Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa
File:                     2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa (raw, json)
Hash identifier:          lDVelQ1J2VveWIgI8qgQho5Mp+5zV2FxDVmwn1hm8f0=
Subject key identifier:   EB:41:0E:18:17:B0:49:8F:E7:6E:A4:BD:C4:A8:2E:5E:4E:3A:C5:1D
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584CC7773A7B6B96295CAF791100
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     20253
IP address blocks:        2606:bc40:f0b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:3a:7b:6b:96:29:5c:af:79:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=811b0bc8-8fd4-482f-a148-73f6fd9e35d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:b1:c2:93:57:ac:c7:48:23:ec:02:ff:90:
                    3f:d0:6c:88:19:ed:c4:2c:2e:d2:1f:bd:91:45:bc:
                    74:45:75:f9:60:ad:c5:65:0e:41:16:fe:8a:98:07:
                    cc:af:00:ce:95:6b:f5:22:3b:a8:2a:a2:9a:9e:83:
                    27:e0:42:1e:72:e1:3d:dd:00:26:db:25:3f:b1:9b:
                    a7:63:64:a8:24:6d:44:27:88:31:71:aa:54:24:87:
                    5a:ce:b0:79:c4:c8:f1:05:c0:f6:93:82:b8:31:a4:
                    cd:eb:cd:b8:94:43:f0:29:ad:5f:f1:3b:1d:71:6e:
                    e4:3d:21:04:2b:a6:de:55:49:d0:e4:a5:3b:f5:66:
                    e7:ff:d2:aa:64:59:58:69:54:95:13:54:14:18:10:
                    ce:6a:66:08:2f:19:36:94:1b:93:35:15:1f:c5:29:
                    81:c5:0c:21:fc:61:8b:b2:89:17:80:1a:ab:2c:b6:
                    97:00:f0:1f:bb:af:93:e5:73:0c:21:ea:7e:7f:86:
                    04:75:93:c6:65:7f:37:54:31:c5:47:0b:0d:3d:f2:
                    a6:d9:1a:a0:4d:5f:6a:3d:dd:17:64:f1:9b:6c:24:
                    28:3a:e7:3d:e2:aa:da:9f:97:2b:be:72:eb:f0:0a:
                    4f:10:e7:86:e7:2b:f8:a6:ec:f9:ac:5a:46:c7:8c:
                    56:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:41:0E:18:17:B0:49:8F:E7:6E:A4:BD:C4:A8:2E:5E:4E:3A:C5:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f0b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:76:58:52:32:eb:ec:4d:c4:5a:b3:8e:e0:07:e5:f0:0d:0b:
         c6:7e:d9:c8:5c:25:26:1a:af:dc:00:ef:37:d5:01:dd:17:06:
         57:d7:a1:34:81:91:e8:22:39:69:79:7f:a6:12:e9:e4:3d:ce:
         ba:07:90:7e:e7:1e:3f:90:90:22:66:8a:30:78:63:13:c9:68:
         52:a6:c8:11:d7:20:8b:ee:65:be:4d:55:cd:45:a6:d3:18:c2:
         17:f5:92:24:90:a0:14:27:68:6a:8d:d7:2c:5c:b7:af:7b:37:
         59:0a:63:91:0b:2b:c0:7b:7f:d0:29:69:f5:d8:7f:cd:34:5f:
         0a:02:56:28:9a:4e:d8:17:d8:09:85:14:9e:60:96:47:19:a3:
         0e:93:9d:15:13:75:ef:25:35:56:d0:bd:6a:a2:5f:1d:54:3e:
         ac:fb:fd:98:ea:a0:93:23:8c:31:39:9f:6d:47:c4:c8:c6:7e:
         58:2f:67:3b:d3:fa:1e:4f:fe:d8:2b:77:60:ad:90:5f:96:b7:
         ac:df:f2:8e:31:0b:39:2f:2b:41:22:e1:43:68:26:f0:4e:d5:
         38:61:60:1d:2f:06:2d:af:c1:6c:ea:28:66:cf:51:f0:24:69:
         d7:79:82:f2:68:1e:0e:13:7a:a6:09:65:a2:b8:67:0e:b3:4b:
         2f:c1:ec:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:59 2026 by rpki-client