Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bc8c1de0-49b5-38df-838b-beb87cad869e.roa
File:                     bc8c1de0-49b5-38df-838b-beb87cad869e.roa (raw, json)
Hash identifier:          Y9nonIpN5fjGjUOsaZ763szoy2rgIYubhtS/GaNTYX8=
Subject key identifier:   2F:DF:28:CB:3A:32:D3:15:54:AC:6B:EB:83:3E:E6:22:36:0B:33:38
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584B64CCBDE0606E217399A8B200
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bc8c1de0-49b5-38df-838b-beb87cad869e.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     2734
IP address blocks:        2605:6c00:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:bd:e0:60:6e:21:73:99:a8:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0e1d9651-9847-4872-801e-57da9ce8af6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6b:ad:44:b8:b1:23:42:9c:a8:d9:c0:06:cd:
                    4d:eb:46:24:45:cb:d5:e5:13:a9:14:45:50:29:5a:
                    87:85:23:78:b6:e7:77:17:cd:43:c6:7a:71:56:73:
                    3f:33:a8:f4:38:67:c8:9e:d3:df:26:11:15:63:94:
                    63:52:97:da:c5:b3:4d:28:bb:e1:3a:96:5e:cc:1a:
                    fe:04:70:eb:18:66:fc:71:12:11:49:1a:54:88:aa:
                    d8:72:61:cf:31:6f:be:04:55:df:89:5a:3b:56:40:
                    81:06:a5:03:23:bd:ce:a3:07:01:42:e9:4d:78:ac:
                    c8:cb:77:c6:7a:af:e8:ab:77:de:ad:b4:72:5c:a9:
                    ac:48:a0:55:4b:b4:dd:6f:7d:99:a3:1a:e6:0f:29:
                    53:b1:79:62:06:a2:4c:a6:a5:f6:65:6d:45:0d:4b:
                    f0:1d:fd:b6:c0:99:48:5c:61:21:64:e0:cd:85:9d:
                    77:c6:a5:ed:ce:c1:11:e0:92:c4:35:4b:59:76:e9:
                    72:21:2b:a4:3e:e9:c5:1f:ed:f5:73:21:61:85:e9:
                    01:34:bb:30:d6:e7:15:de:8b:03:98:fc:69:09:44:
                    18:32:fe:ff:f7:83:03:c5:e5:42:26:cc:2b:7b:5b:
                    f6:cd:79:6b:ad:e6:29:07:fc:0c:24:7b:20:5f:f0:
                    61:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DF:28:CB:3A:32:D3:15:54:AC:6B:EB:83:3E:E6:22:36:0B:33:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bc8c1de0-49b5-38df-838b-beb87cad869e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:7c:35:f4:31:52:fe:df:16:d0:9d:f5:7b:20:ba:93:e6:6f:
         d8:8a:be:a7:78:ae:cc:9d:60:9c:b2:d3:70:80:9a:92:55:03:
         4c:f0:aa:9d:d8:5d:2f:3b:53:dc:cd:50:1c:3c:7b:34:4a:a9:
         6b:72:e9:c8:6e:0a:df:75:1f:df:ed:c0:fc:7e:76:60:1b:01:
         10:f7:0f:a6:2d:0a:d4:32:7f:28:92:31:79:83:4c:ea:2a:18:
         df:7c:82:b8:eb:69:6b:e5:39:02:ff:fb:c8:b2:20:50:e6:4c:
         70:30:fd:51:7a:5f:9f:7b:c2:b8:a8:25:e4:b5:4d:0c:8f:aa:
         0d:1b:5c:16:b1:31:56:1a:f8:14:1b:71:53:ec:d7:ca:b5:78:
         7e:76:54:27:f7:16:2e:4f:cf:83:81:10:59:8f:72:b8:5c:c1:
         81:e6:9b:e9:51:3c:9f:45:ae:39:4c:28:9f:65:44:e3:61:63:
         6f:41:ad:48:20:e6:4e:d9:98:4a:fc:4d:2b:19:7f:28:4d:23:
         27:a8:2c:66:f1:d7:9f:b1:d8:65:f5:d1:0f:37:cc:84:c6:9b:
         1e:ef:e5:bb:7e:03:9f:81:18:5b:93:5d:2b:6a:4e:4c:a5:38:
         eb:6c:39:5d:bf:d6:d9:96:9a:f8:60:9e:57:d8:ec:ea:dc:ce:
         9b:4d:f0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 20:41:13 2025 by rpki-client