Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9/bc4e232e-bac6-3367-b310-3e3d77e84411.roa
File:                     bc4e232e-bac6-3367-b310-3e3d77e84411.roa (raw, json)
Hash identifier:          9Toyl9hZGEoSfp1UJQ+575xHcoDpGrGY2CxIoXFVeQs=
Subject key identifier:   64:09:3E:45:15:9F:12:28:FC:24:02:BB:F9:6D:7A:1E:9D:B0:F5:A2
Certificate issuer:       /CN=64ebadae-406d-4c62-9955-3a90e9f675d9
Certificate serial:       010D0C9F4328584D300A2FBC7393A486EC4EAF00
Authority key identifier: 34:3F:84:F3:E9:22:74:AF:9C:DF:6B:13:B5:80:A6:7C:C9:8B:83:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9/bc4e232e-bac6-3367-b310-3e3d77e84411.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     399086
IP address blocks:        2620:13d:c000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9/64ebadae-406d-4c62-9955-3a90e9f675d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9/64ebadae-406d-4c62-9955-3a90e9f675d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:2f:bc:73:93:a4:86:ec:4e:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64ebadae-406d-4c62-9955-3a90e9f675d9
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=f81bc36d-6238-41af-a8cb-786d99ba760f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6a:28:d2:da:e7:5c:77:dd:cd:7f:57:a2:f4:
                    0a:49:5f:8e:24:54:bf:4b:5f:89:d1:81:14:e3:9d:
                    f6:b5:ae:79:12:58:77:3e:10:c9:be:d8:a9:e5:6f:
                    8a:8e:5b:f6:a3:d4:ae:0e:f4:53:8c:0f:a3:4d:58:
                    95:19:9c:19:82:fc:4e:5a:c8:4e:4f:b7:35:eb:55:
                    d9:91:8a:44:44:e2:64:f8:5f:3f:c0:ac:0d:09:13:
                    9d:c1:72:54:97:68:66:0a:f1:09:86:e1:07:37:09:
                    0c:23:b7:b6:8c:42:a1:16:51:ef:64:92:32:8d:fa:
                    f6:f9:d4:4c:42:4e:8f:30:ba:8c:ab:16:15:6a:a4:
                    8a:91:4d:23:0d:cc:4a:87:da:7f:05:10:af:46:93:
                    28:a6:f2:59:4d:5b:8c:a4:54:08:83:4a:03:c0:d1:
                    84:ce:1a:71:1f:31:97:52:c9:65:d7:99:7c:b1:50:
                    61:ac:37:96:fa:3d:4c:9c:c0:2f:af:4b:1c:45:3f:
                    65:3d:f6:0a:8e:87:82:0c:2b:2b:4e:af:a5:1c:57:
                    28:9c:8f:19:3d:af:41:d8:99:d8:3a:c5:99:95:21:
                    6f:63:8b:46:6c:90:12:b4:d2:c5:fe:f0:da:89:61:
                    f9:9a:a3:2d:21:76:c7:e0:f2:86:51:d3:98:8b:24:
                    e4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:09:3E:45:15:9F:12:28:FC:24:02:BB:F9:6D:7A:1E:9D:B0:F5:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9/bc4e232e-bac6-3367-b310-3e3d77e84411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9/64ebadae-406d-4c62-9955-3a90e9f675d9.crl

            X509v3 Authority Key Identifier:
