Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/cc286579-b050-3061-aac3-99a783752b74.roa
File:                     cc286579-b050-3061-aac3-99a783752b74.roa (raw, json)
Hash identifier:          tQUM9U8iyMEWkvXfXmifK2J7j4h6ZspT2EkwSl617kA=
Subject key identifier:   EF:50:6E:F4:2B:EA:26:6C:89:6F:08:11:FB:15:F0:36:34:DD:0F:4F
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584C9536F52F604EB0B241A68780
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/cc286579-b050-3061-aac3-99a783752b74.roa
Signing time:             Tue 20 Jan 2026 02:00:29 +0000
ROA not before:           Tue 20 Jan 2026 02:00:29 +0000
ROA not after:            Mon 20 Apr 2026 01:00:29 +0000
asID:                     20253
IP address blocks:        2606:bc40:f104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:95:36:f5:2f:60:4e:b0:b2:41:a6:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jan 20 02:00:29 2026 GMT
            Not After : Apr 20 01:00:29 2026 GMT
        Subject: CN=c6577012-f649-4f18-8f50-e4d53f0c90ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9f:91:40:ac:f4:67:50:bb:75:6c:55:7f:2f:
                    b7:75:45:12:db:8e:a6:f4:77:4a:dc:ca:e1:09:72:
                    14:d7:20:4e:fc:04:36:35:67:f2:fb:31:c1:7c:af:
                    01:be:37:58:1c:a4:1a:af:48:9b:b0:3b:d2:bb:d0:
                    24:7f:42:0e:e0:91:2c:cf:b7:19:60:4d:a1:bf:c2:
                    ec:a9:7d:52:29:da:12:46:83:d0:2d:cf:f7:7b:8d:
                    79:3b:31:1c:fd:8c:e8:39:c6:27:7f:b0:26:12:49:
                    82:19:72:e1:56:e1:30:0a:8a:c4:06:22:3f:8a:67:
                    3a:8a:d8:ec:b3:ed:5c:1c:cd:99:a1:01:cf:38:88:
                    ae:1f:60:9d:bd:6c:14:66:d6:24:52:46:b0:0a:d2:
                    02:0b:51:7c:c6:1d:ca:bc:65:0b:b5:2c:14:ef:27:
                    d5:07:83:b2:f4:6a:b3:67:94:56:b1:b0:4c:39:8b:
                    b2:50:0b:b4:aa:34:bc:61:cb:85:12:fe:c3:71:ea:
                    1d:3b:19:f2:0f:3b:03:57:12:f1:9e:dd:59:eb:59:
                    a2:70:3f:06:16:bd:e0:ba:57:34:88:2a:06:0b:e0:
                    51:f9:33:8a:35:c9:7b:15:8a:ee:e9:47:8c:4b:e6:
                    36:f1:7f:77:42:22:6e:33:65:f1:7e:1d:b9:e0:4a:
                    a6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:50:6E:F4:2B:EA:26:6C:89:6F:08:11:FB:15:F0:36:34:DD:0F:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/cc286579-b050-3061-aac3-99a783752b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f104::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:71:e2:0e:10:b4:52:d9:d0:71:da:19:f0:0d:6a:dd:72:e6:
         e9:db:f9:90:0c:fe:03:4b:31:f9:21:4d:1c:71:3d:47:e7:ec:
         1e:9b:ad:7e:71:15:6b:3b:fc:f4:99:78:d5:02:0e:c3:62:a9:
         19:10:c6:54:65:2f:10:9b:3c:3d:7a:bd:7e:46:09:e3:cc:b3:
         07:e4:36:cd:b3:de:9e:89:05:78:bb:67:11:f9:81:88:4c:51:
         9e:29:ab:9f:0c:ef:8e:53:2d:2a:87:48:c0:b0:f8:92:67:d3:
         88:b7:37:9f:06:03:b2:59:84:ee:61:a9:85:e6:56:fc:d4:5e:
         bf:36:f7:96:03:a9:2f:c1:d4:39:31:f8:22:d3:94:d9:45:a1:
         0d:5d:fb:5b:3b:4c:c6:84:c0:6c:a8:88:a2:e9:aa:97:d6:95:
         e4:2e:ec:52:f3:27:2c:77:5a:21:88:6c:ce:59:47:21:40:a2:
         35:1d:8d:54:7c:26:a4:fc:0e:ac:9a:0a:ff:38:38:37:f7:b1:
         ac:c0:d7:7f:90:e9:21:08:5e:38:bf:90:82:11:d5:d5:30:61:
         5e:fe:c8:16:8e:c2:26:41:d3:de:79:67:fa:f9:2b:93:ba:c2:
         40:ce:31:f2:63:b8:d5:bd:d5:66:8b:0f:fe:d0:3a:a5:52:ad:
         5c:1d:90:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:07 2026 by rpki-client