Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bedbe331-da35-35ae-a507-ca91212d59f1.roa
File:                     bedbe331-da35-35ae-a507-ca91212d59f1.roa (raw, json)
Hash identifier:          CQAZNorgFkSV1rWYuqXCkros+IQgaBTWvqMQjXjF78s=
Subject key identifier:   3B:87:94:D2:B6:40:BA:08:B1:CB:F5:59:A4:CD:72:86:6F:6A:8F:22
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E009A4C56548808F37C80
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bedbe331-da35-35ae-a507-ca91212d59f1.roa
Signing time:             Tue 12 May 2026 13:06:36 +0000
ROA not before:           Tue 12 May 2026 13:06:36 +0000
ROA not after:            Mon 10 Aug 2026 13:06:36 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:27e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:00:9a:4c:56:54:88:08:f3:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:36 2026 GMT
            Not After : Aug 10 13:06:36 2026 GMT
        Subject: CN=f528756f-0917-4961-9a28-a0eac70b7220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4e:8a:b5:0b:9c:d4:fa:fb:c2:d5:dc:76:16:
                    d4:01:39:37:1c:6e:d6:16:4e:c9:76:b2:2a:2a:96:
                    40:11:7c:b5:71:d6:88:0e:b3:eb:cb:7d:e6:ed:d0:
                    72:19:b6:36:7e:cb:55:d0:ab:98:4b:95:09:fe:8b:
                    13:54:1f:3e:94:40:2b:43:d7:23:4c:db:20:d1:98:
                    3d:74:3d:7e:53:8a:8b:7b:8f:26:e1:8e:70:63:ea:
                    c8:44:7f:96:64:fa:49:67:b6:2a:7a:46:16:73:78:
                    4c:e3:ff:d5:cb:89:a7:ce:1f:fe:17:0d:fc:47:5e:
                    44:41:fc:eb:da:14:f9:c1:7b:45:0e:db:86:4d:e8:
                    ff:59:03:2d:4f:6e:cf:15:19:a0:34:f7:4d:f8:53:
                    7f:ca:e4:fa:2e:f7:9f:8d:ba:c5:5e:60:6f:95:cf:
                    cf:5e:f8:11:e2:5b:de:81:15:34:7a:a8:18:86:54:
                    8e:fc:41:e2:09:0a:ed:0d:56:e6:55:b8:b1:84:a7:
                    a3:09:67:a0:67:1a:ae:a9:05:4e:6d:d3:e7:09:ee:
                    a9:ea:47:32:00:f0:33:52:4e:6a:b3:8d:27:ae:72:
                    ad:ec:8b:31:74:19:b8:d7:00:81:0d:aa:15:46:21:
                    57:9d:7b:43:c2:98:53:45:22:b7:60:b6:b1:3e:9f:
                    48:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:87:94:D2:B6:40:BA:08:B1:CB:F5:59:A4:CD:72:86:6F:6A:8F:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bedbe331-da35-35ae-a507-ca91212d59f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:27e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c0:81:2a:85:44:64:4a:a6:d7:5f:92:2d:cc:29:b7:b9:2a:
         bc:3a:ab:16:ca:6a:6c:bf:fe:e5:4d:f1:bc:75:09:6c:df:33:
         df:83:34:21:53:e2:e2:33:9b:2b:26:99:e6:2c:3b:6a:4e:da:
         48:60:fb:57:7f:62:c7:8a:e9:ba:b1:f2:2a:2e:3a:25:9f:4d:
         b0:90:f3:b4:d5:3a:54:5b:ea:2d:e2:74:e0:70:79:a7:0a:12:
         5b:f6:8f:9d:4f:59:2d:5f:ab:17:32:eb:0a:dd:22:dd:be:47:
         91:50:97:f4:fe:ca:0c:a5:47:62:52:c3:52:6a:93:60:c5:c1:
         99:af:a3:79:6b:9f:7d:57:ab:c7:b2:fd:b6:67:fb:e5:d8:3f:
         cf:c2:8a:02:62:c3:6a:3b:fd:7a:1a:cc:fb:ce:d4:54:86:e8:
         07:cb:31:a5:e3:d5:ba:02:4a:9e:6f:72:30:11:cf:04:0a:c2:
         17:8c:67:a5:63:ba:fd:f9:8f:8b:ac:09:6b:64:8f:fd:a3:0d:
         3f:75:39:a1:a3:13:d9:23:cd:a6:d3:1c:db:f4:fa:c0:5f:54:
         23:a9:4c:92:ab:c1:99:cc:9e:77:74:25:b4:90:8e:d8:5e:31:
         a7:7e:55:f3:3f:b9:ae:d8:57:34:d3:0b:ec:7b:4b:ab:47:a1:
         f7:44:e6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:51:53 2026 by rpki-client