Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/61c8c160-394d-38a5-8f3a-47feb9e69d6d.roa
File:                     61c8c160-394d-38a5-8f3a-47feb9e69d6d.roa (raw, json)
Hash identifier:          xwA3Su3CMx0sHEVNMjEoDxsON5FLSXGEI8hP055ueiE=
Subject key identifier:   0D:D8:13:D6:84:3F:D5:2A:21:CB:77:0D:E6:D3:78:7E:45:1B:B2:E3
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584EE7BCBAC77A13744894342680
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/61c8c160-394d-38a5-8f3a-47feb9e69d6d.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     20253
IP address blocks:        2606:bc40:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:ba:c7:7a:13:74:48:94:34:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=bf8b759f-24a4-4a05-b91e-b0b3b72d0108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6c:12:85:14:fb:69:07:76:52:07:c2:56:49:
                    7e:0c:d6:dc:66:96:b9:1d:6b:af:c2:7c:8f:5d:df:
                    f7:47:0f:d3:fc:e4:7a:33:a6:e3:bc:9c:1b:bf:0a:
                    e4:0c:30:47:e4:d1:9b:0d:f4:c2:50:22:60:5e:0b:
                    09:81:62:55:c7:b4:c2:67:d2:cc:bd:c8:3b:62:0b:
                    81:ea:66:7d:7e:29:0f:c5:8e:6d:bb:91:e3:ad:9a:
                    3f:67:63:b5:35:09:c2:9a:c9:e0:80:6f:6d:ac:5c:
                    7e:ac:f3:3a:72:3b:ff:e4:19:80:5b:6d:5b:fa:f4:
                    73:37:59:e5:2a:52:68:27:eb:23:93:ae:fa:c7:62:
                    ad:3b:35:92:de:64:30:df:af:80:7f:e2:a9:6e:8c:
                    94:4d:c7:78:a4:51:3d:fb:62:e6:91:72:0b:74:77:
                    74:bb:49:e1:9f:f4:a9:4d:6b:69:dd:76:b2:21:be:
                    76:0b:46:b7:56:0f:fc:c5:ac:66:e8:9c:77:81:42:
                    3d:ea:ef:8e:49:76:c7:4b:83:7e:de:ce:f6:93:52:
                    2b:31:da:b9:f0:e7:b6:07:74:37:b8:70:a5:1b:19:
                    9a:1a:24:a6:6d:b5:28:40:a3:4d:9e:7b:dc:ef:ff:
                    90:4b:18:a6:9e:1c:ff:d0:ea:1d:a3:46:39:b2:80:
                    0d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D8:13:D6:84:3F:D5:2A:21:CB:77:0D:E6:D3:78:7E:45:1B:B2:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/61c8c160-394d-38a5-8f3a-47feb9e69d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:21:03:0f:16:e2:11:d9:44:14:1c:78:0e:bc:33:85:9b:8f:
         e0:d0:a0:95:47:18:67:04:58:99:62:be:24:76:ce:27:4f:e0:
         e7:13:38:2c:35:70:d2:ab:24:68:a0:85:e3:de:84:65:8b:04:
         8d:d7:01:14:61:67:51:6f:78:63:dd:bb:9a:af:f9:a2:90:42:
         61:ea:a7:99:96:fb:84:c0:d9:39:98:b7:22:e2:0e:bb:70:2f:
         aa:71:e0:ae:6f:53:b9:64:f8:a4:62:0e:76:f0:54:e2:9d:cf:
         24:63:82:a8:12:e3:79:6c:62:75:cb:44:89:af:8a:8a:32:b1:
         19:05:03:d1:57:3d:99:77:3e:01:dc:69:b1:e0:e2:60:a3:43:
         a2:51:35:46:4f:fc:11:f4:6b:96:29:d4:62:d8:e2:c9:8c:77:
         8f:ff:4e:3e:e2:98:f8:30:00:db:29:14:11:f7:00:b0:6b:f2:
         28:8b:73:a8:3b:4e:23:f2:1a:ad:b1:71:24:f8:b4:d2:6d:06:
         31:64:8a:9d:3f:eb:00:e4:37:46:48:60:fa:34:26:0e:e8:a6:
         b5:6e:89:14:8a:ce:05:42:95:57:4a:0b:18:1e:a3:ea:18:17:
         95:13:6b:89:20:82:83:ac:6c:f6:11:35:10:f3:62:00:f4:6e:
         4d:17:fd:10
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7nvLrHehN0SJQ0JoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk
YmY4Yjc1OWYtMjRhNC00YTA1LWI5MWUtYjBiM2I3MmQwMTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2wShRT7aQd2UgfCVkl+DNbcZpa5HWuvwnyP
Xd/3Rw/T/OR6M6bjvJwbvwrkDDBH5NGbDfTCUCJgXgsJgWJVx7TCZ9LMvcg7YguB
6mZ9fikPxY5tu5HjrZo/Z2O1NQnCmsnggG9trFx+rPM6cjv/5BmAW21b+vRzN1nl
KlJoJ+sjk676x2KtOzWS3mQw36+Af+KpboyUTcd4pFE9+2LmkXILdHd0u0nhn/Sp
TWtp3XayIb52C0a3Vg/8xaxm6Jx3gUI96u+OSXbHS4N+3s72k1IrMdq58Oe2B3Q3
uHClGxmaGiSmbbUoQKNNnnvc7/+QSximnhz/0Oodo0Y5soANwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA3YE9aEP9UqIct3DebTeH5FG7LjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvNjFjOGMxNjAtMzk0ZC0z
OGE1LThmM2EtNDdmZWI5ZTY5ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALIhAw8W4hHZRBQceA68M4Wbj+DQoJVHGGcEWJliviR2zidP4OcT
OCw1cNKrJGighePehGWLBI3XARRhZ1FveGPdu5qv+aKQQmHqp5mW+4TA2TmYtyLi
DrtwL6px4K5vU7lk+KRiDnbwVOKdzyRjgqgS43lsYnXLRImviooysRkFA9FXPZl3
PgHcabHg4mCjQ6JRNUZP/BH0a5Yp1GLY4smMd4//Tj7imPgwANspFBH3ALBr8iiL
c6g7TiPyGq2xcST4tNJtBjFkip0/6wDkN0ZIYPo0Jg7oprVuiRSKzgVClVdKCxge
o+oYF5UTa4kggoOsbPYRNRDzYgD0bk0X/RA=
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:37:30 2026 by rpki-client