Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bc6862a1-f13d-3fcc-9eb6-9be3b398f52d.roa
File:                     bc6862a1-f13d-3fcc-9eb6-9be3b398f52d.roa (raw, json)
Hash identifier:          jYxC82j2lNOTacTLUTVpAFu/uj/YnM+VKwiTfUq2K34=
Subject key identifier:   28:16:80:C3:59:3D:40:48:2A:E4:30:A5:FA:0A:66:3C:B9:C4:58:D0
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F4989A73D3311E40303C45E00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bc6862a1-f13d-3fcc-9eb6-9be3b398f52d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2604:2e8a:cc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:a7:3d:33:11:e4:03:03:c4:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6ac9b34f-a813-43f4-916e-7a127f1edb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a7:b1:04:85:47:dc:31:9f:14:39:0f:35:3e:
                    0f:77:b8:03:20:e1:ac:6e:89:8c:29:92:12:f8:1f:
                    ba:f7:a2:35:9e:22:7d:0e:f2:cf:80:cc:1b:34:ba:
                    dc:9c:4d:6b:9c:91:55:8c:b1:2c:f6:2f:8f:7e:8b:
                    16:70:c1:6f:ca:e9:c7:2f:21:c5:9d:ae:08:62:8a:
                    cd:2e:0e:51:ee:2f:4c:e6:28:d7:ed:e1:1a:a4:ba:
                    9d:c6:23:d3:bc:27:2a:51:73:71:aa:3b:20:0f:f0:
                    46:2f:71:da:63:bc:21:7a:18:89:f7:2a:fe:d9:dd:
                    8c:a4:3d:80:5b:2c:36:a5:95:8b:cf:a7:7f:36:18:
                    6c:7a:1c:4a:d2:21:b1:1f:8d:82:37:54:77:ed:8f:
                    83:48:81:95:4d:cd:2e:c7:c8:58:cf:cf:92:58:db:
                    df:d5:02:05:71:f9:53:36:51:01:4f:64:3f:e1:65:
                    3d:9e:b8:51:72:ac:1d:6b:33:ca:8b:73:f3:96:12:
                    3c:aa:00:ad:4f:8f:c2:e3:ae:18:12:f9:6c:1e:e7:
                    3b:08:db:fe:3e:62:0b:c2:8c:e5:2b:e5:04:ec:0d:
                    2d:06:08:b6:0f:b6:b3:70:94:60:4e:70:d8:9b:fa:
                    b1:76:b8:b2:d9:13:1e:a5:19:f7:54:35:d0:46:4f:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:16:80:C3:59:3D:40:48:2A:E4:30:A5:FA:0A:66:3C:B9:C4:58:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bc6862a1-f13d-3fcc-9eb6-9be3b398f52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:cc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:9d:d3:f5:73:2a:b8:74:29:ae:50:4d:41:9c:55:95:f9:ba:
         15:9c:46:36:b5:24:fe:e1:d7:a6:dd:5b:46:4f:72:b9:ac:85:
         17:66:2f:68:74:7c:47:17:98:81:3e:b4:c2:d8:9d:5c:ee:b2:
         60:70:8a:d3:38:0e:9e:a1:01:41:01:fe:94:be:60:ab:0c:52:
         70:17:aa:29:77:47:2e:8f:ab:9e:52:ff:66:05:27:96:63:f0:
         61:d7:30:19:e0:f1:3b:7a:c8:2b:a3:c5:1a:49:99:1b:de:87:
         b0:78:90:04:48:62:61:9d:48:3b:36:4b:31:e3:9b:fa:13:d6:
         2d:57:39:e5:b0:b2:7a:db:83:28:c6:b9:09:7c:98:88:1a:a3:
         b8:e8:82:bf:c6:fe:83:1e:1a:bf:2f:4c:29:d2:47:98:49:34:
         cc:25:20:f6:bc:7c:82:c5:5b:c3:2d:e3:84:57:a6:58:3c:32:
         c1:5a:53:fa:ea:f3:15:67:46:9e:79:02:30:25:aa:77:5f:bf:
         11:f1:1b:e8:71:b6:af:09:90:1b:84:92:4e:61:27:97:5e:7c:
         00:6e:ce:a7:c1:db:f2:ed:ef:9b:be:eb:88:67:35:0c:b1:ef:
         2b:6f:65:f9:f0:6b:a7:80:e6:af:e6:8c:e4:e2:de:ff:44:71:
         f1:a9:08:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:58:33 2026 by rpki-client