Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/68772751-81f6-3fb2-a6e2-8589e977d52c.roa
File:                     68772751-81f6-3fb2-a6e2-8589e977d52c.roa (raw, json)
Hash identifier:          kZKEAwxNxApcldEnSkZdItG4xOG8aPWFlgUc1zwL6zs=
Subject key identifier:   C1:59:6F:57:E6:FD:91:51:F1:F7:C8:63:4C:B9:C6:D7:F1:D7:62:DE
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584F71EDA363F03F0445D2C87580
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/68772751-81f6-3fb2-a6e2-8589e977d52c.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     20253
IP address blocks:        2606:bc40:14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:a3:63:f0:3f:04:45:d2:c8:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=3c25f7b6-7dde-4b1d-9b4b-8df6d5c7e453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5c:b0:b2:f2:03:06:5c:05:1d:ff:44:01:ab:
                    e8:35:4f:45:27:7f:1b:43:60:db:c7:1c:76:24:c0:
                    d3:fe:81:22:a1:4c:f9:fb:9d:5e:aa:f8:d1:75:fd:
                    65:9c:08:25:6d:eb:b7:9c:d9:ef:52:71:8b:f9:7c:
                    2e:f1:21:3e:51:50:f9:bf:d8:88:b2:f2:e0:19:36:
                    0b:c8:67:a3:36:f7:e4:b8:6c:52:a3:bc:8e:15:e1:
                    72:e0:bb:05:de:c5:f6:15:70:07:b8:fa:4e:16:0d:
                    18:59:3e:74:24:17:71:46:3c:cb:72:69:79:e7:57:
                    f9:cc:9e:9d:bc:4c:49:9d:31:35:e5:d9:22:7b:3c:
                    33:17:ba:f2:56:2f:84:ba:99:57:6b:dd:48:28:0c:
                    ef:cc:7c:52:75:76:ed:c4:16:3d:4f:e2:5d:73:39:
                    c7:94:a4:9a:44:e9:27:b9:8c:0e:62:b9:47:cf:15:
                    bc:1a:b7:89:af:a6:82:c1:62:16:4e:d9:df:a8:2c:
                    25:f6:03:f6:17:6d:24:1c:0d:29:e8:c2:65:74:f9:
                    88:21:e5:1a:e5:e6:d6:29:55:74:0a:a2:76:5f:ee:
                    69:c9:0b:04:01:df:0f:f6:02:51:43:c9:05:83:94:
                    6c:ff:b1:61:13:15:b4:29:f1:fa:13:f0:8c:39:a2:
                    c2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:59:6F:57:E6:FD:91:51:F1:F7:C8:63:4C:B9:C6:D7:F1:D7:62:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/68772751-81f6-3fb2-a6e2-8589e977d52c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:14::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:cc:67:1d:98:86:ef:0c:cb:fa:ad:16:1a:67:cc:4b:c4:bd:
         ff:1b:4c:7d:58:d1:2b:9c:77:e9:c6:fd:12:c0:17:11:77:48:
         42:68:03:b7:9d:01:a3:83:8a:7f:24:e3:4a:22:02:39:b9:ef:
         d6:5c:66:da:aa:23:f6:82:b6:52:af:3e:9b:10:6c:24:4a:50:
         01:66:6a:15:25:fd:ea:2e:33:a8:a5:5e:bc:3a:04:c2:f2:f1:
         03:f6:a9:74:7e:e6:17:7d:64:2a:c0:88:f4:39:2b:00:2f:c2:
         43:93:1e:04:e8:09:12:11:53:75:f7:39:95:0f:5e:15:78:7f:
         7f:f0:24:0b:75:ca:ca:34:b5:e9:67:7f:76:24:78:ac:58:71:
         1e:2b:81:2f:73:53:88:6b:a2:b9:ad:ec:71:4a:83:5f:8d:ec:
         33:37:1a:9f:71:2e:08:e4:7f:01:29:bd:8c:bd:ef:02:d7:e7:
         54:83:20:28:8f:c6:f5:76:c3:6a:3e:f4:50:a8:8d:59:10:d1:
         97:71:92:01:99:bc:4a:90:c5:73:51:a5:34:71:a9:05:49:99:
         f7:31:23:fc:c7:a1:8d:6f:d7:be:72:c7:8d:70:2f:4a:cd:3e:
         4c:7c:cc:bb:ce:ed:53:d7:1b:ce:d9:e3:6d:8a:c9:4f:a0:54:
         48:20:fe:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 08:05:18 2026 by rpki-client