Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7af8c9c8-844f-3da2-9b51-762505ecd85d.roa
File:                     7af8c9c8-844f-3da2-9b51-762505ecd85d.roa (raw, json)
Hash identifier:          kIsYLxymPDnTlwvLWmD7SMpperCjZS5gnh4/5GPhmXQ=
Subject key identifier:   36:65:40:45:CE:C2:BA:24:D4:60:24:36:38:6D:E3:52:B1:E3:90:DE
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584C8E3C362A3FD7AD9229D62EC0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7af8c9c8-844f-3da2-9b51-762505ecd85d.roa
Signing time:             Sat 17 Jan 2026 14:00:38 +0000
ROA not before:           Sat 17 Jan 2026 14:00:38 +0000
ROA not after:            Fri 17 Apr 2026 13:00:38 +0000
asID:                     20253
IP address blocks:        2606:bc40:f103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8e:3c:36:2a:3f:d7:ad:92:29:d6:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jan 17 14:00:38 2026 GMT
            Not After : Apr 17 13:00:38 2026 GMT
        Subject: CN=4b31afc0-16f9-4b99-b029-c6f3805279c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:89:8a:42:17:ea:23:56:a6:10:2a:a1:83:f5:
                    92:1e:12:27:0b:93:48:8c:40:2f:27:03:d9:f8:80:
                    c6:d3:1b:c7:35:c6:92:09:a9:94:de:d1:90:fe:60:
                    ba:ff:a0:02:af:93:1c:b0:03:d2:6c:17:53:3e:99:
                    b2:33:4f:f9:54:22:a3:56:02:93:69:ab:98:83:64:
                    7f:7a:2d:26:e3:a9:f6:1b:43:8a:87:04:0f:22:a7:
                    ef:bb:d3:69:36:1e:35:57:fd:71:8d:a9:05:a6:e6:
                    7f:b6:3f:6b:16:3e:36:19:ef:3a:a9:d1:7e:7b:d1:
                    f6:d0:98:f6:b1:c5:bf:ee:ee:58:22:52:4d:d9:7e:
                    c8:d1:69:19:de:39:78:5b:cc:ed:26:ca:6d:1d:45:
                    f3:cd:2c:0b:25:41:6a:11:59:aa:38:23:06:a7:a7:
                    5e:e8:49:3e:e8:6b:98:2d:6c:ce:40:61:d2:e2:2a:
                    16:a0:99:ef:7e:e8:85:d2:68:47:cb:ee:60:5c:93:
                    25:ac:b9:37:50:af:ba:92:4a:c6:04:7e:72:43:34:
                    ca:21:a1:80:a7:42:91:bb:ab:85:60:fc:3b:65:68:
                    57:1c:d0:ef:d5:86:af:77:35:ce:b0:bc:92:4c:3a:
                    07:d6:ed:cc:00:a2:fe:fb:a0:95:8c:12:6f:51:a3:
                    52:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:65:40:45:CE:C2:BA:24:D4:60:24:36:38:6D:E3:52:B1:E3:90:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7af8c9c8-844f-3da2-9b51-762505ecd85d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f103::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:aa:2b:fd:b5:72:48:f4:0c:87:7f:a8:f4:b8:24:9b:e6:1e:
         c8:24:ec:5b:98:ad:b8:ec:d1:d1:93:8a:f0:e5:49:7e:39:bb:
         53:5d:ff:19:f0:34:aa:8e:0b:d7:0e:ea:e7:77:e0:7b:58:cb:
         92:7a:d3:bb:f7:d6:41:99:ff:de:71:44:0c:59:e0:0b:15:55:
         0f:f1:e0:aa:15:1e:e8:4f:a2:07:34:f1:c1:58:b7:7b:0e:6d:
         d2:71:6a:87:bc:51:da:70:f2:77:ee:fe:dd:12:68:84:57:fd:
         4a:cd:bd:13:0d:fc:70:98:40:c8:74:84:75:a2:8a:95:f4:f1:
         b2:ca:5b:64:db:7a:1a:ef:48:e4:c7:a9:2d:46:1d:09:34:bc:
         81:f4:c5:de:aa:d5:a0:b1:32:d5:2e:5e:53:5d:c6:aa:50:bc:
         e5:33:3c:8f:f1:70:3b:ad:f0:6d:25:f7:44:77:c1:51:67:cc:
         16:b1:21:c6:cf:35:ec:36:e3:72:d6:1a:51:2f:82:d0:da:69:
         b9:ae:31:d9:48:6b:77:60:6b:fb:1e:1e:a8:09:cf:17:c0:d6:
         2f:88:6b:64:50:03:a7:6a:9d:1f:86:cb:dc:8a:69:a9:41:99:
         a0:1f:ac:b3:39:50:97:93:f0:04:fd:e6:2b:c8:46:a2:23:3e:
         28:6d:fd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:30 2026 by rpki-client