Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2d4c0f88-b589-3e00-aa9d-3cd6f52fe79a.roa
File:                     2d4c0f88-b589-3e00-aa9d-3cd6f52fe79a.roa (raw, json)
Hash identifier:          nfkbXD4l02FeNZNIfroMWob/VZE/6ql0xG+D5Ftou0Y=
Subject key identifier:   E2:05:74:16:C1:CC:64:E1:3C:C0:19:37:88:4F:9B:D4:AD:8C:01:50
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584F71EDA36F4F1E6ADB3E093E40
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2d4c0f88-b589-3e00-aa9d-3cd6f52fe79a.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     20253
IP address blocks:        2606:bc40:201::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:a3:6f:4f:1e:6a:db:3e:09:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=462eb987-9fc2-494a-8025-2297aaf96657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:29:57:f0:2c:ea:e8:85:6c:f5:7a:03:96:
                    ab:0b:2b:55:d3:d1:26:41:7c:9f:96:b0:f8:52:a8:
                    9b:39:79:d7:50:90:f9:f8:ae:90:b5:c7:cd:a8:65:
                    a2:7f:a7:4d:4b:0e:a3:b0:8b:ba:82:62:e6:e8:9f:
                    fa:3c:7a:d9:af:98:a5:ee:1c:c7:fc:91:45:c1:f4:
                    ca:a7:0f:34:a4:be:b9:3e:5e:ab:cb:f7:20:93:88:
                    3b:e9:c0:b7:3e:4a:ec:18:4b:08:50:86:02:3c:37:
                    3f:3e:58:49:2c:b9:b2:e0:61:4d:35:aa:98:c6:ef:
                    b6:bf:5a:94:66:f4:e6:1a:70:11:04:8b:b6:e8:ba:
                    38:d5:ed:42:d8:c5:ff:e5:c1:94:4d:fa:62:1c:0a:
                    b0:25:42:70:eb:a3:20:6d:b6:d7:2c:4e:84:4c:58:
                    57:c5:64:f4:60:60:95:61:82:42:cd:bc:61:d9:e4:
                    fa:09:6a:06:f4:4a:81:0f:e8:db:9d:cd:48:db:e3:
                    a7:e8:2e:32:94:79:1e:5b:cb:6d:9e:6c:60:fd:6d:
                    2f:09:33:39:34:a8:e8:54:34:4c:55:33:45:4e:03:
                    45:d3:84:49:aa:82:26:b3:5e:87:45:db:d7:3a:0e:
                    a7:19:5f:ca:76:30:fc:2c:13:91:0c:9d:bb:30:3b:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:05:74:16:C1:CC:64:E1:3C:C0:19:37:88:4F:9B:D4:AD:8C:01:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2d4c0f88-b589-3e00-aa9d-3cd6f52fe79a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:201::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:f8:88:ab:3f:6e:9a:19:61:a6:1e:48:22:73:cb:03:97:ab:
         bd:fc:a2:4f:20:29:7b:b4:c7:e2:d8:2e:a3:85:8c:ad:96:9c:
         7a:36:35:52:ff:ab:a8:f3:78:4d:d5:38:60:e1:3f:b7:74:c0:
         54:58:06:87:f3:e4:f8:b5:57:9f:a1:f1:af:74:ed:97:fc:98:
         7c:99:07:3f:9b:8f:66:ad:d3:44:9c:64:fe:5f:30:13:89:c2:
         ab:a4:a1:81:9d:e1:10:a0:a7:8e:14:82:58:0c:28:55:0f:32:
         ff:cd:39:9c:0e:9f:bf:77:da:1e:58:8b:f4:ae:df:e2:c7:85:
         f2:e3:f4:a8:0a:b1:63:45:6a:25:68:c9:f3:f1:cc:fa:d2:3d:
         f1:64:76:2e:f7:1b:91:54:14:3f:a8:4a:01:1a:c4:e4:3d:19:
         76:a3:67:ec:98:41:55:31:10:cd:bc:e3:0b:c2:53:a4:18:30:
         1b:39:5e:b5:dc:0c:25:27:17:bf:5d:ef:d2:77:1d:90:f4:a4:
         b6:b7:6c:0a:c6:83:36:4a:85:03:18:bd:90:b7:a5:03:60:04:
         e3:32:2f:30:69:36:0e:46:1b:66:6a:c5:68:17:0e:5e:ad:56:
         41:81:48:e4:4d:4a:cd:d3:75:60:8f:b6:4e:0c:1c:6d:fd:a0:
         b1:44:1d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:54:30 2026 by rpki-client