Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f1bbd65a-219c-3a5e-8202-9e0541272dca.roa
File:                     f1bbd65a-219c-3a5e-8202-9e0541272dca.roa (raw, json)
Hash identifier:          mfJAtbjX7L/8r+8yZvZBznLz8qcZljIscn/MjlAGuXo=
Subject key identifier:   96:17:C4:16:9A:57:F5:42:35:6B:D8:1F:4A:2E:02:14:9D:3D:F1:3D
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584E2D9F1E76EF4F6416E54F6B60
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f1bbd65a-219c-3a5e-8202-9e0541272dca.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     20253
IP address blocks:        2606:bc40:106::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:1e:76:ef:4f:64:16:e5:4f:6b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=67917a5b-fa72-46fc-ac5a-cdb2648515b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9c:b8:3f:8c:1b:70:56:5e:f1:93:96:fd:e5:
                    fb:95:0a:4b:26:79:39:fa:b0:62:69:48:c6:6f:a4:
                    23:37:6b:9c:13:b6:2b:db:41:23:c5:c9:1e:7b:5e:
                    2c:fe:a9:8a:6c:0c:be:50:44:01:30:d8:2a:24:ac:
                    7e:11:09:b8:05:e2:f9:c4:3f:18:ca:25:87:a5:43:
                    7f:d5:1a:b3:c0:85:d5:ba:85:20:9e:7d:89:1f:1e:
                    a2:31:9e:d4:93:62:19:d2:a8:74:64:b3:b8:20:55:
                    40:20:1a:d0:37:f8:62:3f:4a:4a:e6:72:bf:60:c9:
                    69:5f:af:d7:75:9b:cb:18:78:33:a6:20:67:f2:b1:
                    a1:97:97:01:7d:13:f0:aa:74:3f:9d:58:ba:9c:62:
                    3f:2e:ab:e9:9e:0c:4b:39:a6:ae:ab:35:dd:41:be:
                    c1:54:ac:27:d4:8d:26:1f:ba:e1:57:ac:14:cf:e0:
                    fe:af:c5:9c:30:0f:a7:e2:d8:c7:fe:93:b5:54:88:
                    3d:d8:3a:dd:2f:04:b6:4f:4c:57:84:00:44:d5:11:
                    3b:61:d9:0c:bf:61:e1:2b:d0:3f:2e:53:d1:0d:b1:
                    d1:b5:4f:71:ac:a6:0f:6a:71:97:ed:6c:0d:13:33:
                    c2:ae:95:84:41:af:a0:27:76:19:d7:ff:53:68:9c:
                    bf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:17:C4:16:9A:57:F5:42:35:6B:D8:1F:4A:2E:02:14:9D:3D:F1:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f1bbd65a-219c-3a5e-8202-9e0541272dca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:106::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:9f:44:95:c6:59:9c:b7:43:55:8b:a3:6d:41:75:05:71:92:
         39:3d:90:a4:8a:c3:ea:3b:14:e5:89:c6:db:23:94:21:6e:73:
         ab:46:fb:4f:5a:90:76:09:ee:43:38:34:d6:d1:41:fa:03:93:
         84:6b:ce:42:22:a9:a6:8e:17:a2:f7:8e:03:b0:50:aa:5c:a4:
         67:c9:79:ec:2b:20:ae:65:fa:1f:e6:b1:e6:ce:09:78:a2:a3:
         12:a8:03:99:16:ae:99:a6:dc:b5:cd:c3:bc:0e:74:45:da:a0:
         a5:90:89:0a:ff:c4:68:72:c6:c3:d8:ce:15:b2:e4:57:5a:d8:
         10:48:2d:28:bc:89:2a:3d:d4:8a:df:7e:01:15:f2:b5:be:72:
         d9:bb:50:8d:6a:f3:14:27:e3:91:64:c0:14:37:50:0e:e6:10:
         3b:b1:28:84:75:9f:9e:e9:b6:49:de:b3:a4:c6:ca:86:3d:13:
         31:11:ad:9d:4e:cc:d5:f8:1a:82:4c:ef:5a:ef:6a:6a:a3:26:
         25:45:83:b6:b1:60:c5:78:e1:5b:91:fe:aa:39:a3:f2:da:4d:
         2e:d9:2d:b7:a2:c2:3b:35:85:37:49:7f:d9:2c:04:19:f5:46:
         2d:dc:07:f4:10:ad:ed:8a:d7:eb:b9:22:92:dd:43:77:d9:c8:
         85:e5:68:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 20:20:48 2026 by rpki-client