Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/eb9be52d-847f-3773-b517-8ee544c8fd23.roa
File:                     eb9be52d-847f-3773-b517-8ee544c8fd23.roa (raw, json)
Hash identifier:          er3MOuidTZLBUEt9GJzAQVn5uWPg6Pvbcw7KigTkl1E=
Subject key identifier:   4C:92:C0:CF:42:34:05:BC:E4:C3:B3:B5:AE:A2:14:28:53:04:CE:AF
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584F71EDA340B4973C1B00A52A80
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/eb9be52d-847f-3773-b517-8ee544c8fd23.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     20253
IP address blocks:        2606:bc40:18::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:a3:40:b4:97:3c:1b:00:a5:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=4c266185-cde1-4cd0-a2df-27578d6d25c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5b:e9:73:82:be:cb:a7:37:51:75:f9:ef:dd:
                    0f:70:6d:ba:d3:a7:f8:f2:5a:36:c0:fd:1e:d5:04:
                    40:95:11:e8:90:32:4d:00:14:7f:c0:d8:e6:ee:10:
                    8e:3f:c1:e8:3e:c9:db:65:2a:49:b2:28:62:be:61:
                    fa:02:25:d3:87:a4:89:de:ab:45:e3:e8:85:03:89:
                    1e:0f:93:ce:5b:78:05:76:6e:20:b3:86:7d:21:6e:
                    2c:89:53:4a:ea:56:ec:31:05:c8:cf:ab:6c:0f:34:
                    59:e2:38:8c:a8:fa:7f:a7:37:e4:27:ef:5c:6f:d9:
                    75:80:69:6f:ea:9f:a7:6f:be:0f:f3:4a:b4:c5:1f:
                    15:6a:57:fb:91:be:68:42:81:e9:1f:2b:e1:fd:77:
                    21:b1:88:05:31:10:1f:c9:1d:45:94:6c:29:76:dd:
                    cd:f9:2e:f8:03:ad:9a:8d:ac:a0:a5:b7:0a:31:8e:
                    6a:f0:06:46:08:46:d7:4d:57:a3:53:38:f3:89:40:
                    8b:40:21:8a:22:b5:c9:76:42:fb:4a:91:44:46:99:
                    83:58:a0:52:36:7b:86:1d:ff:3c:aa:be:bd:5a:18:
                    b7:b6:8b:5d:47:de:bf:ed:43:02:a5:a4:3a:4a:2b:
                    85:49:ae:56:8f:57:b5:e3:66:5b:b3:c4:0f:ad:e9:
                    f1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:92:C0:CF:42:34:05:BC:E4:C3:B3:B5:AE:A2:14:28:53:04:CE:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/eb9be52d-847f-3773-b517-8ee544c8fd23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:18::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:36:3e:d8:66:02:8a:7e:24:78:90:e4:d0:23:08:f1:c9:5b:
         d2:7e:84:b8:37:6a:6e:c3:21:35:52:de:b0:9e:16:72:cf:80:
         b2:42:c3:3d:92:03:df:81:6a:27:78:80:23:66:72:2c:4a:53:
         73:60:6e:8a:3d:2e:9c:fd:7a:6a:cd:e2:c4:0e:e1:3c:4c:04:
         83:86:e7:e6:98:35:53:cb:05:84:8d:34:17:6e:fa:be:3a:94:
         d8:e8:cb:99:b1:62:68:c9:e6:6a:0a:a8:21:da:84:87:fa:ad:
         fd:7c:08:b8:03:29:34:ba:de:dd:81:26:f8:c5:0b:c9:98:ba:
         77:fa:2f:d5:13:84:24:71:b6:8e:11:bb:60:42:1a:62:6d:7f:
         75:d2:d5:e7:92:f4:39:16:81:bb:68:8c:95:7e:f3:2a:f2:a6:
         e1:82:b5:31:86:e0:66:3c:40:eb:79:e7:37:d7:24:44:61:69:
         fd:75:e6:de:ce:24:14:9d:bc:ce:34:fe:e8:c2:3b:26:b0:40:
         47:57:a3:65:09:17:22:f0:49:71:14:a7:7e:8b:95:14:88:86:
         79:09:80:ab:be:77:5a:2e:0b:d3:59:52:ea:28:44:e9:3a:af:
         0b:7e:1d:52:f9:31:83:ba:1f:d6:bf:45:3d:fd:8e:fc:e2:10:
         aa:7e:6b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:01:49 2026 by rpki-client