Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/bcc17495-d59c-36cb-ab2f-497dbe63a80e.roa
File:                     bcc17495-d59c-36cb-ab2f-497dbe63a80e.roa (raw, json)
Hash identifier:          xxqoHbWNNF+8p/CQxoaYBS90gzC9JNWi780hnj1EUiw=
Subject key identifier:   EE:50:04:98:62:CB:B3:80:ED:27:70:07:1B:75:DC:C4:CA:D6:21:EF
Certificate issuer:       /CN=81aef195-0247-4104-9f46-f88e0dfd6ca9
Certificate serial:       010D0C9F4328584E50849AD90F2056A1E382C100
Authority key identifier: 0E:84:CA:F5:7E:88:73:D1:27:C9:63:1E:5A:A1:37:56:0F:88:83:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/bcc17495-d59c-36cb-ab2f-497dbe63a80e.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     21858
IP address blocks:        2607:ffa8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/81aef195-0247-4104-9f46-f88e0dfd6ca9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/81aef195-0247-4104-9f46-f88e0dfd6ca9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:9a:d9:0f:20:56:a1:e3:82:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81aef195-0247-4104-9f46-f88e0dfd6ca9
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=3621037c-3db4-46bc-93a1-4571e0789849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:3c:08:a2:78:2c:71:19:64:d3:d7:73:7c:
                    41:7f:1a:a0:d5:78:d3:29:55:df:8b:87:51:17:a3:
                    e2:be:f3:fe:7a:7c:41:e1:96:cb:4b:83:24:08:f5:
                    15:e6:53:5c:54:5a:40:f7:96:2b:56:88:10:2b:53:
                    bb:bb:a1:4f:a2:cb:63:4e:ca:4f:e9:37:b3:a6:bf:
                    97:d9:f7:92:a9:6b:6d:cd:ba:2d:cc:16:ac:c5:39:
                    9e:07:d3:3f:fa:39:82:db:86:ec:c8:3f:08:e0:8b:
                    14:60:de:86:e6:23:37:6e:1e:1f:5d:c9:4e:eb:2c:
                    d9:bd:f8:44:5b:43:70:dd:98:40:78:52:64:f4:29:
                    bd:8e:23:51:ea:d2:63:2e:86:a9:fc:42:d2:e3:00:
                    59:e4:6f:af:a5:ad:82:26:a7:a2:2b:0a:3f:b8:f8:
                    cb:96:24:06:c5:25:ec:5c:ab:3c:95:64:6d:e0:3b:
                    20:0f:a3:a7:ec:e1:a8:c6:85:62:ab:01:55:90:45:
                    31:4b:ef:3c:75:b3:0f:1c:4f:83:ef:ee:31:a8:ae:
                    74:c8:66:ea:d3:de:09:21:92:df:eb:83:fd:5e:4f:
                    50:2e:db:e4:de:69:00:ae:08:cc:2d:30:ce:ed:85:
                    b3:4c:69:ad:64:49:29:6c:04:f4:99:6f:60:2d:1a:
                    f2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:50:04:98:62:CB:B3:80:ED:27:70:07:1B:75:DC:C4:CA:D6:21:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/bcc17495-d59c-36cb-ab2f-497dbe63a80e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/81aef195-0247-4104-9f46-f88e0dfd6ca9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:84:CA:F5:7E:88:73:D1:27:C9:63:1E:5A:A1:37:56:0F:88:83:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ffa8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:70:6e:02:ea:f8:d9:de:42:ca:9f:cb:2c:cb:b3:7a:b0:f5:
         4b:29:66:7a:9d:65:42:ff:d4:51:27:1a:06:14:e3:ff:b4:59:
         d3:14:49:57:08:e9:29:d0:07:73:42:af:00:3e:d6:07:e8:f7:
         40:73:2b:65:1c:9b:b8:d2:13:47:d8:0b:ac:a7:06:1b:50:00:
         e6:35:40:33:fa:99:bf:48:8d:02:b6:96:ca:43:ff:0f:f8:9e:
         18:6e:52:41:ab:49:c0:ed:38:eb:d7:94:c6:8f:88:34:44:b0:
         d2:8a:4b:9a:1d:a1:9c:81:27:65:54:ee:56:b2:4c:23:58:16:
         51:f0:95:3f:3c:49:c5:ac:c3:22:07:4b:5a:f6:a4:f6:dc:fb:
         43:52:28:e8:27:fb:f7:49:03:b7:79:60:2c:b7:de:85:b4:02:
         24:11:a7:73:9b:6a:8e:29:bd:10:a7:bc:9d:06:b6:ad:6a:74:
         6b:28:aa:44:4d:02:d7:47:1c:a0:b7:a7:94:a8:b6:fb:e9:c5:
         22:f5:6a:75:a0:23:ad:6f:52:d3:dd:4e:4c:d7:4e:e8:8b:02:
         aa:a5:3a:ef:59:e3:eb:58:84:db:36:fc:c2:b1:e7:e5:a5:13:
         6d:36:40:df:21:25:fc:2a:1c:13:b2:17:21:96:80:bc:37:a5:
         ac:b6:94:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:16:41 2026 by rpki-client