Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf1e5bdc-8cc4-327d-ba1f-133d427c05bc.roa
File:                     bf1e5bdc-8cc4-327d-ba1f-133d427c05bc.roa (raw, json)
Hash identifier:          Q8wrtRhvoGV71AvIzxDnXfpxUij+sPrPTIDvy4HiJW0=
Subject key identifier:   82:A5:9F:62:B1:1F:E5:CD:62:D3:C0:31:AD:B8:1E:A8:49:07:99:8E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EA79892727C2295479594E5E0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf1e5bdc-8cc4-327d-ba1f-133d427c05bc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        2604:2e8c:7000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:92:72:7c:22:95:47:95:94:e5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1a563411-2911-40f0-85f5-2782992786cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:fe:bd:9f:82:ac:9e:f0:90:e6:dd:21:b9:
                    b7:df:f1:51:8c:bc:c0:a3:2c:8c:60:fb:45:b8:61:
                    01:34:45:2d:d4:ec:2a:e6:88:58:5c:82:94:81:58:
                    07:6e:04:29:8c:9a:d4:46:d6:52:5c:0c:79:77:af:
                    5c:e9:8f:47:1d:a0:37:7e:a4:e2:74:41:33:71:f1:
                    d7:22:2e:fd:a1:64:44:18:b5:9b:61:6d:f4:84:ca:
                    ed:0a:56:54:4e:da:2e:b6:de:c3:2a:fc:df:07:97:
                    42:38:19:f9:89:8d:d5:4f:9a:25:53:a2:18:b1:7f:
                    01:d7:7b:a1:0f:6a:9c:fc:22:33:27:19:80:7f:b4:
                    a4:db:b4:32:4a:90:3d:54:2c:65:cd:f1:5a:8e:02:
                    36:c3:4c:8f:c0:03:00:3b:42:83:d4:25:fc:20:24:
                    96:1e:f7:ab:96:ec:b7:2c:5a:30:2a:bb:5c:e6:33:
                    f4:7b:07:15:f3:9c:0d:93:de:aa:fe:07:1e:6e:30:
                    28:f1:81:2d:4b:5a:46:18:1a:1c:80:c4:a3:02:1b:
                    63:6b:b3:47:5c:13:e8:06:43:8b:2c:7a:4a:a1:41:
                    50:c1:4b:bf:59:2d:70:a5:73:f3:92:54:94:04:3f:
                    9d:68:7b:17:24:19:d7:dd:2f:2f:8e:61:61:4d:62:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A5:9F:62:B1:1F:E5:CD:62:D3:C0:31:AD:B8:1E:A8:49:07:99:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf1e5bdc-8cc4-327d-ba1f-133d427c05bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:7000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:fe:92:4f:0d:44:eb:1a:b1:40:21:a3:7f:89:81:9f:2a:01:
         bf:25:33:ed:6b:fa:6b:6b:d4:5b:7e:14:c4:49:fd:fe:d2:ac:
         f1:a1:0c:30:4c:77:c1:03:fd:ab:b4:37:18:1d:6b:a7:5c:66:
         aa:80:09:4d:be:94:cd:cf:d6:f9:13:59:0f:80:c3:7f:e5:19:
         72:11:e1:ae:04:e9:51:0a:f1:37:dd:f7:76:92:0c:b2:a5:f4:
         19:3e:36:4a:7b:64:9f:04:1b:5a:28:df:50:72:e0:4f:d5:8e:
         78:5f:9f:26:78:66:75:35:d9:b7:c3:82:aa:28:15:dc:49:11:
         82:dc:7a:77:02:cb:3e:e6:20:43:9d:98:b2:83:8f:02:89:fa:
         02:0c:17:eb:26:fd:43:9f:8c:fe:dd:36:3d:30:91:5f:f6:8b:
         49:ba:87:00:c3:02:77:74:10:69:70:53:66:91:12:d4:12:d1:
         28:c3:62:b7:fb:9d:99:0f:a7:2d:40:e5:f3:b1:ee:ee:1c:02:
         bf:47:34:3c:b5:56:7a:9f:5a:99:6a:0e:f4:18:2d:6c:42:82:
         a5:df:11:50:76:9b:87:af:3a:6a:82:6a:6c:1b:61:f0:44:e9:
         f3:dd:e0:21:75:b2:00:13:0d:80:61:48:34:fe:61:74:00:65:
         f9:d8:01:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:55:17 2026 by rpki-client