Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/1c96ae33-629d-30ba-b7b3-2b17a0a7f485.roa
File:                     1c96ae33-629d-30ba-b7b3-2b17a0a7f485.roa (raw, json)
Hash identifier:          hTiIcD6wDXyjyr3DtnjZxtoAdQtqIxVnzMHgRMIypeU=
Subject key identifier:   CE:6A:21:A9:4B:77:5E:46:3A:52:26:BF:5E:B7:96:F8:C1:1C:2A:2F
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584C9536FA44F389FDC8177DEA00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/1c96ae33-629d-30ba-b7b3-2b17a0a7f485.roa
Signing time:             Tue 20 Jan 2026 02:00:29 +0000
ROA not before:           Tue 20 Jan 2026 02:00:29 +0000
ROA not after:            Mon 20 Apr 2026 01:00:29 +0000
asID:                     20253
IP address blocks:        2606:bc40:1e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:95:36:fa:44:f3:89:fd:c8:17:7d:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jan 20 02:00:29 2026 GMT
            Not After : Apr 20 01:00:29 2026 GMT
        Subject: CN=d204e997-cf88-4d64-8a3a-45972c0021a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:fe:7a:56:cb:48:86:a2:65:e8:d4:39:06:
                    aa:98:ab:2c:47:2d:ec:60:c1:a1:43:80:98:fc:77:
                    9e:8d:65:74:11:36:2b:11:21:84:d4:19:01:c5:d2:
                    0b:2d:04:a7:d8:a9:4a:fa:62:ec:4d:0b:58:87:70:
                    d8:0d:2b:3d:87:45:29:a9:22:ff:58:97:29:2f:3e:
                    22:42:9d:f3:db:42:9c:4f:92:ac:10:41:04:56:4a:
                    9b:6c:9c:b7:9b:c5:d1:ba:e7:7b:40:21:f3:1e:b8:
                    d3:0d:20:97:72:ed:12:97:2a:c4:bc:55:9e:11:92:
                    62:36:56:6b:e9:a2:34:a1:66:f9:ab:8d:6f:6b:a4:
                    9d:fd:a2:12:3a:1b:00:63:e6:fb:f3:d7:eb:91:e7:
                    86:42:24:98:67:9e:7a:34:a7:de:54:21:f4:6b:38:
                    ae:eb:57:2b:8c:69:e4:92:3f:16:c9:48:ad:9f:bc:
                    4b:98:d3:84:53:cf:7e:cc:20:c6:19:94:09:f8:5e:
                    b8:3e:de:ef:60:34:d0:93:a5:a9:8f:a6:dd:35:25:
                    5b:e5:ed:e8:92:9b:55:11:87:2d:83:18:e3:ec:f6:
                    14:7a:c5:c6:dc:5c:9b:52:61:90:19:32:db:2e:b5:
                    fd:cb:4a:40:72:86:9e:fc:a9:6d:41:ab:67:36:39:
                    fe:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6A:21:A9:4B:77:5E:46:3A:52:26:BF:5E:B7:96:F8:C1:1C:2A:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/1c96ae33-629d-30ba-b7b3-2b17a0a7f485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:1e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e8:ee:78:94:48:68:bc:22:d0:72:67:c8:d7:fd:06:58:59:
         7f:45:7d:f2:44:93:99:ca:49:fd:ef:b8:25:9a:34:6b:2b:5b:
         98:dc:95:44:3a:5e:d5:21:08:b1:62:ac:6e:80:f8:50:f5:d8:
         b9:33:c2:8c:cc:35:46:3d:0a:69:ca:20:07:98:96:12:47:ac:
         f2:7e:23:26:f3:b1:7d:5e:b2:4c:7d:03:38:b0:6c:b8:70:b5:
         42:e3:38:88:8b:c4:b9:ba:b8:54:9f:de:49:91:71:0d:db:63:
         19:80:78:e2:0c:7b:9e:52:aa:4e:18:45:0e:11:a8:b7:56:b1:
         79:9e:b0:72:23:c3:f5:77:61:d8:09:c5:7a:75:03:4c:44:be:
         53:07:f9:39:74:b6:41:2e:78:4e:17:24:81:12:58:08:42:68:
         54:8d:95:ec:9d:78:e8:ea:27:0d:21:4f:0c:a4:bb:6c:49:c5:
         59:63:a1:59:6c:92:3a:71:07:08:c4:25:cb:9c:7e:f8:6c:e1:
         dd:d2:e8:34:c0:00:94:05:eb:64:52:7a:64:3e:6b:7b:01:32:
         b1:5f:60:4b:8b:14:8e:27:a4:7a:d7:6c:05:81:41:1b:9a:36:
         f5:07:7a:e5:39:6d:b9:82:e6:0b:30:8d:17:87:b2:fa:0c:d9:
         a0:a0:55:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:17 2026 by rpki-client