Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/bc4fe2a6-7da3-382f-9fbc-27c9e7990314.roa
File:                     bc4fe2a6-7da3-382f-9fbc-27c9e7990314.roa (raw, json)
Hash identifier:          Bms95fDPLl4OemY92h+lbX8bRKtFokbgWBdiwNNt5IY=
Subject key identifier:   28:86:B7:25:8A:95:95:F4:4C:ED:A5:81:12:2F:CE:80:65:6F:E9:05
Certificate issuer:       /CN=c15b8440-9734-4ec3-ad87-b3e0c47586dc
Certificate serial:       010D0C9F4328584EB14C40FDBC6C824FCE01C280
Authority key identifier: FF:17:0B:AE:47:7C:44:66:95:8F:A1:ED:33:77:5D:AD:D2:67:8B:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/bc4fe2a6-7da3-382f-9fbc-27c9e7990314.roa
Signing time:             Sat 01 Aug 2026 13:00:12 +0000
ROA not before:           Sat 01 Aug 2026 13:00:12 +0000
ROA not after:            Fri 30 Oct 2026 13:00:12 +0000
asID:                     62633
IP address blocks:        2606:cc0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b1:4c:40:fd:bc:6c:82:4f:ce:01:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15b8440-9734-4ec3-ad87-b3e0c47586dc
        Validity
            Not Before: Aug  1 13:00:12 2026 GMT
            Not After : Oct 30 13:00:12 2026 GMT
        Subject: CN=b3c22c21-e9d1-4ff8-93e8-f4e54d0084d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2c:aa:89:8d:0f:ca:91:03:ab:ac:5d:cc:c0:
                    a5:95:c0:29:ab:78:59:3c:49:29:ac:e1:af:1e:e1:
                    bb:62:79:03:a5:1a:0d:a6:3f:f6:d8:f0:1b:b4:6b:
                    22:0f:a9:bd:d3:67:8f:55:7b:2e:81:8a:8c:50:0c:
                    90:53:f9:b9:19:8c:94:48:02:00:97:a4:e3:e3:a8:
                    6c:89:c2:a8:e1:1a:02:6f:01:95:16:dc:41:8a:86:
                    1c:2d:ab:de:54:49:30:5b:4a:06:23:ae:ae:c3:21:
                    36:ba:2c:a2:18:2d:5a:02:0c:d5:cb:ee:61:43:5f:
                    7f:48:3d:ed:f9:22:aa:49:8c:24:d7:13:ac:e5:7c:
                    86:14:55:65:24:f7:2a:f1:45:06:4b:76:90:ed:78:
                    e2:26:cc:43:79:8c:f6:46:c5:f9:a5:42:0b:7d:64:
                    95:26:90:8a:50:2d:dd:3b:3a:42:28:30:1b:67:28:
                    f2:b5:57:20:53:24:ed:a3:99:e8:a5:c9:98:16:dd:
                    3a:45:0b:4a:94:02:bd:4f:41:6f:70:e7:5e:8b:01:
                    3d:a8:4f:4d:26:95:db:cc:9c:79:0f:87:38:89:66:
                    ce:c6:e8:24:30:89:02:1c:ba:96:bb:f7:59:d8:ff:
                    52:0e:e4:26:87:34:58:bf:c6:8c:11:07:92:f1:58:
                    74:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:86:B7:25:8A:95:95:F4:4C:ED:A5:81:12:2F:CE:80:65:6F:E9:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/bc4fe2a6-7da3-382f-9fbc-27c9e7990314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.crl

            X509v3 Authority Key Identifier:
                keyid:FF:17:0B:AE:47:7C:44:66:95:8F:A1:ED:33:77:5D:AD:D2:67:8B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:cc0:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:57:b2:74:08:e6:96:26:76:d7:73:dd:1e:71:09:0c:ac:56:
         0c:e9:cd:4d:81:5a:ac:98:b1:20:5c:c3:47:4c:f2:90:ac:a2:
         b4:4f:90:a0:1c:f9:ff:f2:0e:18:01:24:f1:01:ad:9e:a8:4a:
         47:68:ea:17:39:4d:6f:25:66:05:95:88:fd:34:c1:4f:98:af:
         30:72:b3:c7:f1:c0:fa:e0:41:9b:68:83:cd:bc:a6:00:57:f0:
         8f:81:c1:ac:a8:ec:a4:1f:44:ec:74:99:5c:e6:0b:48:6a:01:
         b8:ce:a4:2f:47:dd:b1:3a:04:9a:0f:32:ac:a1:99:3d:91:06:
         5d:3c:a4:a6:d2:17:b2:05:68:7d:6b:fa:3c:5f:dc:43:1a:81:
         42:ac:e1:df:ea:79:11:68:94:e1:ef:7c:1c:ae:ba:e4:49:24:
         a1:86:74:bd:a6:da:fb:93:f1:40:b8:2b:43:d9:c0:c5:da:be:
         d2:30:9d:a8:65:9d:17:0c:97:8e:34:0d:ca:17:aa:6c:31:7b:
         fd:46:3b:be:d0:a5:76:84:3e:9e:91:96:98:9f:87:a5:79:24:
         34:a9:08:a9:46:43:bb:a6:c7:c1:2c:96:b0:68:92:dd:38:e3:
         6e:8e:b7:ec:2e:95:ea:cc:8e:68:56:1f:a3:cc:14:da:e0:91:
         e6:14:ea:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:07:41 2026 by rpki-client