Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/bc6d38e4-2368-3d18-b69a-f7c976c31a73.roa
File:                     bc6d38e4-2368-3d18-b69a-f7c976c31a73.roa (raw, json)
Hash identifier:          L8IEn7OO2J2QL0fQoLGlUYiFBN/viizUcVi1EpwND8A=
Subject key identifier:   0B:4F:49:CB:D4:C7:9E:93:B4:23:0B:B1:E9:D9:22:2D:70:72:3B:53
Certificate issuer:       /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial:       010D0C9F4328584E48247B49FE0EB712A3273B00
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/bc6d38e4-2368-3d18-b69a-f7c976c31a73.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     395661
IP address blocks:        2607:bc40:103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:7b:49:fe:0e:b7:12:a3:27:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=4c3ec911-2269-4a2a-bf96-f1eb2c2594d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:76:09:70:90:3b:8c:f0:97:0b:5c:74:86:09:
                    9f:bd:d3:ca:11:23:08:c2:19:e8:95:f8:12:21:ac:
                    6a:16:03:f3:4d:46:e0:65:5d:c2:e8:d9:30:92:5c:
                    d2:20:f8:f0:62:62:47:f0:02:23:3e:12:e2:da:4b:
                    cf:36:f1:b0:9a:60:38:fb:d5:37:e2:8b:8b:7a:98:
                    60:5e:6c:0c:e3:c1:c3:c4:be:cf:7b:07:1b:7e:f0:
                    95:8a:c0:a8:4b:05:bc:d8:9c:19:6e:85:7d:e3:c0:
                    d6:35:a7:e3:36:d1:d5:6d:6e:cd:20:27:d6:fa:09:
                    a7:05:f3:8d:b3:b0:9c:4b:7d:e1:ff:ee:f5:25:67:
                    69:4c:cb:55:b6:18:93:22:b4:50:12:96:ab:55:40:
                    e4:a0:29:57:c7:76:d6:cb:61:ff:bf:32:4f:57:86:
                    cd:e9:93:64:2a:1b:38:58:ab:d5:95:58:28:53:17:
                    cc:2d:37:71:1c:a2:ba:d4:3c:a8:1a:b5:0d:d0:ee:
                    e3:71:ad:e5:7b:31:19:52:41:ab:88:df:28:21:ef:
                    3b:ab:aa:a9:90:5b:23:5a:35:0d:bb:43:74:0c:2f:
                    e8:80:92:d1:6d:37:2b:aa:d3:97:cd:bd:53:08:b7:
                    cd:72:33:7b:ed:30:af:42:97:96:ef:b7:60:7f:da:
                    4f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4F:49:CB:D4:C7:9E:93:B4:23:0B:B1:E9:D9:22:2D:70:72:3B:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/bc6d38e4-2368-3d18-b69a-f7c976c31a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bc40:103::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ab:57:79:34:a5:2c:f9:d8:70:7f:e1:61:43:1b:2f:d0:82:
         a0:2d:06:17:f9:f4:50:bf:e4:3a:03:04:fe:bd:af:dd:9f:49:
         c5:8f:60:8e:3e:d0:1b:4e:95:48:f6:15:04:df:ec:28:e4:00:
         b3:c6:e8:e7:dc:7a:ed:54:3d:66:13:0c:82:e5:df:3f:50:2c:
         bb:af:07:89:73:31:de:70:3c:08:c9:6a:b7:bd:b9:a0:1a:7b:
         05:4c:02:8b:1c:fb:64:01:74:4f:40:37:4f:e1:2c:25:b0:a4:
         8a:4a:c4:43:a5:1e:fa:e6:3a:f6:88:67:bc:dc:f8:76:03:59:
         08:fa:04:64:70:c1:52:f2:11:8d:0a:46:2b:1c:50:ed:b3:df:
         24:46:11:24:69:88:ed:29:3e:07:12:d9:1c:70:be:84:3c:6b:
         bd:26:62:24:3e:49:8a:66:15:c7:ff:f8:c7:63:75:2e:e5:b6:
         5e:06:d3:26:45:44:e6:b4:d6:ee:92:47:c3:93:f9:9e:9a:d4:
         ab:b0:89:92:cd:0b:91:53:5f:76:18:ce:31:84:c0:ab:6a:ec:
         4f:a6:fa:fb:a2:dd:d7:7a:1e:d8:48:9b:30:51:59:29:bd:f9:
         00:10:62:28:93:ee:9b:8c:89:85:ab:48:93:d1:3a:68:45:dd:
         ac:90:47:c7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5IJHtJ/g63EqMnOwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWEzZjkwNDQtYzE4NS00MDYyLThkYWQtMjQwYjMyYjEx
MzQ4MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
NGMzZWM5MTEtMjI2OS00YTJhLWJmOTYtZjFlYjJjMjU5NGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHYJcJA7jPCXC1x0hgmfvdPKESMIwhnolfgS
IaxqFgPzTUbgZV3C6NkwklzSIPjwYmJH8AIjPhLi2kvPNvGwmmA4+9U34ouLephg
XmwM48HDxL7PewcbfvCVisCoSwW82JwZboV948DWNafjNtHVbW7NICfW+gmnBfON
s7CcS33h/+71JWdpTMtVthiTIrRQEparVUDkoClXx3bWy2H/vzJPV4bN6ZNkKhs4
WKvVlVgoUxfMLTdxHKK61DyoGrUN0O7jca3lezEZUkGriN8oIe87q6qpkFsjWjUN
u0N0DC/ogJLRbTcrqtOXzb1TCLfNcjN77TCvQpeW77dgf9pPrwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAtPScvUx56TtCMLsenZIi1wcjtTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lYTNm
OTA0NC1jMTg1LTQwNjItOGRhZC0yNDBiMzJiMTEzNDgvYmM2ZDM4ZTQtMjM2OC0z
ZDE4LWI2OWEtZjdjOTc2YzMxYTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZWEzZjkwNDQtYzE4NS00MDYyLThk
YWQtMjQwYjMyYjExMzQ4L2VhM2Y5MDQ0LWMxODUtNDA2Mi04ZGFkLTI0MGIzMmIx
MTM0OC5jcmwwHwYDVR0jBBgwFoAU/qCdkBIn9seDsTYB8Pa28gt/KOYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lYTNmOTA0NC1jMTg1LTQwNjItOGRhZC0yNDBi
MzJiMTEzNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJge8QAED
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE6rV3k0pSz52HB/4WFDGy/QgqAtBhf59FC/5DoDBP69r92fScWP
YI4+0BtOlUj2FQTf7CjkALPG6Ofceu1UPWYTDILl3z9QLLuvB4lzMd5wPAjJare9
uaAaewVMAosc+2QBdE9AN0/hLCWwpIpKxEOlHvrmOvaIZ7zc+HYDWQj6BGRwwVLy
EY0KRiscUO2z3yRGESRpiO0pPgcS2RxwvoQ8a70mYiQ+SYpmFcf/+MdjdS7ltl4G
0yZFROa01u6SR8OT+Z6a1KuwiZLNC5FTX3YYzjGEwKtq7E+m+vui3dd6HthImzBR
WSm9+QAQYiiT7puMiYWrSJPROmhF3ayQR8c=
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:46:24 2026 by rpki-client