Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/bdf7a273-4d0f-3ffe-9529-371db3e0362f.roa
File:                     bdf7a273-4d0f-3ffe-9529-371db3e0362f.roa (raw, json)
Hash identifier:          r3Iys0ijQuQINQgfzBC0ggFQlq37h0h7T2JJaL+wkVM=
Subject key identifier:   18:D7:23:8E:6A:04:BB:60:20:77:09:01:04:0B:C4:A6:E3:F2:4F:56
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584DE9B0850930AFDF24C240F380
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/bdf7a273-4d0f-3ffe-9529-371db3e0362f.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     18526
IP address blocks:        2602:fd6f:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:85:09:30:af:df:24:c2:40:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=060add85-1a72-4672-bc7a-6e1ed0b64bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:75:ff:3d:68:fd:ef:a1:b1:76:17:9f:6c:16:
                    06:d3:37:a1:e5:88:2b:e1:c2:77:58:98:15:cd:3f:
                    ef:95:2d:36:e9:78:ac:9a:55:95:1c:0a:f6:7e:d5:
                    d3:6e:37:d1:1f:e0:ca:5f:9c:5f:04:a9:30:b3:d7:
                    d9:f3:34:b3:1e:75:3d:27:ea:a9:5d:8a:8c:ed:84:
                    6b:a3:63:25:36:b2:74:a7:80:37:cf:72:83:eb:9a:
                    f1:b5:07:79:21:47:7e:2e:79:69:c3:44:3d:b3:35:
                    00:70:df:96:34:d6:db:43:19:81:8c:ba:da:4f:bc:
                    17:26:1e:d5:27:f3:63:c9:37:90:89:2c:6c:ad:3a:
                    a9:95:14:e0:65:21:33:d4:c5:2d:1f:aa:d4:1e:fc:
                    4c:52:19:ce:40:e5:30:ca:9a:39:b1:9e:4a:85:d4:
                    86:93:10:9d:79:d0:01:87:4a:fc:18:95:cf:7e:31:
                    e3:2f:01:27:29:a3:18:35:fd:23:93:31:79:de:0f:
                    30:ec:87:fe:a0:70:2b:8d:ad:c2:9e:d3:64:36:79:
                    ba:2a:ae:6a:b6:5a:6c:65:0c:54:af:46:18:2e:f2:
                    c3:ba:f3:b5:b1:cc:c8:1c:68:90:ca:31:52:cd:15:
                    e1:45:3b:23:7a:2a:10:7d:22:71:76:db:ef:51:6b:
                    3d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D7:23:8E:6A:04:BB:60:20:77:09:01:04:0B:C4:A6:E3:F2:4F:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/bdf7a273-4d0f-3ffe-9529-371db3e0362f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:59:ab:e4:9f:ba:6c:aa:b6:b2:0d:6c:66:a6:77:32:54:48:
         fb:3c:5d:91:d3:66:84:a6:45:22:5e:96:b2:f3:c4:9f:41:20:
         c8:9f:f9:18:a4:68:48:7c:12:84:ac:d1:ee:e5:9b:0d:9d:b0:
         53:33:f5:bb:1e:8e:8e:f2:90:ef:14:9c:ef:ab:d1:b0:51:10:
         21:fb:d4:fb:40:e9:60:5c:4f:86:13:11:c3:f4:79:34:73:45:
         c3:e7:92:1d:f5:41:48:ed:36:d4:7c:78:36:5d:7f:20:3d:ef:
         b0:ed:23:a0:e9:20:6d:00:3e:e1:96:81:18:d6:88:87:25:32:
         46:ab:b0:fb:84:68:6a:50:c8:a2:ce:42:e5:fc:bf:de:63:4d:
         ce:31:83:ab:eb:2f:96:d6:d4:5c:1b:99:94:50:6f:ae:5e:f4:
         64:b2:51:4e:f3:6d:a8:b5:38:6c:00:3e:09:1c:ea:ad:20:ef:
         05:16:e6:92:df:af:6d:a5:4c:a3:42:04:67:be:7c:b8:a6:82:
         6e:0f:d9:33:c9:a8:a4:1f:64:ba:92:a8:e5:de:ea:0a:18:de:
         5c:f5:f8:38:86:d6:03:ee:34:44:58:95:e1:80:b6:39:18:8a:
         5c:99:32:a1:0e:d1:de:55:bb:f8:4e:b2:0b:c3:26:58:44:8d:
         cd:eb:8b:ce
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3psIUJMK/fJMJA84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl
NjlkMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk
MDYwYWRkODUtMWE3Mi00NjcyLWJjN2EtNmUxZWQwYjY0YmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnX/PWj976GxdhefbBYG0zeh5Ygr4cJ3WJgV
zT/vlS026XismlWVHAr2ftXTbjfRH+DKX5xfBKkws9fZ8zSzHnU9J+qpXYqM7YRr
o2MlNrJ0p4A3z3KD65rxtQd5IUd+Lnlpw0Q9szUAcN+WNNbbQxmBjLraT7wXJh7V
J/NjyTeQiSxsrTqplRTgZSEz1MUtH6rUHvxMUhnOQOUwypo5sZ5KhdSGkxCdedAB
h0r8GJXPfjHjLwEnKaMYNf0jkzF53g8w7If+oHArja3CntNkNnm6Kq5qtlpsZQxU
r0YYLvLDuvO1sczIHGiQyjFSzRXhRTsjeioQfSJxdtvvUWs9ewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBjXI45qBLtgIHcJAQQLxKbj8k9WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5
ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvYmRmN2EyNzMtNGQwZi0z
ZmZlLTk1MjktMzcxZGIzZTAzNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2
OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4
ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3
YjU0OGU2OWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL9bwAw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABhZq+SfumyqtrINbGamdzJUSPs8XZHTZoSmRSJelrLzxJ9BIMif
+RikaEh8EoSs0e7lmw2dsFMz9bsejo7ykO8UnO+r0bBRECH71PtA6WBcT4YTEcP0
eTRzRcPnkh31QUjtNtR8eDZdfyA977DtI6DpIG0APuGWgRjWiIclMkarsPuEaGpQ
yKLOQuX8v95jTc4xg6vrL5bW1FwbmZRQb65e9GSyUU7zbai1OGwAPgkc6q0g7wUW
5pLfr22lTKNCBGe+fLimgm4P2TPJqKQfZLqSqOXe6goY3lz1+DiG1gPuNERYleGA
tjkYilyZMqEO0d5Vu/hOsgvDJlhEjc3ri84=
-----END CERTIFICATE-----
Generated at Fri Jun 12 14:44:14 2026 by rpki-client