Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/bc4fe2a6-7da3-382f-9fbc-27c9e7990314.roa
File:                     bc4fe2a6-7da3-382f-9fbc-27c9e7990314.roa (raw, json)
Hash identifier:          Bk6WvoPHYg3rWUaIoNpcTllTxMppkP86Qgz7AimKF0o=
Subject key identifier:   7C:A5:36:FC:10:5F:75:50:B7:C3:87:DF:EB:45:76:89:59:03:7D:B8
Certificate issuer:       /CN=c15b8440-9734-4ec3-ad87-b3e0c47586dc
Certificate serial:       010D0C9F4328584F549D44C39F0CBAF5DA997880
Authority key identifier: FF:17:0B:AE:47:7C:44:66:95:8F:A1:ED:33:77:5D:AD:D2:67:8B:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/bc4fe2a6-7da3-382f-9fbc-27c9e7990314.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     62633
IP address blocks:        2606:cc0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:44:c3:9f:0c:ba:f5:da:99:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15b8440-9734-4ec3-ad87-b3e0c47586dc
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=b5c2c3b7-609f-40d6-9707-f4a2ec5d77d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:75:c6:3e:d5:a0:68:41:2d:e2:c9:c2:05:a1:
                    b1:56:27:9a:ea:cd:a0:0d:4f:a6:13:ff:37:4e:ca:
                    1f:8d:00:5e:8b:8c:be:81:c7:aa:dc:4d:bf:60:d6:
                    e7:c2:53:b3:03:0e:2b:8d:46:46:56:d3:03:40:6e:
                    fc:05:e6:39:2c:31:03:35:dd:64:02:a0:36:f9:7e:
                    39:2f:c3:d4:4c:cd:0e:de:2a:8c:e6:7a:a8:97:ad:
                    8f:9a:8a:cb:02:d6:4b:e0:31:59:da:c4:36:e9:5f:
                    9b:4d:65:71:d2:eb:2d:75:df:e0:68:70:31:ae:a9:
                    01:58:c9:6b:41:d1:a3:2c:ed:f0:7a:31:95:00:53:
                    73:3f:5f:b8:b9:81:7d:13:ca:c6:36:99:c1:e8:6b:
                    70:29:a1:dc:d0:61:c9:a6:c5:cd:c9:60:2c:70:c7:
                    82:2d:f7:90:b4:82:4e:a4:bc:fd:95:00:bd:30:77:
                    5c:2a:c4:5b:b6:3f:3b:16:65:62:43:94:43:78:2c:
                    73:e4:41:2d:54:d5:fe:fc:a2:69:e7:31:c6:2e:b9:
                    9f:6a:81:de:be:2b:78:86:da:02:03:a5:ff:e8:c3:
                    c0:95:d4:be:04:0a:7b:fd:61:cb:8e:05:de:8c:39:
                    53:12:d4:44:7d:d8:d3:0a:03:76:5c:16:ba:fb:9d:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A5:36:FC:10:5F:75:50:B7:C3:87:DF:EB:45:76:89:59:03:7D:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/bc4fe2a6-7da3-382f-9fbc-27c9e7990314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.crl

            X509v3 Authority Key Identifier:
                keyid:FF:17:0B:AE:47:7C:44:66:95:8F:A1:ED:33:77:5D:AD:D2:67:8B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:cc0:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:de:e8:c9:3c:6e:de:f7:32:ff:d9:66:e1:bf:f3:7a:cb:35:
         48:3d:c8:3a:4d:7e:c6:0f:6f:d3:ac:ea:87:e9:5c:c5:8c:a7:
         88:81:a5:b0:94:34:1d:70:fe:84:d4:5c:6d:50:bb:86:b4:82:
         13:d0:75:b1:8c:d0:aa:65:3a:3d:94:93:a9:72:d8:b6:8d:3d:
         fe:ed:87:79:58:5e:b8:be:ff:17:45:c5:1a:2f:da:4b:90:00:
         21:a5:70:73:5f:a1:87:f4:8f:ba:ce:a0:be:ca:50:bf:60:f1:
         fe:35:99:1e:0b:66:d3:e5:12:42:f8:81:60:b4:3f:f2:36:1b:
         77:02:c3:79:15:04:8f:45:78:2a:ad:b2:d4:2a:e8:33:b0:32:
         8b:0b:a5:02:2b:93:8a:8a:8a:aa:0f:42:f5:cb:e8:ee:ff:21:
         31:39:53:3d:ea:6e:94:b5:91:0f:ee:89:f1:89:8e:cb:bd:7e:
         6e:25:54:be:9b:7e:63:6c:74:f3:26:3c:e0:24:d8:8f:2d:48:
         8a:ae:73:c7:73:b5:f5:db:fc:ea:e7:c1:5a:89:52:42:30:f2:
         4e:ac:0d:1f:77:5a:74:03:0c:de:87:68:8e:42:a9:ab:4d:30:
         af:ad:2c:43:34:79:8f:88:b1:05:91:5b:75:12:0f:4c:16:4d:
         cc:b6:f0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:44:41 2026 by rpki-client