Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/fb6b62a8-3273-3c53-bf32-8bb8797ad187.roa
File:                     fb6b62a8-3273-3c53-bf32-8bb8797ad187.roa (raw, json)
Hash identifier:          OJPV1E7KlIPS+1qIU/4JDuct7wzEQif5+N99QVa2+oU=
Subject key identifier:   F5:C4:0E:BF:EC:11:BA:8D:E3:3B:F9:FF:20:27:E7:36:93:40:1E:A8
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584ED001EBA4B16F01199C300980
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/fb6b62a8-3273-3c53-bf32-8bb8797ad187.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     20253
IP address blocks:        2606:bc40:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:eb:a4:b1:6f:01:19:9c:30:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=55777544-8165-430e-8229-50edd59da0a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:04:06:a1:aa:4d:4c:7a:20:72:99:a8:48:03:
                    bd:6f:07:e1:cf:8c:e2:69:4e:85:04:68:83:e6:e7:
                    10:91:8f:3a:12:bd:6d:f9:f0:37:09:a6:3a:be:44:
                    25:bc:cc:62:89:59:50:56:c4:93:ca:4b:c6:f1:0c:
                    24:b8:9f:9e:bd:6a:f0:8e:09:90:01:3e:8f:f3:60:
                    db:24:e8:d1:d0:cb:42:2a:3b:f9:fb:b4:e3:fc:68:
                    6f:f0:91:22:fe:02:40:16:d5:04:29:73:25:9e:ab:
                    dc:75:0a:6a:ae:a4:4e:02:ea:45:73:3b:4b:c3:26:
                    43:32:f7:9a:d1:d6:da:4c:fe:c9:19:3a:e1:0b:2b:
                    5e:4b:7f:29:8b:e1:d5:56:53:0c:fa:81:fb:1c:ec:
                    27:13:d4:61:c3:97:36:d7:ee:bf:ba:c9:fd:e7:db:
                    db:55:5b:40:ce:3b:23:b8:d2:da:7a:91:eb:e9:7c:
                    e2:df:bc:cf:08:06:e5:56:56:28:6e:ef:0e:7b:59:
                    e0:5f:e4:4a:d3:fc:c6:84:0e:98:89:28:0d:5f:18:
                    b3:72:20:5b:b2:e7:4d:af:a6:06:d0:c6:16:5e:29:
                    11:d8:2c:c0:12:d9:e4:91:ac:44:ef:92:13:cd:67:
                    dc:11:0c:73:0d:b2:f2:24:f9:6e:47:88:c6:61:24:
                    bd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C4:0E:BF:EC:11:BA:8D:E3:3B:F9:FF:20:27:E7:36:93:40:1E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/fb6b62a8-3273-3c53-bf32-8bb8797ad187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:db:f8:bc:a3:3a:0f:cd:98:e7:42:24:83:1b:35:23:1c:e6:
         cb:df:64:fc:e0:aa:22:88:71:9a:65:8f:eb:fd:f4:76:5c:c9:
         3d:1b:05:3d:50:f1:c9:49:3c:36:18:42:3c:b6:96:16:42:8b:
         2c:ae:1d:e4:d7:dc:85:f4:2d:b7:66:1d:08:35:d9:18:af:57:
         b6:77:38:e8:26:f7:23:d0:0e:66:b8:d1:45:e9:e8:d3:1f:40:
         99:7c:f6:bc:f2:a8:54:19:4f:2f:5a:ba:53:d7:40:cc:c8:e7:
         c6:dc:47:ce:c9:06:5c:94:dd:c2:a2:c5:9b:b4:88:66:38:f2:
         e0:e4:05:5e:64:a4:dc:00:9c:fa:88:4c:61:cc:06:3d:8c:20:
         37:27:d6:22:83:5e:e3:ee:cb:35:fa:45:dc:80:7a:ad:07:ad:
         e3:63:fa:b3:91:26:ab:34:18:13:d2:da:1f:89:a6:d4:a2:ca:
         b9:6a:34:72:52:a6:44:a8:45:a1:48:95:b9:54:1a:bd:f1:08:
         d3:cc:1c:70:39:5f:e3:1b:9e:8e:26:29:37:92:aa:50:53:f1:
         45:b5:b4:8c:3f:4b:04:4b:98:d5:2f:9d:fc:98:2f:f0:a3:d4:
         8a:f9:ea:da:8c:d0:c4:b7:e9:84:48:eb:8c:bd:cf:21:0f:fa:
         f9:6e:11:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:57:15 2026 by rpki-client