Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc01c5ca-0ead-3352-878a-4003bf1cc818.roa
File:                     dc01c5ca-0ead-3352-878a-4003bf1cc818.roa (raw, json)
Hash identifier:          8oOs72SpNaD4t3i/PyH4Mj0WED0adxAqnuDJ8cTyRNk=
Subject key identifier:   85:AE:FA:55:92:E9:E8:74:0D:63:DD:47:9A:49:13:4A:12:D9:B8:43
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584D4D5A68F36FA5F9B87AC6D800
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc01c5ca-0ead-3352-878a-4003bf1cc818.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     20253
IP address blocks:        2606:bc40:1f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:68:f3:6f:a5:f9:b8:7a:c6:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=756372d9-1d7e-42ef-8b7c-06079874ebcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:b7:76:57:35:da:d0:9a:85:7e:11:54:23:
                    3e:a2:70:41:ad:97:12:b4:04:9b:56:3f:cb:47:55:
                    e4:2d:c2:aa:52:b9:b7:4b:3e:66:fa:e8:76:05:36:
                    c0:4e:44:ee:e5:89:5a:a8:a7:96:fc:d7:0e:c1:2f:
                    b2:95:65:ac:a5:d2:e3:85:49:45:f8:3c:87:7c:5d:
                    62:1a:02:b7:c9:64:54:a4:8a:62:fb:45:5b:de:92:
                    67:b6:b1:9b:91:e3:07:7c:b8:52:ee:da:f1:7b:71:
                    c0:0a:2d:dc:00:c0:41:31:a0:7b:9b:82:b8:e2:31:
                    07:bc:5d:c3:a9:40:ee:06:f1:8b:12:41:de:2d:12:
                    5d:b8:cf:ee:a4:5f:0f:ba:23:16:0a:1e:1c:ef:2a:
                    86:d5:53:cd:cf:90:cd:c7:c8:7c:b4:9f:64:5d:91:
                    b3:79:93:8d:26:11:6e:74:3e:40:c1:e4:bd:62:c6:
                    78:18:02:4b:e6:d7:5e:21:6a:83:fb:b6:2a:eb:1f:
                    3f:91:f9:fc:b7:58:60:fc:e2:3d:6c:ef:9a:9d:9d:
                    fc:b2:e2:20:b9:68:a8:65:23:ef:6d:e4:60:97:22:
                    f4:14:51:24:d7:2f:81:6f:0c:a7:45:62:2c:a9:3f:
                    b8:95:68:14:5f:f6:30:49:71:21:83:04:d1:cb:17:
                    6e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AE:FA:55:92:E9:E8:74:0D:63:DD:47:9A:49:13:4A:12:D9:B8:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc01c5ca-0ead-3352-878a-4003bf1cc818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:1f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:da:3d:9b:6d:fd:71:5f:8f:d2:5e:86:0a:8b:a7:87:58:c1:
         6a:df:f3:07:6f:26:89:5f:fd:71:f2:9f:4b:9e:80:4a:77:45:
         d1:5e:4b:b6:f3:4e:b5:46:89:f5:06:8d:c0:56:44:74:4e:1d:
         3f:fd:41:18:f1:63:22:2a:e2:5d:67:34:11:e4:3c:77:d6:52:
         05:b7:d9:24:8c:b9:1d:a0:72:2a:c9:50:db:fa:2f:1e:7a:9d:
         d6:f1:1d:88:58:8a:b8:c0:de:a1:c4:54:3b:34:15:da:d4:07:
         63:bb:6c:84:23:9b:d8:c0:30:6a:60:42:40:8a:3d:f1:62:42:
         43:da:44:78:59:52:cf:5b:86:60:9d:c0:dc:38:cd:9e:38:aa:
         ff:e5:89:7d:6c:10:4a:a4:50:b2:2b:f0:7d:71:02:2c:bb:75:
         f4:9b:e9:a3:02:23:dc:14:b9:35:18:15:9c:33:f4:cc:80:8c:
         e1:88:d6:ae:ca:e8:93:ba:8c:e7:76:ed:31:53:77:bf:f8:0a:
         1e:29:46:c0:90:02:d2:56:2b:67:5c:6a:f3:0d:42:c7:bd:f3:
         84:39:2c:f7:44:45:dd:66:93:73:2d:75:76:26:d6:5d:b5:42:
         c9:82:a7:cd:5b:03:0d:81:c2:0c:34:e1:2f:14:7e:8c:3f:1a:
         10:e6:13:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:07 2026 by rpki-client