                keyid:34:3F:84:F3:E9:22:74:AF:9C:DF:6B:13:B5:80:A6:7C:C9:8B:83:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13d:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ae:e5:48:e0:18:53:f8:93:5a:07:f3:72:4e:33:36:be:89:
         60:09:b7:55:00:2d:68:4a:86:39:1a:4a:cc:60:1f:05:1a:bb:
         cf:5a:7c:d9:f0:3c:c4:6a:13:76:e9:37:d9:04:37:0c:e8:f8:
         16:d9:33:9b:46:57:96:f8:f1:d2:92:82:88:41:61:4b:70:4f:
         b9:6c:32:2a:ef:fb:d4:13:43:17:16:4b:db:45:27:21:80:13:
         6b:4b:c2:39:8c:06:16:f2:37:f2:b6:c8:51:fd:10:78:b2:af:
         e3:98:71:69:c2:38:0a:e8:0b:6b:a8:f5:11:7d:9a:7e:0f:2c:
         7e:99:9d:c8:39:40:e9:1e:98:b2:8f:e9:dd:9d:c6:f8:0c:96:
         c5:2e:b9:7b:12:61:62:02:20:d7:cb:be:82:62:8e:2b:b3:3e:
         a1:14:12:36:0d:c2:b3:4a:9a:b6:bb:5e:d7:57:89:82:b4:18:
         7c:89:85:8d:43:7c:1f:cf:7c:a9:89:2c:56:af:3d:ef:12:a6:
         34:85:2c:68:70:b6:20:8b:46:e1:6d:a2:91:60:de:59:71:d9:
         8e:f8:d4:6b:75:cc:28:ca:60:43:cf:f2:05:7f:e1:91:2c:39:
         06:84:03:b5:2d:ce:8d:fb:30:a0:4d:48:8e:95:7b:ce:af:fb:
         c3:0d:6b:0f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCi+8c5OkhuxOrwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjRlYmFkYWUtNDA2ZC00YzYyLTk5NTUtM2E5MGU5ZjY3
NWQ5MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk
ZjgxYmMzNmQtNjIzOC00MWFmLWE4Y2ItNzg2ZDk5YmE3NjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2oo0trnXHfdzX9XovQKSV+OJFS/S1+J0YEU
4532ta55Elh3PhDJvtip5W+Kjlv2o9SuDvRTjA+jTViVGZwZgvxOWshOT7c161XZ
kYpEROJk+F8/wKwNCROdwXJUl2hmCvEJhuEHNwkMI7e2jEKhFlHvZJIyjfr2+dRM
Qk6PMLqMqxYVaqSKkU0jDcxKh9p/BRCvRpMopvJZTVuMpFQIg0oDwNGEzhpxHzGX
Usll15l8sVBhrDeW+j1MnMAvr0scRT9lPfYKjoeCDCsrTq+lHFconI8ZPa9B2JnY
OsWZlSFvY4tGbJAStNLF/vDaiWH5mqMtIXbH4PKGUdOYiyTkowIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGQJPkUVnxIo/CQCu/lteh6dsPWiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82NGVi
YWRhZS00MDZkLTRjNjItOTk1NS0zYTkwZTlmNjc1ZDkvYmM0ZTIzMmUtYmFjNi0z
MzY3LWIzMTAtM2UzZDc3ZTg0NDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjRlYmFkYWUtNDA2ZC00YzYyLTk5
NTUtM2E5MGU5ZjY3NWQ5LzY0ZWJhZGFlLTQwNmQtNGM2Mi05OTU1LTNhOTBlOWY2
NzVkOS5jcmwwHwYDVR0jBBgwFoAUND+E8+kidK+c32sTtYCmfMmLg7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82NGViYWRhZS00MDZkLTRjNjItOTk1NS0zYTkw
ZTlmNjc1ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABPcAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFiu5UjgGFP4k1oH83JOMza+iWAJt1UALWhKhjkaSsxgHwUau89a
fNnwPMRqE3bpN9kENwzo+BbZM5tGV5b48dKSgohBYUtwT7lsMirv+9QTQxcWS9tF
JyGAE2tLwjmMBhbyN/K2yFH9EHiyr+OYcWnCOAroC2uo9RF9mn4PLH6Zncg5QOke
mLKP6d2dxvgMlsUuuXsSYWICINfLvoJijiuzPqEUEjYNwrNKmra7XtdXiYK0GHyJ
hY1DfB/PfKmJLFavPe8SpjSFLGhwtiCLRuFtopFg3llx2Y741Gt1zCjKYEPP8gV/
4ZEsOQaEA7Utzo37MKBNSI6Ve86v+8MNaw8=
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:03:01 2026 by rpki-client