Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9268dc36-70fc-3724-8536-e7defe5e7381.roa
File:                     9268dc36-70fc-3724-8536-e7defe5e7381.roa (raw, json)
Hash identifier:          z2Z8cuWRpPAvNNf89fPpcS7CshFdoMMSO3h3FjnzYKc=
Subject key identifier:   BD:1A:0F:F3:64:CF:EE:EA:D6:97:BC:23:00:F3:E3:15:BA:5F:D5:EA
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584BBFA5A5ED57D92978CCB51DBC
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9268dc36-70fc-3724-8536-e7defe5e7381.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     20253
IP address blocks:        2606:bc40:26::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:a5:ed:57:d9:29:78:cc:b5:1d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=f3ce690d-f3b4-41df-93c2-8523a2d06a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4b:0b:65:4f:6a:b4:a6:6d:81:7e:22:d5:04:
                    49:d0:0e:c7:23:73:c6:8d:b2:3a:92:11:a1:53:0b:
                    87:ed:48:e6:05:93:cf:a9:cc:44:7d:bb:ff:a8:3c:
                    85:d6:4d:94:b4:c1:a3:7d:9e:fd:61:1d:ca:da:7f:
                    3b:a7:cc:83:1b:e3:30:e9:bb:83:85:b9:3e:c5:e1:
                    4e:9e:ef:29:83:6a:0a:75:19:98:30:c7:f8:8f:11:
                    23:c0:90:3b:a9:b9:0a:82:40:bb:3a:51:7b:9d:80:
                    2a:c6:18:b4:b1:fa:9f:10:1b:16:43:03:46:13:05:
                    91:12:94:62:17:40:e6:d2:64:4a:32:0f:2d:2b:ca:
                    23:79:47:ab:5f:eb:ab:e1:42:01:3d:67:82:48:f8:
                    99:1a:db:d9:e7:99:ce:fe:5b:79:64:89:ff:7c:9a:
                    ca:06:07:c6:b9:19:20:47:03:1c:ce:c9:7c:b0:95:
                    a6:0f:0f:b5:83:f3:eb:12:8c:50:1f:a4:05:5c:19:
                    a1:03:4c:e1:73:39:a0:77:45:e6:00:9c:e1:59:32:
                    3b:6d:f2:88:bb:68:a1:34:49:81:cc:13:e9:b6:5b:
                    a4:3d:b4:5d:bf:1e:71:37:63:0f:b3:ff:bc:09:7a:
                    60:cc:27:5e:15:cb:a8:72:4a:9d:3b:2f:a7:cb:c1:
                    90:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1A:0F:F3:64:CF:EE:EA:D6:97:BC:23:00:F3:E3:15:BA:5F:D5:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9268dc36-70fc-3724-8536-e7defe5e7381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:26::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:1a:2a:f9:5e:2f:b5:1c:a0:08:4f:22:79:25:0a:9f:b7:a4:
         5c:6f:ad:de:81:fa:7c:b8:3e:2a:f4:19:d8:5a:b7:89:02:03:
         cd:dd:4d:4a:34:a7:94:8f:b1:4c:0e:26:ba:25:dc:58:ae:1e:
         ab:ab:4a:99:c6:19:67:91:a3:8d:3e:12:a5:c8:53:25:dc:68:
         f2:e2:3c:f1:14:03:bc:12:68:7b:a4:72:5c:25:94:31:97:ea:
         5e:c2:e8:05:ef:52:58:a1:a9:0b:a3:4b:4a:45:99:a0:cb:84:
         e5:52:09:12:15:cd:a4:bb:33:c8:7d:58:95:50:c7:a4:43:b0:
         63:66:f2:c1:cb:72:82:a8:43:bb:3e:aa:4c:3a:b0:c4:12:54:
         c5:73:d9:49:36:46:99:15:2f:6a:08:46:a2:49:f4:60:19:42:
         d7:cd:f5:b7:ac:7a:db:b0:d9:7b:57:e3:59:2a:ee:52:c8:d1:
         ad:83:d5:22:0f:d8:ad:ea:03:f2:1a:23:bb:a9:92:df:49:69:
         5d:b3:4b:a8:5f:77:1d:78:c7:70:b2:c0:21:d6:84:57:13:e5:
         fa:e1:93:3e:64:da:a3:2d:7d:cd:35:1d:ee:1e:22:ac:05:ce:
         39:d6:c6:59:fe:24:19:67:ca:e1:92:d7:67:bc:fa:00:ca:36:
         72:58:62:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:27:25 2025 by rpki-client