Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bc6862a1-f13d-3fcc-9eb6-9be3b398f52d.roa
File:                     bc6862a1-f13d-3fcc-9eb6-9be3b398f52d.roa (raw, json)
Hash identifier:          JQiC+Rt4it2W+cj3Bgd8dXkfmjCs4aZTyw3ePj1QJ9c=
Subject key identifier:   B1:92:9C:AE:A9:9C:24:54:CA:D4:78:E6:B3:AF:ED:33:03:54:41:18
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A84124E192B02F76BB9CB4180
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bc6862a1-f13d-3fcc-9eb6-9be3b398f52d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2e8a:cc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:4e:19:2b:02:f7:6b:b9:cb:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3a73eddb-cd6a-4eeb-869f-3c0a69a2c99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:24:35:2e:dd:ff:c0:8d:71:d2:25:ef:19:5d:
                    9c:d9:07:96:d7:06:4c:60:f5:c0:85:47:46:2e:bd:
                    7d:c3:44:60:3d:77:af:52:6e:06:33:73:0e:81:ef:
                    d9:9d:5b:66:ad:63:ee:ae:0a:b3:6e:93:0a:e0:32:
                    17:ae:d0:a0:cc:d0:b7:49:84:40:51:ca:7d:02:10:
                    b3:f7:0e:18:48:9b:24:a6:7d:a8:28:35:8c:35:b0:
                    b0:a5:92:0e:77:c9:95:5c:85:f2:96:53:0a:08:9e:
                    4d:69:b8:3c:cc:9d:d3:49:87:2e:f5:59:18:85:ba:
                    e1:ba:a5:0a:3b:58:65:c8:fb:0d:95:d9:6b:6f:b7:
                    ed:d2:32:da:dc:9f:78:84:11:c1:3b:24:24:d5:63:
                    5b:2b:eb:cc:6f:c5:e8:d6:75:d6:84:e2:81:50:f4:
                    66:94:ec:7e:b1:73:a8:ae:3a:78:92:06:95:db:86:
                    c9:68:16:92:32:08:5c:90:b7:34:14:2d:b1:0d:55:
                    53:4c:0b:e8:14:9e:c4:cc:d6:62:35:2c:3e:d3:32:
                    03:c8:b3:67:1f:28:72:0e:92:40:ce:de:78:e0:d1:
                    02:9c:89:9c:76:09:7c:13:40:02:08:07:b9:da:ee:
                    f4:75:30:10:40:6e:44:aa:32:f0:4e:a9:eb:41:ca:
                    82:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:92:9C:AE:A9:9C:24:54:CA:D4:78:E6:B3:AF:ED:33:03:54:41:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bc6862a1-f13d-3fcc-9eb6-9be3b398f52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:cc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:59:6c:0a:2a:b3:55:a5:d7:4a:8e:d3:31:c5:35:0e:35:3d:
         b0:71:49:db:15:2c:fb:a4:14:d7:36:97:ff:b9:53:91:cd:ce:
         e2:49:d3:5e:f0:4f:b4:ca:f3:6e:98:6b:a4:21:cb:65:47:b2:
         bf:90:7b:56:e7:01:55:ad:ec:d7:d1:0d:89:e2:56:bd:8e:ee:
         58:94:84:dc:3d:cf:69:67:5a:02:98:ac:e2:94:9b:d9:40:d9:
         ed:c0:60:e1:15:64:6f:6a:4e:7c:99:e3:b8:80:d0:f1:05:be:
         74:8a:1f:25:32:21:a8:07:0b:6b:f9:b1:03:60:b5:4c:07:47:
         0c:2a:d3:58:6f:75:39:39:4e:75:26:f0:35:7e:68:4c:ec:84:
         b3:70:94:69:17:87:7b:74:92:49:5c:8e:3a:5f:0c:15:ad:fd:
         4d:85:a1:36:4a:77:be:85:c5:e9:9c:bc:92:c1:fd:ca:8f:1b:
         4e:b0:8c:8e:c7:a7:63:ce:3c:68:dc:eb:ea:37:ec:3a:57:aa:
         81:67:e2:ea:dc:e6:00:1d:b8:06:b0:6e:8b:d9:5e:b5:a6:cf:
         1e:d2:b1:8a:71:05:35:e6:e2:eb:d1:f1:15:d2:05:a8:18:a9:
         73:3f:be:96:1a:a5:05:4c:be:70:c4:3b:25:88:2f:e8:0c:49:
         78:84:73:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:39:56 2025 by rpki-client