Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7fc4090d-d0b8-3c02-8ba1-d51951663445.roa
File:                     7fc4090d-d0b8-3c02-8ba1-d51951663445.roa (raw, json)
Hash identifier:          y5GqfDoFxqUYcfIAyStW9VRtcyPmytaviFmHkRUFP4k=
Subject key identifier:   C5:05:AB:8A:5F:41:C3:41:7F:7E:30:ED:52:2B:D8:F2:7A:F1:83:D0
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584ED001F4F1062837B898F023C0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7fc4090d-d0b8-3c02-8ba1-d51951663445.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     20253
IP address blocks:        2606:bc40:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f4:f1:06:28:37:b8:98:f0:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=47130409-39c3-4df6-8fa2-623b86373f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a4:20:ff:45:2f:6f:8a:48:bb:c5:28:49:79:
                    77:ab:b7:31:e6:fc:ab:86:82:ec:23:cf:ac:5f:09:
                    9b:02:f8:17:0c:ff:c0:1e:b9:c2:b4:90:15:99:9c:
                    03:cf:47:86:e0:94:1f:85:7b:b7:27:b0:a1:bb:7a:
                    07:c6:99:09:9c:53:1c:43:a9:db:f8:4f:e2:ae:db:
                    f8:e7:d1:c4:88:c9:53:c2:81:38:5c:61:52:d2:da:
                    27:2a:73:7a:19:40:97:e4:93:06:12:79:03:df:c9:
                    5b:ec:d2:6f:47:7c:cf:7b:2d:d4:11:fe:23:0e:2d:
                    9e:08:83:c9:5b:3e:0f:61:09:c6:97:3b:27:76:fe:
                    ae:80:86:a3:1b:a2:ae:d9:35:1b:6d:e2:84:b1:d0:
                    79:16:8c:da:1c:d0:4a:05:fd:28:b9:0c:e8:e0:e4:
                    70:53:9b:23:be:10:43:15:23:f4:ba:dc:8e:25:d9:
                    9f:0b:0f:c6:c7:0b:49:2e:20:69:6f:97:46:3d:32:
                    a3:6e:cd:45:6f:2a:a1:1e:65:a7:4a:1a:a6:4b:4e:
                    bf:7a:cc:b5:09:fc:76:6f:1c:bf:cb:4e:c8:a2:25:
                    c4:dd:63:3a:3d:01:08:75:cc:66:ea:48:66:d1:3c:
                    ec:ef:34:44:b1:07:b7:2e:b6:60:61:2c:30:9c:9e:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:05:AB:8A:5F:41:C3:41:7F:7E:30:ED:52:2B:D8:F2:7A:F1:83:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7fc4090d-d0b8-3c02-8ba1-d51951663445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:78:0f:39:48:b4:43:4d:d2:9d:9e:b8:93:01:90:90:fe:84:
         73:a1:56:e8:98:7b:14:2d:c1:45:b5:7f:94:bb:c1:6a:01:e6:
         a6:ff:e6:7e:b3:01:10:41:59:d7:3b:72:53:00:f4:46:dd:51:
         e1:32:03:71:fb:35:22:f2:dc:e4:a6:22:69:fc:3c:65:90:bd:
         2b:10:ed:ec:88:4a:4a:7b:b5:41:d5:13:b9:31:4a:06:5b:94:
         af:2d:55:4f:b4:47:62:71:15:58:89:d4:7f:31:75:d2:73:3c:
         f7:0c:23:55:3c:c1:63:13:37:c9:ca:cb:61:55:d8:42:f5:4c:
         44:10:60:82:89:84:cd:02:d0:b5:50:18:da:91:b6:97:3a:e9:
         50:5a:ea:fb:83:3d:62:05:30:39:bd:3e:b9:64:17:6b:22:a3:
         18:46:4d:51:80:3d:cf:ca:fd:2d:3e:8c:a5:52:c0:da:1e:ac:
         90:1b:85:75:18:93:b3:91:c2:fe:e3:09:89:44:ce:c2:a3:47:
         d9:49:32:7c:b9:15:30:49:37:8d:58:cd:11:18:0f:73:97:31:
         2d:4d:15:b2:3c:66:95:52:1a:03:f8:37:e1:a4:0e:17:61:51:
         b1:3c:3f:80:3d:81:32:f4:77:92:4c:81:bd:ae:d2:76:73:4d:
         80:cc:17:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:56:13 2026 by rpki-client