Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f1bbd65a-219c-3a5e-8202-9e0541272dca.roa
File:                     f1bbd65a-219c-3a5e-8202-9e0541272dca.roa (raw, json)
Hash identifier:          kDiagvo5lI3cAHDByZ40rnuMTfzoK+/kK/p+Pso7O68=
Subject key identifier:   29:99:C0:9E:02:6A:A3:67:35:34:C2:7D:2B:45:8D:87:25:07:4C:57
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584D4D5A6959DF8DF32F84A1D6E0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f1bbd65a-219c-3a5e-8202-9e0541272dca.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     20253
IP address blocks:        2606:bc40:106::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:69:59:df:8d:f3:2f:84:a1:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=295372cd-be9b-4f6a-96bd-c7ba1a7bbb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:03:25:eb:32:d8:3a:a7:fe:f5:44:36:49:4c:
                    ac:a6:db:18:13:b0:e6:e9:c8:a2:2e:17:4c:7c:a5:
                    2c:83:1e:5a:45:7d:00:00:df:43:ab:d5:e1:02:0f:
                    cc:5a:a1:6b:91:aa:75:9d:9d:3e:b0:a7:95:a8:6d:
                    92:4a:4e:8d:2c:9f:7b:2f:7a:bc:ac:e7:b1:07:b5:
                    a0:fe:af:33:c4:d8:6c:35:7c:b6:69:66:53:ef:2a:
                    60:48:02:2e:1e:f1:43:45:56:42:49:21:79:b5:74:
                    bc:6a:cf:39:42:88:d2:26:5a:bd:bc:65:05:2b:ba:
                    e3:38:4b:1c:53:d4:04:1b:3b:a0:e8:c4:79:b4:cb:
                    67:4c:7c:3f:6c:4d:27:bc:75:b9:4a:d6:9e:05:a3:
                    08:dd:8f:e8:38:13:12:c9:4a:b7:40:ce:7c:45:1e:
                    2f:7e:50:52:62:c5:68:ef:b4:f0:72:f0:b9:ca:0a:
                    7f:61:58:ff:71:4c:7c:70:e1:a9:27:9f:50:17:a7:
                    06:42:5a:a4:9a:15:5c:ff:a0:32:e6:68:79:04:0b:
                    27:39:27:59:db:7d:f1:60:28:71:c2:72:32:09:be:
                    15:a6:9c:62:9f:6e:ea:0d:7b:d7:a8:24:ee:7b:fb:
                    65:ef:3a:3d:63:89:17:c0:46:1f:60:3c:fa:32:80:
                    cd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:99:C0:9E:02:6A:A3:67:35:34:C2:7D:2B:45:8D:87:25:07:4C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f1bbd65a-219c-3a5e-8202-9e0541272dca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:106::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:02:f1:fe:e5:a7:d1:5a:fe:1a:c8:d0:cc:ed:95:5e:d9:18:
         0d:b9:68:8f:9d:14:61:08:e3:ec:5f:a9:14:16:0e:51:86:54:
         be:80:1e:16:cb:49:e6:c0:f0:6c:4e:c1:98:b5:ec:a0:6d:80:
         22:06:71:69:1f:27:35:46:12:31:33:28:6c:76:06:e9:a1:9c:
         75:9e:65:77:41:e9:22:18:1c:0b:38:aa:67:6d:90:df:77:e0:
         6e:88:61:9f:c8:d5:0d:5d:d9:4f:d7:d5:30:08:d1:f2:f5:7d:
         9e:15:e0:ef:3f:a2:4a:77:a8:7d:ac:6d:18:a6:5c:40:be:1c:
         c8:c7:b0:eb:2b:37:94:68:61:67:51:9b:a6:cd:bb:5f:24:a1:
         78:85:db:ae:41:4a:3d:67:77:2e:c8:39:a7:a9:bf:b0:cb:85:
         9e:23:65:f9:09:f9:d9:3a:b7:41:0c:2f:b0:92:a2:e2:9b:9c:
         c7:ba:5f:2e:48:fb:9d:08:08:73:5a:73:02:d2:8f:eb:c7:cf:
         fa:2f:4a:f9:8b:2d:6d:cf:ae:cb:9d:7e:e6:42:05:90:f8:a1:
         44:15:b5:44:46:64:c8:de:cf:7b:bb:87:f5:8d:aa:cb:d2:a7:
         a8:f6:5f:bc:a2:ef:95:85:a7:cf:09:3c:76:f8:dc:9b:89:ff:
         83:51:3f:57
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1NWmlZ343zL4Sh1uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
Mjk1MzcyY2QtYmU5Yi00ZjZhLTk2YmQtYzdiYTFhN2JiYjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwMl6zLYOqf+9UQ2SUysptsYE7Dm6ciiLhdM
fKUsgx5aRX0AAN9Dq9XhAg/MWqFrkap1nZ0+sKeVqG2SSk6NLJ97L3q8rOexB7Wg
/q8zxNhsNXy2aWZT7ypgSAIuHvFDRVZCSSF5tXS8as85QojSJlq9vGUFK7rjOEsc
U9QEGzug6MR5tMtnTHw/bE0nvHW5StaeBaMI3Y/oOBMSyUq3QM58RR4vflBSYsVo
77TwcvC5ygp/YVj/cUx8cOGpJ59QF6cGQlqkmhVc/6Ay5mh5BAsnOSdZ233xYChx
wnIyCb4Vppxin27qDXvXqCTue/tl7zo9Y4kXwEYfYDz6MoDNFQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCmZwJ4CaqNnNTTCfStFjYclB0xXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZjFiYmQ2NWEtMjE5Yy0z
YTVlLTgyMDItOWUwNTQxMjcyZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAEG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAYC8f7lp9Fa/hrI0MztlV7ZGA25aI+dFGEI4+xfqRQWDlGGVL6A
HhbLSebA8GxOwZi17KBtgCIGcWkfJzVGEjEzKGx2BumhnHWeZXdB6SIYHAs4qmdt
kN934G6IYZ/I1Q1d2U/X1TAI0fL1fZ4V4O8/okp3qH2sbRimXEC+HMjHsOsrN5Ro
YWdRm6bNu18koXiF265BSj1ndy7IOaepv7DLhZ4jZfkJ+dk6t0EML7CSouKbnMe6
Xy5I+50ICHNacwLSj+vHz/ovSvmLLW3PrsudfuZCBZD4oUQVtURGZMjez3u7h/WN
qsvSp6j2X7yi75WFp88JPHb43JuJ/4NRP1c=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:24 2026 by rpki-client