Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa
File:                     8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa (raw, json)
Hash identifier:          UFZoFoGPI4BeRFbytCypN4VbHm9CTnJANxgppI+og9A=
Subject key identifier:   3A:48:B3:FB:3D:B6:B8:F0:9E:AA:9C:03:B9:27:37:C5:DA:55:5E:0B
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584E2D9F2726A420B09AE02D3700
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     20253
IP address blocks:        2606:bc40:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:27:26:a4:20:b0:9a:e0:2d:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=db61bc85-1d57-4d4f-915d-60fefbecefb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cc:5e:a1:5f:aa:d4:59:05:12:1c:e8:05:de:
                    eb:a2:07:9f:6d:10:13:65:5c:3c:1e:f5:fb:7e:e1:
                    4e:7f:de:b5:82:19:55:50:57:2e:1e:4c:ea:a8:14:
                    00:a9:97:19:90:54:4f:f5:fb:29:7f:80:70:fa:d3:
                    6d:65:c1:fc:cf:af:fa:a4:80:52:24:be:cd:66:18:
                    3e:5b:cb:6c:93:e0:45:84:4b:f8:f8:e2:2a:d3:c6:
                    fa:ec:ec:95:aa:fd:76:4b:93:8c:37:bc:bc:c9:7b:
                    41:7e:6a:b8:b3:e0:b9:35:58:2f:d9:cc:f7:ef:f2:
                    4a:33:66:e1:69:e5:aa:20:99:04:9a:6a:dc:9a:32:
                    07:03:23:53:ca:6f:d3:ee:4a:cc:3a:96:4a:89:c5:
                    c7:62:53:43:af:77:01:97:a5:be:26:a7:e8:17:60:
                    c8:52:96:c6:01:10:78:50:3e:11:9c:b5:d6:e4:3d:
                    76:a6:65:27:1d:2f:35:c5:44:76:7d:6f:0e:1b:e8:
                    15:13:57:72:63:90:69:c7:07:8b:0a:d7:20:07:59:
                    13:53:69:ce:b0:82:1a:25:77:ad:10:53:ea:ee:00:
                    68:99:37:ff:21:d4:c2:5c:da:ce:4f:b8:01:e4:ab:
                    5b:f5:68:3a:55:7f:9b:8c:ab:45:93:89:92:5b:c1:
                    82:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:48:B3:FB:3D:B6:B8:F0:9E:AA:9C:03:B9:27:37:C5:DA:55:5E:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:cc:f7:ff:58:9f:e0:ae:00:59:1b:63:61:90:f5:88:42:c3:
         41:9e:bd:2d:c0:cb:e3:f9:07:57:c4:ae:2a:e0:85:f1:07:fc:
         0b:e3:ab:07:a9:8d:e2:d3:cb:38:b0:bb:82:3e:d8:b1:0e:a7:
         f8:51:be:fd:8b:3d:a6:a4:70:eb:5b:67:8c:8f:63:57:8e:2f:
         48:ed:6d:fb:89:e9:e8:28:19:bf:1a:eb:cc:33:13:b7:0a:58:
         7e:6d:60:a8:36:28:d8:69:e0:4a:a3:88:18:42:7e:81:9f:37:
         7b:42:45:4c:2f:25:0a:8b:75:6c:4a:68:7b:4e:20:36:91:4e:
         4f:e4:14:bd:51:0f:be:8e:62:cd:0b:4c:cd:c3:d3:01:97:03:
         ba:90:21:68:e8:73:ba:cb:62:09:31:01:80:56:59:41:48:5a:
         7d:da:ee:60:c2:c5:e8:6f:ca:e3:c9:18:e6:d8:0e:fc:82:a8:
         45:d3:94:6a:4c:02:19:9c:c4:26:d6:3d:dd:0a:c8:19:ab:f2:
         ab:07:e9:c9:46:24:27:58:bc:84:a6:0a:41:a1:d8:4f:43:ad:
         cc:90:b9:ad:50:00:29:bd:43:b2:cc:9d:bd:81:f6:fa:b2:e5:
         bd:3a:b5:e5:8f:45:e3:06:95:be:e4:76:69:94:70:d6:2b:f4:
         d1:05:46:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 20:20:51 2026 by rpki-client