Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5b55fd7e-0d7c-3e1b-ade4-524473e97451.roa
File:                     5b55fd7e-0d7c-3e1b-ade4-524473e97451.roa (raw, json)
Hash identifier:          T1gOivRe+xQfVp0XO5LdykQqhTIeI2NOsvHpi7rGkd0=
Subject key identifier:   D9:E4:23:60:05:38:8C:78:25:56:80:92:45:33:78:CA:D4:33:D1:BF
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584D4D5A760292DAA77E32DF5C40
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5b55fd7e-0d7c-3e1b-ade4-524473e97451.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     20253
IP address blocks:        2606:bc40:f19::/48 maxlen: 48
                          2606:bc40:f1a::/48 maxlen: 48
                          2606:bc40:f1b::/48 maxlen: 48
                          2606:bc40:f1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:76:02:92:da:a7:7e:32:df:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=c89ba509-ddd2-4402-a005-399f0403500e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a8:8c:9e:b6:63:80:17:99:8b:e6:ff:6a:f7:
                    bd:f6:5b:fa:63:70:5c:6a:c3:c3:80:c1:cf:d9:cb:
                    f9:68:09:6d:df:4e:28:c0:a2:f4:bc:d9:37:95:ac:
                    cf:f9:68:21:1e:a2:3e:fc:6d:d2:30:30:3e:c6:b4:
                    30:fb:a9:92:63:5a:ac:fe:8e:80:9e:ab:3f:42:85:
                    cf:b0:2f:cb:13:16:08:dc:97:89:24:0d:12:c4:3f:
                    cd:cc:dc:bf:b1:4f:45:f8:80:39:b1:e3:55:6e:1c:
                    23:1f:e8:e4:fe:15:85:e3:13:5c:e5:42:27:82:1f:
                    fd:87:b2:5b:f4:9c:7a:d1:83:f7:73:e6:28:ba:30:
                    ff:5a:1f:df:c9:f3:41:82:b0:cd:76:6e:e8:28:72:
                    83:a2:73:4b:e6:72:4d:6b:8a:44:e7:7f:25:76:38:
                    43:91:97:e2:f5:51:ae:02:98:b4:84:46:98:27:98:
                    0c:36:52:b9:a8:55:a9:f7:13:b4:ab:4f:a6:06:b5:
                    d3:ed:ed:a3:44:a0:ec:85:d1:fa:cf:f8:e3:d3:0c:
                    5f:e6:21:54:a3:b0:6c:fd:4a:a9:19:fa:bd:b4:5c:
                    03:f4:75:ea:fe:a3:0b:36:fa:f9:3f:17:56:01:c6:
                    8c:57:9b:ad:3f:5b:da:46:bf:8b:2b:e9:8a:77:59:
                    77:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E4:23:60:05:38:8C:78:25:56:80:92:45:33:78:CA:D4:33:D1:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5b55fd7e-0d7c-3e1b-ade4-524473e97451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f19::-2606:bc40:f1c:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:fb:67:08:cd:19:34:73:7e:e3:f9:3c:f4:37:ad:8a:47:3f:
         dc:dd:a2:31:af:15:e9:b5:78:8c:7a:d4:dd:20:83:c3:6b:5e:
         6a:5f:56:c1:60:d0:e7:7d:b6:90:c3:09:b5:c1:7e:57:82:9f:
         99:5e:87:12:50:20:37:05:7d:43:06:51:fd:03:69:55:92:f3:
         05:65:1b:bb:e2:54:28:b9:b8:a2:ce:5d:d8:79:74:b0:44:b6:
         fb:7b:8f:de:4b:f3:98:f1:36:71:17:79:8b:72:5a:62:8a:0d:
         a6:61:d1:bc:53:fe:b6:da:3b:8e:4d:9a:54:56:ed:80:28:21:
         e5:a3:4e:3c:4c:93:88:21:53:e8:27:15:72:bd:59:9d:51:65:
         3d:e6:8b:0f:0c:bd:a6:4a:e0:b2:aa:3e:6b:d9:d0:61:72:cf:
         80:43:d4:68:60:b1:bc:d8:19:41:38:05:2b:54:7d:ed:38:55:
         97:f1:28:c9:fb:ae:cb:4a:0d:e3:ce:06:55:de:0b:46:df:18:
         d8:93:01:76:16:bf:66:a1:a5:61:79:c3:ff:1d:05:a7:62:d9:
         53:51:6d:a3:93:eb:f7:ca:ae:55:af:a0:f0:5b:3c:88:aa:e2:
         be:c1:43:48:e8:ed:12:50:45:46:d5:62:52:14:6e:1f:98:a0:
         63:be:1f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:20 2026 by rpki-client