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     20253
IP address blocks:        2606:bc40:f09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:19:eb:a5:18:9d:84:dd:b4:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=0806c7f9-b7a8-47b7-a8f4-8e06894c3cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:c4:d2:51:66:72:99:72:45:89:6b:09:f4:
                    d1:d6:e5:26:bf:4f:4f:20:05:43:92:eb:4b:1f:a2:
                    a2:21:41:c5:f6:14:2e:a0:46:54:84:a7:08:71:42:
                    05:c1:7f:0e:07:c7:28:b0:28:a7:24:df:a9:ec:9a:
                    30:95:07:4c:f4:ee:f6:ab:c7:a6:dd:54:eb:a2:01:
                    94:57:cc:cf:9b:4b:8c:c1:6e:67:ed:79:68:b6:8a:
                    29:fe:e5:43:3d:b6:5c:10:df:f8:55:31:ac:4f:0f:
                    9d:ca:8c:74:97:d9:b1:eb:1b:87:45:27:09:43:d4:
                    b0:df:a5:5f:cf:4a:20:3f:64:5d:77:d3:cc:e6:89:
                    15:df:58:65:14:48:ee:6e:d5:39:92:09:65:56:50:
                    3b:3a:76:e7:c2:72:46:c0:36:58:8d:f4:e9:2e:f4:
                    26:10:74:d3:75:05:9e:65:21:4e:88:38:1a:ae:ae:
                    8f:10:bd:86:43:18:86:b1:70:55:1c:7f:59:78:38:
                    44:d8:35:c9:91:6b:31:58:6f:c1:b5:b5:fc:6a:35:
                    84:38:5a:e4:30:01:d0:aa:d5:9c:0a:55:1a:f6:25:
                    2b:e6:62:44:33:2e:73:55:60:f9:32:f6:93:77:f1:
                    be:67:83:34:d7:f6:53:6e:3e:97:c4:de:8d:19:62:
                    00:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:01:A0:55:53:9F:34:CD:A0:4C:C7:6A:CB:6F:51:1F:7E:99:0E:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/0aefd27d-01a6-3cc6-acdb-87787f51d6fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b2:b0:cf:29:d7:4b:c2:8c:81:5a:09:97:78:02:ca:cf:1a:
         cf:12:2a:e1:c4:c1:aa:c0:63:31:3a:3d:55:16:c6:9c:3f:90:
         5c:8a:48:3e:f4:6a:04:39:c4:c7:ef:9d:5b:34:7e:78:02:d2:
         16:78:92:15:bd:29:db:65:f5:2c:29:ad:dc:6f:55:6b:23:94:
         9b:22:59:20:0a:6e:b3:c9:12:86:34:5b:b2:30:bc:04:f7:12:
         60:57:09:cb:77:07:bd:20:84:77:c9:14:24:5d:ae:7e:1d:a4:
         1f:71:c9:f4:a6:ef:77:a5:51:5c:1a:f1:6a:1f:54:16:2b:8f:
         28:6a:b7:69:e2:85:b3:17:b0:4b:70:81:84:de:52:45:ed:73:
         bd:58:b2:25:51:cd:12:ae:61:27:48:ab:1a:7c:b7:47:29:61:
         01:f8:17:0a:2b:b5:67:14:82:c3:bb:59:cd:1e:fa:a7:7f:f4:
         1b:8a:3d:62:e4:76:ad:18:61:08:9b:04:45:d1:2a:05:0d:f2:
         ec:4d:b1:65:25:ab:be:00:40:51:ba:3e:19:69:aa:a4:fb:c9:
         d2:8b:c6:79:96:70:ac:0a:04:bc:d7:4c:9b:9a:c6:c2:3d:8f:
         c8:2e:8b:cf:49:e1:97:29:42:e6:dc:cd:6a:91:4c:21:46:8f:
         4a:e6:9e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:49:23 2026 by rpki-client