Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a834fe74-9fa5-3c2c-9083-0ad85e02d398.roa
File:                     a834fe74-9fa5-3c2c-9083-0ad85e02d398.roa (raw, json)
Hash identifier:          x4mX4pZ2hdJ0vfeoUvjjva2QtjcTEv5oVHmT2i9oWco=
Subject key identifier:   D8:8F:28:C3:C9:E9:85:F1:C9:4B:5C:A8:E8:D1:05:BE:95:B8:30:84
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584F71EDA39E77BB23A9041877C0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a834fe74-9fa5-3c2c-9083-0ad85e02d398.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     20253
IP address blocks:        2606:bc40:f05::/48 maxlen: 48
                          2606:bc40:f06::/48 maxlen: 48
                          2606:bc40:f07::/48 maxlen: 48
                          2606:bc40:f08::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:a3:9e:77:bb:23:a9:04:18:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=e3aa6ecf-14fb-491f-aa17-431d9a170acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:1e:b5:8a:77:25:a2:cd:46:c9:8d:50:b8:
                    e2:64:fa:2b:38:a8:bb:9f:81:99:c0:59:08:80:e0:
                    4f:3b:9c:ca:15:10:73:24:ad:06:6d:f6:d4:d6:11:
                    8c:c5:63:0d:c4:46:27:24:4d:51:f8:55:c0:61:c9:
                    f0:1d:f2:6e:13:a3:58:f8:b3:55:fb:df:e7:d9:4a:
                    9f:0b:d7:b2:56:00:17:36:5a:67:4a:c5:00:fb:1f:
                    ab:cc:6b:2f:e3:5b:e0:81:e4:a3:08:99:52:28:7f:
                    20:42:44:89:6a:f3:c8:16:11:47:83:1f:aa:67:b6:
                    d6:e0:b1:9b:cb:45:f2:54:cb:c7:63:dd:e2:7f:d0:
                    fa:b4:7f:9d:eb:05:33:03:84:86:eb:92:a9:f6:d4:
                    e4:f4:7c:1f:39:3e:a2:3e:c6:e5:83:fd:c7:cc:08:
                    ea:e7:55:83:7e:90:7f:54:43:e3:52:36:9e:b0:ba:
                    7a:34:aa:f1:a4:60:c3:e9:4d:5f:81:f3:7e:cd:c0:
                    7c:84:c2:28:18:b1:14:0b:d9:95:a3:bc:aa:80:97:
                    cd:31:ac:99:0a:9b:b2:d3:7e:62:53:28:cd:1b:e4:
                    67:e9:08:70:bd:ae:fb:94:36:59:79:4c:20:63:3c:
                    93:7f:68:b3:2a:66:d2:59:05:3b:e4:3d:7b:47:52:
                    15:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8F:28:C3:C9:E9:85:F1:C9:4B:5C:A8:E8:D1:05:BE:95:B8:30:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/a834fe74-9fa5-3c2c-9083-0ad85e02d398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f05::-2606:bc40:f08:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:4a:7a:90:bc:35:14:c7:5d:c9:c1:e1:30:4d:06:b8:f3:cd:
         95:bf:0d:77:01:97:57:ca:17:ed:77:2d:72:4d:cc:ce:a3:f5:
         7a:8d:aa:75:03:02:b6:56:c0:45:74:0c:af:0c:47:38:77:87:
         ee:f4:39:92:02:7e:94:3f:ac:4c:50:aa:7f:c8:db:48:ae:11:
         80:2e:5c:f0:de:81:f4:53:a9:12:e1:bf:5e:89:91:06:9c:c7:
         87:2a:63:2c:d3:ae:1e:d3:7b:61:5b:bc:b5:fd:7e:26:44:0b:
         e2:8a:d3:00:5f:33:b5:3b:bf:a0:c2:9b:9f:d7:8e:2e:00:17:
         d0:f0:6d:40:0a:06:d1:e3:cb:b5:59:dd:35:0b:22:1b:c6:cf:
         ba:54:ca:ce:7f:c6:cc:74:0b:63:74:b8:f7:2b:98:06:4c:dd:
         26:3d:ae:d8:45:81:8f:f1:56:1a:5e:85:fa:51:ca:43:d4:92:
         e1:2b:57:04:0a:62:3d:ea:f7:97:f4:89:d5:8c:d8:24:f2:5c:
         bc:01:23:19:de:10:5e:08:75:3e:19:7a:a0:d9:1c:d2:53:bf:
         78:e1:37:b1:a8:0c:b3:67:d3:7e:40:ad:c2:be:65:f3:b6:19:
         7c:69:4f:20:0e:0c:03:69:d1:cc:de:99:3f:c6:e0:68:59:0f:
         1c:17:8d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:01:05 2026 by rpki-client