Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa
File:                     bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa (raw, json)
Hash identifier:          liZwXaI/WuHRwxfiypZlzmewX+JzZ8o4BsP1GfjDioY=
Subject key identifier:   96:55:2C:72:E0:7B:59:3C:C0:E3:45:D7:26:41:42:11:67:00:AB:19
Certificate issuer:       /CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
Certificate serial:       010D0C9F4328584D7B6A8D4A29C992836AD17A80
Authority key identifier: CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     398698
IP address blocks:        2605:eac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:8d:4a:29:c9:92:83:6a:d1:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=8ef100b5-4951-4f62-959b-481a97db4a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:27:ff:1a:ca:fb:84:13:99:cc:8c:d3:68:80:
                    78:3f:a9:6b:d2:f8:19:b3:a8:09:66:2d:27:f8:b3:
                    03:77:78:7e:19:86:fe:c3:a8:8e:ba:92:68:93:7f:
                    85:a6:6f:8d:1c:34:66:ea:0e:eb:39:78:8f:e2:ca:
                    0c:1e:4d:49:33:b3:b0:a2:7c:fd:27:aa:3c:db:85:
                    19:7a:a8:2b:0a:66:55:55:6a:1a:d2:a7:32:f6:17:
                    b9:3c:46:75:6e:da:9b:23:a9:79:f4:c3:f0:ec:14:
                    0f:18:cf:e3:bb:b7:10:b3:b5:c0:ab:5c:ed:95:a9:
                    ff:2d:ae:80:0c:c3:bd:16:83:df:1c:79:67:0a:09:
                    c6:b8:7e:7a:b4:74:bd:d5:37:d7:be:e6:d0:e0:78:
                    d6:c6:c7:c2:30:8e:62:b2:73:48:e2:f7:a3:eb:29:
                    74:97:ec:33:51:ab:0c:ae:31:37:13:60:24:31:15:
                    2e:a3:8b:a5:5c:ce:58:94:da:fc:d8:19:70:f8:98:
                    bd:58:45:8b:26:0a:b7:89:71:34:15:f9:fe:4d:77:
                    2c:68:ad:6e:68:12:42:49:e2:4e:7f:4a:e3:ca:03:
                    e8:d7:d9:ad:c7:62:48:da:42:9d:e8:b6:a6:79:84:
                    d7:87:b5:1f:25:60:94:65:fe:a3:6e:07:88:14:ee:
                    7c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:55:2C:72:E0:7B:59:3C:C0:E3:45:D7:26:41:42:11:67:00:AB:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl

            X509v3 Authority Key Identifier:
                keyid:CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:eac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:da:6f:5f:ec:87:b4:99:30:9c:f1:13:14:ac:53:78:46:bb:
         df:a7:0f:87:4d:50:2c:99:42:7e:58:e9:2e:6f:0a:eb:fe:e1:
         42:0d:e3:5e:02:85:63:9a:db:90:19:9f:14:3e:7c:51:22:73:
         29:73:ae:ac:94:1f:24:99:62:4b:76:e7:9d:73:0f:aa:49:e7:
         42:c8:5a:91:a1:59:20:70:ad:9e:ba:14:0a:bd:67:f1:b1:39:
         a1:fd:dc:81:55:de:e7:a9:95:ab:f2:4e:00:3f:90:e4:84:85:
         27:88:a8:f1:7b:9d:0b:38:f6:d7:f8:7f:40:5e:5b:53:06:a0:
         94:1a:dd:41:97:7e:54:60:5c:1c:e5:e4:ad:62:c5:31:e0:e7:
         37:95:fc:dc:fa:6e:87:fe:2b:dd:16:aa:fb:a2:1e:b4:1f:63:
         89:a0:8e:eb:d0:80:43:13:f3:60:2a:d5:54:e7:52:3d:1e:fa:
         fa:a8:4e:48:50:a8:72:1f:42:8e:c3:30:3d:6a:53:fd:57:ef:
         d8:5d:39:85:a2:8c:f4:a0:a4:20:dd:7b:98:1a:93:2e:dc:ef:
         4b:91:21:ca:60:b4:37:ed:a1:d1:b9:58:ac:56:0b:0d:22:8a:
         a0:b2:47:4c:42:bd:b5:e0:8c:f0:83:a9:76:60:c8:a2:67:9e:
         0e:49:9b:95
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE17ao1KKcmSg2rReoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmMzYmNjNmQtNjY3OS00MTljLTgzMDAtYmRlYmRmZmM4
ZmZkMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk
OGVmMTAwYjUtNDk1MS00ZjYyLTk1OWItNDgxYTk3ZGI0YTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyf/Gsr7hBOZzIzTaIB4P6lr0vgZs6gJZi0n
+LMDd3h+GYb+w6iOupJok3+Fpm+NHDRm6g7rOXiP4soMHk1JM7Owonz9J6o824UZ
eqgrCmZVVWoa0qcy9he5PEZ1btqbI6l59MPw7BQPGM/ju7cQs7XAq1ztlan/La6A
DMO9FoPfHHlnCgnGuH56tHS91TfXvubQ4HjWxsfCMI5isnNI4vej6yl0l+wzUasM
rjE3E2AkMRUuo4ulXM5YlNr82Blw+Ji9WEWLJgq3iXE0Ffn+TXcsaK1uaBJCSeJO
f0rjygPo19mtx2JI2kKd6LameYTXh7UfJWCUZf6jbgeIFO58kwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJZVLHLge1k8wONF1yZBQhFnAKsZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzNi
Y2M2ZC02Njc5LTQxOWMtODMwMC1iZGViZGZmYzhmZmQvYmYwZDhmNWEtMzdiZS0z
MWQyLWJjNzEtMjIyMzdiNzRhM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzYmNjNmQtNjY3OS00MTljLTgz
MDAtYmRlYmRmZmM4ZmZkL2JjM2JjYzZkLTY2NzktNDE5Yy04MzAwLWJkZWJkZmZj
OGZmZC5jcmwwHwYDVR0jBBgwFoAUzFl5ydXy4Gr4nyVPeIQbduNl5EkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzNiY2M2ZC02Njc5LTQxOWMtODMwMC1iZGVi
ZGZmYzhmZmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXqwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAc2m9f7Ie0mTCc8RMUrFN4Rrvfpw+HTVAsmUJ+WOkubwrr/uFCDeNe
AoVjmtuQGZ8UPnxRInMpc66slB8kmWJLduedcw+qSedCyFqRoVkgcK2euhQKvWfx
sTmh/dyBVd7nqZWr8k4AP5DkhIUniKjxe50LOPbX+H9AXltTBqCUGt1Bl35UYFwc
5eStYsUx4Oc3lfzc+m6H/ivdFqr7oh60H2OJoI7r0IBDE/NgKtVU51I9Hvr6qE5I
UKhyH0KOwzA9alP9V+/YXTmFooz0oKQg3XuYGpMu3O9LkSHKYLQ37aHRuVisVgsN
IoqgskdMQr214Izwg6l2YMiiZ54OSZuV
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:27 2026 by rpki-client