Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/34f20233-d5bc-3617-afbe-0de094f26787.roa
File:                     34f20233-d5bc-3617-afbe-0de094f26787.roa (raw, json)
Hash identifier:          XQXY6H5FGWmjfUZ5Ssq76juoZ182HMcdPq8fs7gdg0E=
Subject key identifier:   0F:19:07:A1:C8:E2:80:56:70:FE:34:3F:DA:B0:08:FC:CC:AF:F0:D3
Certificate issuer:       /CN=bc05dec8-13fc-4dc7-9e11-364c06532342
Certificate serial:       010D0C9F4328584E2D9F4082D8990839BEFE3DC0
Authority key identifier: 51:C8:97:12:0C:73:F4:9F:FD:B7:24:8C:7D:91:92:40:21:26:32:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/34f20233-d5bc-3617-afbe-0de094f26787.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     402028
IP address blocks:        2604:2320::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/bc05dec8-13fc-4dc7-9e11-364c06532342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/bc05dec8-13fc-4dc7-9e11-364c06532342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:40:82:d8:99:08:39:be:fe:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc05dec8-13fc-4dc7-9e11-364c06532342
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=ada0ae9d-eeef-4f21-ac18-e1ba90654813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:24:a8:a8:cd:f4:88:bd:2c:1c:7a:33:85:c3:
                    43:00:8c:80:41:06:35:c3:d7:69:53:29:7d:e1:99:
                    12:1a:47:19:34:66:ec:74:e2:30:ef:9c:a3:87:cd:
                    89:a8:52:5d:9b:cf:6b:4c:13:40:e8:32:55:76:9c:
                    22:eb:81:f9:2a:78:9d:57:92:77:72:fc:3d:fb:2e:
                    57:16:78:9b:4d:ce:79:1c:78:99:d4:c0:83:c3:76:
                    79:ae:13:54:e6:b5:eb:37:f6:d3:35:a9:83:f3:6a:
                    f0:84:e2:9a:ac:f4:a1:78:83:59:dd:7b:13:5c:f8:
                    34:dd:dd:ba:ac:31:60:db:ed:9b:4c:4d:da:12:04:
                    ff:0c:f9:0c:38:b7:3a:bc:54:80:2b:65:58:a4:4c:
                    e9:ce:8a:0d:5d:9c:21:39:c2:e1:96:85:30:79:3a:
                    15:00:3a:04:17:05:9c:b5:9b:6f:6d:23:58:a4:59:
                    15:13:7f:08:27:98:64:b9:c5:c1:1e:e5:a2:67:50:
                    76:c8:5e:3c:6b:be:aa:0d:42:4b:dd:6b:b1:21:67:
                    30:ef:5f:f6:b8:8c:8e:e7:3e:28:e7:30:06:5e:3b:
                    2a:05:69:92:48:61:05:8d:36:f7:9b:f7:41:02:62:
                    e2:27:25:de:9c:48:a6:67:1c:36:c8:82:96:81:43:
                    03:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:19:07:A1:C8:E2:80:56:70:FE:34:3F:DA:B0:08:FC:CC:AF:F0:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/34f20233-d5bc-3617-afbe-0de094f26787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/bc05dec8-13fc-4dc7-9e11-364c06532342.crl

            X509v3 Authority Key Identifier:
                keyid:51:C8:97:12:0C:73:F4:9F:FD:B7:24:8C:7D:91:92:40:21:26:32:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2320::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ff:83:95:2d:d1:c0:4b:77:d8:a4:05:aa:b9:6b:02:37:7f:
         9e:29:4a:0e:1f:00:64:a1:74:b6:85:71:fd:fa:60:84:d4:9b:
         f1:60:9d:2c:cb:3c:0a:7e:0e:87:b5:72:74:b5:cd:34:f7:0b:
         33:4b:25:5b:60:b6:b0:4e:73:18:31:1f:dc:c0:c1:0c:65:24:
         0f:68:96:51:f4:78:f2:cc:23:6d:f0:6c:9b:25:cf:f8:fa:ff:
         9a:5f:76:a6:91:8f:44:ed:bb:c9:bd:4f:d8:99:79:46:97:c0:
         d3:9e:88:c8:59:e1:bd:85:10:da:a8:44:4d:f7:12:d7:3e:59:
         5f:e9:e8:5d:e2:1e:bd:49:27:02:f6:3d:6f:ed:7d:90:53:53:
         9b:96:e9:51:c1:68:fa:fa:71:b8:1f:cc:b7:a6:d4:7d:d1:3b:
         cb:13:c6:80:9b:1b:e5:d5:df:ed:77:81:65:ed:1a:49:46:ca:
         7f:5a:0f:1f:80:9a:e8:11:b9:8d:fb:88:6b:8e:cd:cd:1a:c3:
         56:07:a8:5f:0f:99:0b:e5:19:a7:18:fa:c3:8e:6f:d3:ad:45:
         3a:42:c0:a8:83:d9:25:d6:52:27:9d:2c:8a:f9:75:d8:01:50:
         9f:71:50:6a:a2:7f:7e:84:bc:e0:ef:8a:05:bc:dc:5b:88:86:
         a2:65:24:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:28 2026 by rpki-client