Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8f53e0b4-b7cf-369a-a3aa-c241e2f99c46.roa
File:                     8f53e0b4-b7cf-369a-a3aa-c241e2f99c46.roa (raw, json)
Hash identifier:          UDLjosKREGVtiqW4ROMw6L9tmIsG+clA3Gsa7aH8G/A=
Subject key identifier:   56:68:05:65:39:18:A4:80:27:AC:12:0E:49:FB:9D:55:62:AC:CE:DF
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584CC7773AC15E0EBA4BECD34480
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8f53e0b4-b7cf-369a-a3aa-c241e2f99c46.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     20253
IP address blocks:        2606:bc40:16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:3a:c1:5e:0e:ba:4b:ec:d3:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=d9ba5c89-bd10-4ac8-a02c-40e2d40686d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4b:25:46:c6:38:8d:d9:58:d6:b5:1e:5e:4d:
                    9d:1c:cb:31:c6:d5:2a:e1:44:e7:70:34:99:8b:6f:
                    d4:15:f2:5b:0f:02:f0:50:95:b1:f7:3a:48:6b:3f:
                    7c:01:48:df:bf:68:e9:33:6b:3d:9a:de:ed:e1:ff:
                    5d:88:5b:33:b5:c2:c9:35:9c:f1:50:fe:f0:f4:c4:
                    40:dc:43:47:ef:45:6f:59:a1:99:19:3d:70:b6:60:
                    00:15:f5:7d:1d:d2:09:71:9e:0c:7f:23:3a:2e:b4:
                    ea:89:1a:5b:09:51:c6:6a:f9:58:d7:3d:87:17:c1:
                    8b:41:0b:49:ad:6d:7e:ca:f4:68:c7:57:33:27:61:
                    00:28:b0:38:c8:71:73:90:b9:83:3b:ca:56:7f:dc:
                    fb:b3:20:61:75:b7:57:54:b2:cb:60:62:22:de:61:
                    c0:6c:78:6e:ab:1b:0b:1a:73:f8:9e:ba:87:2d:98:
                    29:7d:4e:ce:88:af:18:18:d4:94:f2:ef:fa:6c:78:
                    2b:6a:7e:6c:e2:87:92:2d:f5:83:ca:07:84:67:2f:
                    8b:9d:07:f0:2e:f2:d2:97:25:fc:be:1d:c4:bd:6d:
                    99:f0:b3:d1:ba:e6:15:82:d0:1e:78:74:73:f1:77:
                    cd:ea:ff:c0:23:7e:73:1a:f3:af:fd:04:c7:bb:1d:
                    5c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:68:05:65:39:18:A4:80:27:AC:12:0E:49:FB:9D:55:62:AC:CE:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8f53e0b4-b7cf-369a-a3aa-c241e2f99c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:16::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:5b:15:6a:57:06:f1:0d:0f:1c:93:84:ec:63:c4:3a:4b:6a:
         f8:3a:dd:44:70:59:37:60:35:3e:85:51:57:53:eb:98:37:64:
         1b:82:1b:ca:59:22:f9:3f:72:d6:2c:e1:dd:64:30:b3:51:1a:
         47:04:53:ec:d8:2f:47:04:6c:85:c8:6b:07:c0:e6:08:4a:d4:
         b3:6d:74:5c:ef:37:0b:2b:87:49:12:22:7d:73:a4:cc:d0:61:
         25:21:3e:f5:19:6b:23:c2:47:e3:fd:93:c5:5d:26:6d:83:45:
         60:f5:ec:73:1e:ec:7b:bb:05:dd:6b:75:10:e4:17:fc:13:9b:
         7b:ba:1b:44:7c:37:06:94:0f:6f:3b:b0:51:8b:c4:2d:27:90:
         03:e3:1f:43:36:34:94:b3:0a:7b:01:7c:ca:34:cc:9d:84:9e:
         1c:3b:8b:27:47:59:fa:63:1d:6f:51:5f:7e:1f:db:f7:bf:a9:
         e7:ee:cc:c0:9c:01:29:0d:62:83:eb:6a:e9:38:2a:fe:bc:d0:
         77:5d:f1:39:d4:4e:08:20:ac:b2:74:37:04:9c:54:55:d1:1a:
         19:b2:43:3f:b2:45:61:49:8c:79:db:9d:08:cf:2c:34:ea:4d:
         82:60:bb:89:66:75:9d:26:47:17:c5:cc:dc:0c:93:fb:52:7b:
         ee:94:28:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:24 2026 by rpki-client