Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/c4c9e815-1aa3-3953-974d-7785d8e76562.roa
File:                     c4c9e815-1aa3-3953-974d-7785d8e76562.roa (raw, json)
Hash identifier:          lXCIgYfgTwKhzf9XjIT4XGVi9H4rV9bfPPx/jpU2WiQ=
Subject key identifier:   EA:DD:A6:CB:08:6A:3F:BD:FC:AC:7C:1C:F5:2B:44:03:9B:51:BC:FF
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584E66DA0801CEBCE20DE085D200
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/c4c9e815-1aa3-3953-974d-7785d8e76562.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     398324
IP address blocks:        2620:96:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:08:01:ce:bc:e2:0d:e0:85:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=9b16ea08-0bee-44c6-9ac1-4ff582baf7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:78:ff:1c:bc:2e:7a:8b:9e:9b:75:2c:f0:ab:
                    b2:8b:97:c2:d6:c5:4a:98:ac:54:ac:af:52:0a:e8:
                    fa:1d:87:42:94:15:b8:f0:17:79:c2:6a:9c:62:7f:
                    f3:c5:e8:78:71:9b:03:03:b2:df:78:fd:ba:be:62:
                    69:62:9e:df:ac:c8:c2:31:4e:1e:fd:70:97:36:e8:
                    3e:9a:36:b6:31:26:97:1a:b0:33:52:1a:5e:79:12:
                    2d:62:74:e3:6d:76:2e:e6:5f:94:18:5f:4a:2b:88:
                    03:e3:5f:12:39:b5:95:46:d0:69:3d:46:63:38:06:
                    13:06:d7:95:ba:24:c7:69:47:d2:31:68:d3:29:1b:
                    74:be:5b:4d:f6:b9:94:83:ef:88:ad:24:65:4a:92:
                    f5:a2:f4:e8:12:5f:bb:12:92:64:43:ad:68:16:7f:
                    d0:4c:41:e3:30:3f:e3:5c:ca:8b:25:21:13:70:84:
                    01:cd:db:73:3f:1b:cf:af:16:31:2a:1f:63:60:25:
                    15:16:75:f6:67:0a:94:da:35:b4:70:ab:5c:3d:2f:
                    bd:e0:77:cd:c2:36:0b:3f:7a:1d:52:4a:67:a8:a6:
                    79:c7:aa:92:f8:0a:64:25:cc:56:3b:58:b9:d6:68:
                    82:16:77:42:ca:cb:66:17:1f:54:57:41:3c:95:2f:
                    66:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DD:A6:CB:08:6A:3F:BD:FC:AC:7C:1C:F5:2B:44:03:9B:51:BC:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/c4c9e815-1aa3-3953-974d-7785d8e76562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:96:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:5f:ba:47:fd:ac:dc:11:0a:d9:e3:6e:c5:4e:70:36:6b:eb:
         42:e0:63:d2:27:79:4d:88:85:ea:f6:bf:ca:e6:47:bb:66:9f:
         c4:56:b3:28:1b:a1:e1:4d:f2:5b:ae:df:c3:b4:80:85:f9:f8:
         ce:d0:d2:92:28:21:37:b8:fa:ce:e7:51:2e:f8:a8:55:61:aa:
         a5:d5:07:a3:20:14:4e:91:a7:8c:e3:d5:6d:73:00:e7:26:a2:
         58:b4:a3:95:d5:c0:29:77:0c:19:48:94:2a:39:44:d7:df:97:
         38:cb:34:4d:8b:24:1a:9c:11:ba:1a:d2:03:c0:52:c5:1a:4d:
         f1:f2:52:62:46:31:d8:4a:2d:39:23:0d:01:74:1c:fe:70:63:
         c2:9a:ed:19:df:fb:a3:20:68:86:a6:23:ae:23:f8:b3:6f:a5:
         3e:8d:8f:ed:b7:0e:6e:dc:18:95:26:ba:89:65:8b:bc:dc:d5:
         48:ba:5e:f8:6b:1e:da:b8:ea:c5:2d:4b:b9:d9:fd:00:88:95:
         c1:ff:39:3c:64:78:bd:3b:78:cb:6c:0f:36:39:0f:c4:df:94:
         d3:e9:28:05:7d:9b:b5:a8:86:97:a0:52:90:33:d6:46:0b:c2:
         5a:a1:de:0e:f6:60:1b:c3:cd:f9:e2:14:92:cd:46:ad:13:5f:
         71:fc:1d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 12:17:55 2026 by rpki-client