Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/34f20233-d5bc-3617-afbe-0de094f26787.roa
File:                     34f20233-d5bc-3617-afbe-0de094f26787.roa (raw, json)
Hash identifier:          1xm8hc/eRZ8gpHHJInchDa2s+Z3JxMxXhoXUyqCQZtk=
Subject key identifier:   BC:D9:50:CE:BE:AF:5C:59:3A:28:55:D6:9F:97:87:29:24:43:90:28
Certificate issuer:       /CN=bc05dec8-13fc-4dc7-9e11-364c06532342
Certificate serial:       010D0C9F4328584ED0020EE2D9B87B51109C9A20
Authority key identifier: 51:C8:97:12:0C:73:F4:9F:FD:B7:24:8C:7D:91:92:40:21:26:32:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/34f20233-d5bc-3617-afbe-0de094f26787.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     402028
IP address blocks:        2604:2320::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/bc05dec8-13fc-4dc7-9e11-364c06532342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/bc05dec8-13fc-4dc7-9e11-364c06532342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:0e:e2:d9:b8:7b:51:10:9c:9a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc05dec8-13fc-4dc7-9e11-364c06532342
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=b640aac2-5749-4e77-81de-55e20e78923b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:11:3c:6d:00:dd:e3:22:3f:25:3b:fe:1f:1b:
                    2a:6a:f8:26:c4:cd:55:34:85:73:10:53:c2:13:1b:
                    3d:b7:40:cf:1a:24:c8:47:33:3b:ee:5d:45:33:1d:
                    eb:ba:e6:a4:21:4b:7d:10:d7:40:91:e1:ab:7e:91:
                    2d:76:92:83:d7:cd:3b:a5:fb:0f:e9:7a:d4:bc:69:
                    2a:45:c4:0f:0f:53:76:f2:36:ac:35:48:48:6e:ee:
                    d1:70:34:97:78:e0:6b:b6:d7:d7:30:61:7f:49:56:
                    e1:b2:e9:42:6c:42:d9:1c:f0:b0:65:f0:48:ea:cb:
                    2e:50:06:99:46:54:93:eb:fc:37:25:88:8f:c0:a5:
                    1b:1a:2b:07:11:46:d4:cc:be:15:01:c3:2a:45:4a:
                    7c:93:5a:f5:a5:ca:d3:33:45:9f:03:8f:0e:31:ac:
                    b3:91:32:b7:4e:45:7b:77:5c:88:04:cd:1d:29:ab:
                    70:fe:2e:ad:7f:71:5e:8e:32:9c:e2:cf:21:cf:f5:
                    3e:8b:07:75:83:75:9a:c3:1a:71:9d:fb:be:49:63:
                    a7:28:12:85:c5:c1:e6:ec:ea:50:1b:9b:e7:10:88:
                    c9:54:81:59:a1:a0:c3:67:06:ab:2c:37:ab:4e:a4:
                    c2:90:ff:7b:89:b2:3e:bc:8a:26:87:63:42:75:e9:
                    7f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D9:50:CE:BE:AF:5C:59:3A:28:55:D6:9F:97:87:29:24:43:90:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/34f20233-d5bc-3617-afbe-0de094f26787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342/bc05dec8-13fc-4dc7-9e11-364c06532342.crl

            X509v3 Authority Key Identifier:
                keyid:51:C8:97:12:0C:73:F4:9F:FD:B7:24:8C:7D:91:92:40:21:26:32:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc05dec8-13fc-4dc7-9e11-364c06532342.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2320::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:68:7e:0e:9c:7b:32:5c:1d:13:26:39:4a:a4:20:fe:7f:3a:
         cf:2c:7e:9c:95:db:00:ca:09:b6:12:be:e1:2b:f2:71:a4:26:
         04:35:ea:6f:d2:f3:36:8c:79:9a:79:80:1b:4f:a6:07:ab:86:
         af:72:cc:ce:e8:41:d3:48:ad:47:9f:ab:f4:83:9e:55:10:33:
         8a:2e:c0:8a:7b:1f:55:aa:c2:38:c0:91:92:f0:b0:08:eb:36:
         9c:3c:39:89:c8:c5:fc:b7:ba:ca:67:a8:c7:e9:59:5f:cb:b5:
         a2:96:59:40:f5:87:31:0b:f5:09:63:fd:79:d7:ac:da:bd:55:
         5a:01:d6:df:6e:31:b4:36:84:2e:3d:eb:b7:1a:db:83:37:93:
         d4:5d:e3:54:65:76:ca:76:cf:0b:6b:27:da:47:27:38:66:4f:
         97:cd:94:1d:bc:b6:ca:1d:9c:1f:91:8b:8e:ad:09:f9:2e:6f:
         35:56:cf:32:f6:d1:5e:73:04:8c:2a:cf:1b:ad:7f:17:ae:3c:
         cc:10:d7:08:95:fa:de:f9:7d:20:81:ba:c8:35:ac:44:ac:b0:
         56:01:b0:07:7f:35:d7:9f:e2:b9:2f:29:fc:db:77:1c:c2:df:
         53:1f:59:d9:cf:32:bb:cc:6c:e8:2b:d6:f1:31:3b:59:d4:36:
         a2:7c:01:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:54:06 2026 by rpki-client