Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bd203c48-2338-38c2-9b37-f5d4266c901a.roa
File:                     bd203c48-2338-38c2-9b37-f5d4266c901a.roa (raw, json)
Hash identifier:          tcShZAZIp2igm1uJrYJ2h+PTDLw4T3k9WUlN6lvnU8s=
Subject key identifier:   AB:A6:BD:02:C1:AE:30:BC:80:EE:9F:AC:EB:B3:F5:77:EA:A8:21:E9
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E090FF66CBFEE38FF63E0
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bd203c48-2338-38c2-9b37-f5d4266c901a.roa
Signing time:             Tue 12 May 2026 13:06:40 +0000
ROA not before:           Tue 12 May 2026 13:06:40 +0000
ROA not after:            Mon 10 Aug 2026 13:06:40 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2f7::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:09:0f:f6:6c:bf:ee:38:ff:63:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:40 2026 GMT
            Not After : Aug 10 13:06:40 2026 GMT
        Subject: CN=911b4f4f-1a83-4424-a889-2681a31427f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2a:4a:e7:4e:04:81:85:91:6f:28:22:d4:5d:
                    b4:c1:b6:e8:78:82:e7:57:dd:5e:e8:3f:56:d5:d9:
                    c8:54:b9:e6:ca:62:b8:4e:54:db:59:1c:64:39:24:
                    3c:ba:62:fd:b4:98:f1:45:d9:08:22:08:b3:99:c7:
                    af:5d:75:74:6b:1c:d2:44:46:a1:be:e9:85:05:09:
                    12:44:11:94:58:92:98:a7:2e:a8:13:48:da:dc:ce:
                    c4:64:05:7d:8b:7e:f6:cc:69:87:8e:f5:7f:14:c2:
                    dc:9d:be:81:63:a8:94:79:74:86:32:bc:f3:0e:74:
                    61:8f:d5:1e:be:ab:4f:60:8b:cb:65:c8:79:7b:6b:
                    54:ab:04:72:1f:95:ae:77:04:90:48:f0:80:a7:1e:
                    12:d0:28:7e:2b:87:77:65:d9:d6:3b:73:29:ea:a6:
                    57:a7:91:94:57:ca:db:f0:43:04:4e:87:74:5c:2b:
                    f9:6b:43:dc:af:fd:91:87:92:03:17:5f:54:e2:46:
                    21:35:71:4f:44:1f:b7:fd:90:84:c4:62:4a:57:8d:
                    f1:35:90:6e:c6:26:7c:ee:4f:25:31:71:b9:fc:2c:
                    90:5c:2b:6f:bf:1a:63:96:50:90:31:27:70:e2:05:
                    97:c9:f4:64:b1:43:10:d1:ac:4b:b4:87:fb:d7:c1:
                    85:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A6:BD:02:C1:AE:30:BC:80:EE:9F:AC:EB:B3:F5:77:EA:A8:21:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bd203c48-2338-38c2-9b37-f5d4266c901a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2f7::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:aa:b3:5f:4e:88:a7:c6:35:78:ef:59:d6:2b:d9:d5:d6:7c:
         3f:7e:9e:5a:1b:77:84:27:f5:22:9c:97:45:b7:ce:0d:9d:8b:
         af:75:03:6d:dc:d3:92:02:7d:a5:8a:f1:61:b7:c7:3b:a6:4a:
         de:73:5c:c9:4f:b8:1b:8d:f0:ea:4c:8b:a5:c6:0f:94:45:de:
         46:ab:66:8f:de:17:f2:14:43:a8:b0:c8:d9:b5:c7:4b:ec:bd:
         8a:17:c6:4e:44:ce:e2:7f:a6:25:3c:d8:8f:d5:c0:82:b5:b9:
         a7:d7:c4:d8:7c:d6:81:88:2b:ca:3f:93:41:0b:fc:b1:c0:0a:
         b9:b7:72:80:2c:e7:1c:45:7e:8e:90:63:90:89:2f:4c:ad:97:
         b4:43:da:f7:4c:d5:a1:3d:95:3b:6c:9b:3c:7b:06:c7:e7:f4:
         42:2b:9e:fe:ee:da:58:c5:03:d9:cf:ff:68:a7:54:34:11:cf:
         f6:a9:2c:ee:39:3f:de:63:c2:2b:b3:d6:44:f0:8b:7e:2b:a1:
         62:14:a2:77:d0:86:b4:4a:2c:8a:19:ae:a5:88:6b:c0:32:ce:
         65:85:7e:8f:3b:f2:dc:5b:b5:e4:fa:97:7f:fb:f0:aa:cc:a7:
         8e:20:e4:e0:e3:5f:7c:f7:27:03:8b:82:9c:39:d0:aa:ae:44:
         91:f8:14:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:54:10 2026 by rpki-client