Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/d2a340e2-9913-39f9-9563-47e663a0eb2a.roa
File:                     d2a340e2-9913-39f9-9563-47e663a0eb2a.roa (raw, json)
Hash identifier:          KeO0jDGiShLSiiYxoW4qrbAHPlfcM9b2hBxkozQ223Q=
Subject key identifier:   FA:0C:36:92:42:60:25:47:ED:B8:A6:4A:BF:9F:3F:00:82:3E:61:1A
Certificate issuer:       /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
Certificate serial:       010D0C9F4328584E7FFA519A71C447EA79D13300
Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/d2a340e2-9913-39f9-9563-47e663a0eb2a.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     11588
IP address blocks:        2607:bb40::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:51:9a:71:c4:47:ea:79:d1:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=9e36e86e-0389-4fd0-b6c1-c48dcac22f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:80:88:6e:17:18:71:73:92:d1:2a:78:8f:
                    c9:27:e9:7a:29:07:ac:e9:7e:87:77:59:67:58:dd:
                    3e:3f:5b:56:d1:94:02:c9:a9:20:d5:b6:68:21:06:
                    cb:5a:66:5a:6e:47:59:b9:7b:ea:24:23:bf:77:b6:
                    8c:69:52:bb:0e:97:1d:8d:62:15:9d:8a:cc:bf:67:
                    86:59:20:44:ad:2f:5e:57:6a:44:f8:4d:da:fe:8f:
                    d2:d8:68:33:8b:22:c9:a1:45:96:21:7a:b0:12:a7:
                    22:dc:25:b3:76:59:ff:48:47:f0:f9:e6:89:5e:3d:
                    b4:71:6b:cb:3e:b8:12:6a:84:a2:75:d0:7d:6d:b2:
                    b0:0d:74:03:27:dd:a0:7b:4b:ff:3e:e4:86:6a:00:
                    11:1c:da:69:7e:11:c3:99:31:4c:50:d5:98:c9:c2:
                    51:a1:a5:d6:3e:f6:1a:dd:22:05:31:5c:af:e5:4b:
                    a8:90:fa:93:e9:5e:98:9a:a0:ea:c5:00:bf:a3:1f:
                    4a:97:15:7e:bd:20:53:5b:d3:11:8c:1b:c6:3e:e5:
                    d9:78:57:a7:3e:a2:25:e4:04:8a:08:47:bc:47:6c:
                    7d:be:a5:62:d9:a0:c5:81:30:99:06:bb:db:4c:ec:
                    82:ab:a7:0d:45:94:e5:c4:5d:cb:da:78:3a:55:72:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0C:36:92:42:60:25:47:ED:B8:A6:4A:BF:9F:3F:00:82:3E:61:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/d2a340e2-9913-39f9-9563-47e663a0eb2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:cf:c0:be:dc:35:09:f7:59:30:10:61:c4:45:64:f4:1a:2b:
         07:22:b1:47:2e:e7:28:2f:72:55:aa:0a:0f:63:d6:fc:f7:94:
         69:ca:43:d6:87:62:6e:e8:4f:60:f3:d6:b6:b2:c8:f0:37:5a:
         29:9a:14:8b:2e:e7:1d:91:73:ec:a0:39:74:5d:ed:66:aa:7e:
         94:40:da:dc:7e:05:6c:bb:11:02:a0:43:7a:86:bd:6d:1b:48:
         69:45:21:bb:3a:71:23:a6:d0:7a:1c:4e:53:84:8c:34:62:e2:
         ba:9d:f0:18:b0:19:d8:65:11:17:85:ae:2d:1e:7e:05:4e:aa:
         bb:57:e4:fd:46:cf:06:71:f7:22:81:44:ed:5b:0f:df:36:95:
         9c:8c:b0:cd:81:e8:2c:c8:33:b3:90:dd:a3:71:ab:98:79:99:
         74:37:82:41:7d:3c:77:fa:4c:9d:91:d0:10:5f:65:f9:28:be:
         11:d8:1f:d9:ad:0e:10:bd:09:2f:04:b4:97:b0:21:ae:fb:4b:
         9e:39:11:2d:23:8f:93:99:11:7d:dd:0f:31:73:6d:eb:1c:01:
         0e:fd:7c:f3:aa:25:14:5e:25:1b:9b:2e:71:d3:33:23:6e:05:
         77:10:9d:cd:1b:18:4c:be:3c:88:c4:78:88:2e:e0:f8:79:61:
         f1:84:c2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:55:13 2026 by rpki-client