Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bc8c1de0-49b5-38df-838b-beb87cad869e.roa
File:                     bc8c1de0-49b5-38df-838b-beb87cad869e.roa (raw, json)
Hash identifier:          DkuPzMRDwxbCBtF5tPdu18TBdPA6h8WB/VUjQ2W0deg=
Subject key identifier:   A3:53:9E:9C:E9:01:62:D1:65:66:CB:E5:9D:4B:3B:4C:20:75:19:90
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584F49758C7259F2212697FB1180
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bc8c1de0-49b5-38df-838b-beb87cad869e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2734
IP address blocks:        2605:6c00:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:8c:72:59:f2:21:26:97:fb:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=81a3d299-b16b-4a0c-befe-1cb47c346a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:ae:6f:2c:75:3c:ea:30:90:1a:3d:06:48:
                    32:65:aa:78:73:a7:82:42:81:7c:91:2d:65:bc:f4:
                    37:1e:cc:89:d9:a6:2b:14:48:d4:bb:15:1a:1c:5e:
                    4e:75:61:5e:ce:4d:93:16:df:d4:f0:81:6a:7b:46:
                    58:3c:63:2f:c5:50:f9:89:78:e8:41:a0:5d:0e:c9:
                    5a:59:8b:f7:03:69:ad:aa:4a:4f:43:21:9d:84:ca:
                    e6:4f:b4:16:ae:b3:01:68:ed:53:05:d1:d1:1a:ec:
                    31:3c:05:0f:39:57:14:6f:c2:5a:ac:30:77:be:a4:
                    59:3e:f0:90:f1:52:f4:0b:61:24:11:d7:70:5e:94:
                    94:99:44:06:63:c8:09:ad:9d:22:ed:8e:ca:95:c3:
                    e5:42:34:04:72:1d:26:42:41:f0:e6:53:e6:5b:05:
                    6d:bc:56:36:0a:fa:0d:65:b4:a0:d3:1d:83:6d:2d:
                    4e:8f:99:f8:d0:ae:ea:33:61:53:a4:96:1f:c3:17:
                    6b:d8:86:46:20:ba:33:05:94:d6:f1:3d:89:13:67:
                    13:91:d0:85:6e:f6:ce:b4:f4:a3:f6:3c:ee:2c:4a:
                    af:eb:23:5f:66:8f:ed:89:be:5a:fc:79:61:fe:71:
                    a6:9e:0c:61:4d:c2:9e:99:fc:56:f7:17:91:f7:fb:
                    e0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:53:9E:9C:E9:01:62:D1:65:66:CB:E5:9D:4B:3B:4C:20:75:19:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bc8c1de0-49b5-38df-838b-beb87cad869e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d5:3b:31:18:76:09:32:78:9a:43:fc:ac:45:77:eb:b5:8f:
         98:ae:78:af:66:d8:1a:fa:f1:2c:5c:e3:f0:14:7f:99:f3:59:
         fa:b8:06:08:13:52:7f:58:05:a9:40:fc:34:6c:15:9c:73:d2:
         08:ab:4b:76:1f:a9:f2:14:f2:28:18:1d:46:82:62:87:c3:59:
         f3:29:a3:b2:6b:ab:08:4a:b8:df:e4:5e:ec:08:b0:fe:d6:69:
         7d:a7:05:7e:9a:af:5f:57:aa:12:97:a5:87:2c:60:3d:9b:d5:
         f0:0c:96:d2:4c:82:63:99:b2:6f:8e:c8:f3:d6:cf:9b:18:de:
         ff:4f:53:c0:df:25:08:3c:e1:9b:fd:31:47:2b:86:c7:ca:1f:
         0e:00:53:10:49:07:bc:03:7c:19:5a:39:76:66:59:c6:79:8e:
         59:df:26:d3:2c:d6:0e:05:2f:d0:a3:a8:20:5b:6e:63:54:ab:
         2d:13:6d:cd:87:40:d9:42:bf:08:fd:60:1d:17:0a:1e:31:ca:
         6b:e1:f3:cb:c9:51:9b:1d:1b:84:14:7a:14:7d:93:d3:4c:d3:
         e1:7e:49:b2:1c:59:5c:aa:82:56:9d:02:52:23:7d:71:ef:5d:
         f6:ac:33:9e:cf:b8:8d:4f:34:02:02:13:b0:b3:a0:d1:34:82:
         9a:61:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:49:50 2026 by rpki-client