Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bc6862a1-f13d-3fcc-9eb6-9be3b398f52d.roa
File:                     bc6862a1-f13d-3fcc-9eb6-9be3b398f52d.roa (raw, json)
Hash identifier:          PyG8t3Bv3HE2bAtw9/iAothcTrFhGSSikdHzj8NuhIw=
Subject key identifier:   94:35:6F:85:A6:0F:FB:00:FA:92:DB:58:0C:89:26:BF:5B:9C:A0:C8
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D24E1235B1EA5CED49FA1E000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bc6862a1-f13d-3fcc-9eb6-9be3b398f52d.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     30036
IP address blocks:        2604:2e8a:cc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:23:5b:1e:a5:ce:d4:9f:a1:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=71741e74-dc63-44bb-88f2-e897e0cdf18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f6:4a:ad:80:6b:55:6a:7a:45:b0:5e:20:56:
                    76:18:e9:cc:a8:cf:26:5d:4a:18:22:c3:d3:af:36:
                    17:98:36:7e:9f:57:3e:22:24:5f:ec:d9:fb:14:d4:
                    a7:46:e6:a6:63:de:ce:cb:91:0c:5e:bd:38:3c:0f:
                    0a:5e:75:38:18:bf:fc:c4:0b:d2:f7:80:cd:3f:44:
                    b6:f5:8d:55:1a:fd:97:ba:be:85:3b:6b:10:83:37:
                    25:54:fc:55:8f:e8:81:a7:4e:2b:b0:7d:12:5a:1c:
                    81:4e:64:31:c7:86:0a:64:d2:0e:cf:f2:31:ed:65:
                    62:b8:39:1d:64:a6:bc:da:3e:c5:00:e1:0a:4a:d9:
                    bd:90:4a:29:3f:c2:2c:ea:44:06:ec:25:5a:a6:5c:
                    d4:65:d8:9e:4a:f9:21:11:4d:bc:d0:f1:7d:91:a6:
                    f7:e8:13:d3:44:c1:c4:0d:35:86:fb:89:a5:c1:82:
                    76:8d:a9:34:4d:1c:3f:64:8a:0a:db:e6:e1:34:4c:
                    4f:f5:2f:2b:7a:b0:52:45:6b:d7:f7:57:c9:14:d4:
                    a0:5d:fb:ad:9e:ec:ba:a3:8b:d6:dc:1b:bd:64:13:
                    fc:f4:4f:ed:0f:1f:1b:4b:5a:ae:ea:6d:67:57:47:
                    72:d6:42:67:13:c2:cd:7d:4f:95:e2:8e:83:ea:6c:
                    fe:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:35:6F:85:A6:0F:FB:00:FA:92:DB:58:0C:89:26:BF:5B:9C:A0:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bc6862a1-f13d-3fcc-9eb6-9be3b398f52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:cc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:94:3c:30:32:ab:6e:86:2d:7d:b6:17:7c:f8:98:c7:01:a4:
         a2:f2:39:23:dc:a9:bb:25:ba:06:f7:8b:3a:1a:b0:a4:f3:ce:
         c2:fa:67:09:df:2f:c8:c5:f4:70:de:ea:7f:55:8d:45:62:8f:
         38:26:f9:8e:ac:12:e9:a7:0f:0c:f2:0d:9a:13:8b:15:1b:45:
         80:2c:f1:75:e8:83:3e:55:4e:8d:66:bb:1e:dd:3c:fb:98:6f:
         68:7e:4b:df:e6:05:cc:00:5e:d9:cb:a9:53:c6:63:d5:6a:41:
         7a:6e:49:0f:03:72:27:e0:41:83:d9:95:ce:18:d7:37:cb:fc:
         79:1d:d9:e9:09:9d:b9:cd:4e:dd:ec:30:55:26:98:7c:d5:18:
         be:ac:91:31:77:19:4f:5d:cd:d2:71:32:9a:b1:6e:b5:c5:44:
         0a:ff:20:e6:14:37:b3:57:c6:03:f4:2c:53:b0:04:2d:e6:10:
         91:9b:c8:d7:fe:29:9d:1e:32:8c:0e:cf:46:5b:b2:24:12:62:
         fa:11:26:69:1c:dd:c2:34:7e:b5:c4:77:bc:02:79:d7:5f:2a:
         98:3e:9b:4a:b5:05:0b:c6:ba:9a:7c:0d:c9:bc:c2:25:9b:0b:
         af:17:dd:0f:92:32:bd:6a:55:0e:47:36:3c:72:50:c4:cf:40:
         22:e8:29:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:07:30 2026 by rpki-client