Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc01c5ca-0ead-3352-878a-4003bf1cc818.roa
File:                     dc01c5ca-0ead-3352-878a-4003bf1cc818.roa (raw, json)
Hash identifier:          iUXdLUaz3dNa8eAJQPiF+jif77MgVXHs7ZaOvm9vUcA=
Subject key identifier:   60:C1:15:EA:BA:DC:71:3A:1C:EF:FF:65:E4:EE:AA:D7:60:4F:79:56
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584F71ED9A5BDA96B41FC61DF720
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc01c5ca-0ead-3352-878a-4003bf1cc818.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     20253
IP address blocks:        2606:bc40:1f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:9a:5b:da:96:b4:1f:c6:1d:f7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=8cc60363-16b7-4a69-8ff3-18a63a2274b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d9:cc:c0:31:ba:7c:7c:34:ce:87:44:30:b1:
                    b0:e0:28:e2:1c:f7:5e:fd:05:63:bc:a5:b6:f0:a8:
                    b9:94:af:b4:a5:84:f7:6d:5d:33:2a:2e:ea:e9:ad:
                    36:75:62:79:9e:09:e8:6b:5a:ae:fd:17:19:d2:c5:
                    ea:4a:4a:28:e8:86:14:44:27:b2:a8:b3:33:b9:f1:
                    a5:c6:78:9b:90:7c:67:d5:d7:87:8d:ec:23:03:e6:
                    20:cb:24:77:6c:34:99:de:80:c8:46:c5:42:a1:00:
                    e4:07:31:7f:2e:84:21:20:80:63:a8:28:3f:47:9d:
                    09:5a:71:21:92:d4:b9:36:d9:62:b7:06:5f:93:96:
                    1d:41:16:5f:c1:be:c2:05:13:63:85:2a:cc:7f:1d:
                    94:27:c5:bc:21:de:1c:2a:a8:83:6b:65:56:8d:ee:
                    12:24:52:63:fb:f8:45:ac:71:55:0b:31:15:79:d4:
                    b0:e9:67:6c:2e:b1:34:11:f8:d8:32:64:8c:ed:46:
                    af:36:85:de:f6:5b:ea:04:d0:94:b0:69:3a:0a:d1:
                    81:94:86:cc:93:6d:2c:ad:9e:86:d6:68:26:77:63:
                    80:ba:54:0e:0c:c6:e0:a7:47:6f:25:41:4a:7d:4a:
                    76:0d:4b:c7:4a:d1:a2:bb:d1:d7:fc:9c:5c:ed:22:
                    b2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C1:15:EA:BA:DC:71:3A:1C:EF:FF:65:E4:EE:AA:D7:60:4F:79:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dc01c5ca-0ead-3352-878a-4003bf1cc818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:1f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:62:04:fa:f4:22:71:25:d1:59:bc:f2:66:85:60:70:4f:2d:
         db:c1:37:32:e5:61:7a:df:12:c4:1c:62:df:bb:9c:ed:99:e0:
         d9:ef:a9:27:4a:83:0f:86:75:ba:92:bd:ec:aa:ab:79:78:40:
         19:b2:b0:e6:38:34:25:fb:7c:6e:31:5a:03:27:64:c8:c8:6c:
         04:29:d5:99:d6:8f:db:93:f7:ad:c3:62:e3:df:30:7e:aa:7c:
         e3:61:63:9c:94:1e:6d:00:94:45:96:20:41:97:81:b7:60:45:
         77:d5:be:76:c6:0c:8f:cd:1d:4f:20:40:bf:99:0b:33:33:98:
         4d:53:d4:82:f0:71:1b:ae:bb:46:00:86:d3:19:75:b3:83:a7:
         c8:0a:1c:4a:fa:3f:69:d4:3a:7e:5d:c7:c9:85:35:e4:36:ce:
         f3:79:fe:35:69:30:74:b4:fc:e6:1a:cf:59:a5:23:46:c1:d1:
         97:e5:34:1c:59:65:0a:c5:9e:52:a6:c0:25:9e:07:e3:b6:3c:
         d7:6f:26:6b:f5:d4:38:9c:85:e9:57:bd:24:2a:7f:73:2a:1b:
         44:2a:d4:7a:dc:58:9e:7f:5f:08:fb:da:51:e7:89:73:00:ec:
         f6:1e:db:13:1c:0b:c8:51:ed:25:28:f2:93:9f:56:7b:15:53:
         59:52:2e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:49:28 2026 by rpki-client