Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a7013767-de4a-3bb7-8745-c92717794f3e.roa
File:                     a7013767-de4a-3bb7-8745-c92717794f3e.roa (raw, json)
Hash identifier:          dlTRa1FSJTMhpc2F8EI1GSkdB/SC64ybD9fcGda+6Qs=
Subject key identifier:   E1:B4:28:9C:E3:84:D0:8D:20:7D:F2:48:71:B8:77:16:CE:29:51:5D
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584F7A4D97CA77C4733349690880
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a7013767-de4a-3bb7-8745-c92717794f3e.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     20253
IP address blocks:        2606:bc40:f1d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:97:ca:77:c4:73:33:49:69:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=91dada4d-1286-4aa4-8945-d1cd3aa7af00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a6:75:3d:d3:18:b2:77:1f:26:47:41:1a:1f:
                    0a:a6:9b:45:31:82:08:a4:2b:d1:b3:db:45:c6:af:
                    03:2f:14:25:bc:44:f8:85:7c:29:28:c9:3f:54:d4:
                    46:86:c5:1c:88:69:14:f7:d3:d1:8a:4d:cc:69:b2:
                    e2:31:b2:e7:71:11:27:db:fc:62:f1:a4:5d:66:ad:
                    78:af:dc:5b:54:8f:c9:b6:50:d8:38:08:54:d9:b7:
                    d8:b3:3a:27:04:61:03:ed:e6:d0:58:c6:7d:c6:3f:
                    8f:cc:90:82:ae:26:23:02:b2:08:f6:05:12:66:01:
                    e4:73:70:40:17:6e:3a:55:fb:4a:fa:3f:38:80:e3:
                    2b:09:9c:a8:03:66:a9:da:34:a5:a2:70:df:be:f7:
                    2b:91:60:ce:e0:29:d9:48:08:76:4c:e5:f7:4d:0c:
                    3c:08:63:f7:68:c5:fd:d6:75:aa:a1:6f:ea:38:4a:
                    c9:be:a1:6a:ef:47:5a:01:48:c6:6c:0a:29:72:10:
                    74:b0:f9:68:66:80:6d:41:23:4d:1a:0b:0f:64:a5:
                    79:ae:c9:67:d9:01:1d:1f:68:13:e2:71:36:ca:08:
                    f2:ec:03:92:f7:f4:6e:b5:2f:6c:b6:99:ac:70:88:
                    f8:12:63:ef:9d:e3:b0:d5:6f:62:41:f7:13:c5:3b:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B4:28:9C:E3:84:D0:8D:20:7D:F2:48:71:B8:77:16:CE:29:51:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a7013767-de4a-3bb7-8745-c92717794f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f1d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:72:5d:84:e9:08:a7:28:11:08:74:03:b4:fe:cd:ac:b8:37:
         d3:ef:ac:10:c1:57:9a:dd:58:ac:21:82:ec:7a:4f:8b:fe:29:
         eb:c6:fd:e5:58:49:39:e2:a4:78:36:7a:f6:71:61:7c:a8:99:
         27:94:9d:12:ce:cb:a3:55:ef:18:76:40:1d:e8:43:0c:b0:2d:
         85:2f:79:e9:b0:51:37:2f:0c:b8:a1:1f:8a:3b:ba:71:f7:92:
         a4:62:c5:37:cd:9d:76:09:47:25:be:75:e5:f5:c4:af:6c:44:
         18:2a:6b:fa:16:89:dd:5a:38:d6:c0:d0:68:9e:50:be:1e:19:
         00:4f:38:39:56:e7:b9:f5:8e:31:56:9a:2a:90:62:68:b1:4a:
         b7:e8:13:1a:8d:e8:62:ed:8a:3b:c4:b8:a2:52:34:2c:89:28:
         b4:21:4a:93:8b:e0:08:3e:fd:7e:17:b8:54:f2:09:55:83:7b:
         15:80:2f:15:21:ae:7e:0d:22:12:cd:b1:fa:d8:ad:3a:ef:72:
         8a:81:39:9f:55:18:b3:63:a0:c2:29:d4:63:a8:a8:00:99:5c:
         53:61:8b:4b:eb:6c:af:84:02:5c:c7:72:e1:8b:fd:10:73:ea:
         ea:e2:15:9f:e1:79:66:db:bf:a6:a2:f9:fa:fe:d8:82:f6:2c:
         17:fb:53:c6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE96TZfKd8RzM0lpCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
OTFkYWRhNGQtMTI4Ni00YWE0LTg5NDUtZDFjZDNhYTdhZjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqZ1PdMYsncfJkdBGh8KpptFMYIIpCvRs9tF
xq8DLxQlvET4hXwpKMk/VNRGhsUciGkU99PRik3MabLiMbLncREn2/xi8aRdZq14
r9xbVI/JtlDYOAhU2bfYszonBGED7ebQWMZ9xj+PzJCCriYjArII9gUSZgHkc3BA
F246VftK+j84gOMrCZyoA2ap2jSlonDfvvcrkWDO4CnZSAh2TOX3TQw8CGP3aMX9
1nWqoW/qOErJvqFq70daAUjGbAopchB0sPloZoBtQSNNGgsPZKV5rsln2QEdH2gT
4nE2ygjy7AOS9/RutS9stpmscIj4EmPvneOw1W9iQfcTxTs5jQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOG0KJzjhNCNIH3ySHG4dxbOKVFdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvYTcwMTM3NjctZGU0YS0z
YmI3LTg3NDUtYzkyNzE3Nzk0ZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8d
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA1yXYTpCKcoEQh0A7T+zay4N9PvrBDBV5rdWKwhgux6T4v+KevG
/eVYSTnipHg2evZxYXyomSeUnRLOy6NV7xh2QB3oQwywLYUveemwUTcvDLihH4o7
unH3kqRixTfNnXYJRyW+deX1xK9sRBgqa/oWid1aONbA0GieUL4eGQBPODlW57n1
jjFWmiqQYmixSrfoExqN6GLtijvEuKJSNCyJKLQhSpOL4Ag+/X4XuFTyCVWDexWA
LxUhrn4NIhLNsfrYrTrvcoqBOZ9VGLNjoMIp1GOoqACZXFNhi0vrbK+EAlzHcuGL
/RBz6uriFZ/heWbbv6ai+fr+2IL2LBf7U8Y=
-----END CERTIFICATE-----
Generated at Tue Oct 13 22:48:17 2026 by rpki-client