Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/bc7387ae-002f-3045-a8d3-87e993c21f45.roa
File:                     bc7387ae-002f-3045-a8d3-87e993c21f45.roa (raw, json)
Hash identifier:          YMUrxsUdxJESpfmJ+8cYkH4SfyKVS8NQaJ2+pdcLyWQ=
Subject key identifier:   39:89:10:C8:63:D8:17:97:54:15:E7:A4:8D:B6:88:5C:4E:CC:84:13
Certificate issuer:       /CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c
Certificate serial:       010D0C9F4328584D624A5F4C5A3986661BADC220
Authority key identifier: 67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/bc7387ae-002f-3045-a8d3-87e993c21f45.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        2602:f5c8:90::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:5f:4c:5a:39:86:66:1b:ad:c2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=a77b23c4-4c6d-4dc1-a5ac-af9ffe5cd7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1d:2c:33:bb:96:7a:85:7c:fe:43:de:00:2a:
                    64:9d:c0:6c:45:26:a8:46:05:2a:b1:4d:01:a1:91:
                    14:02:59:1a:5a:6f:b6:98:c7:2a:5c:49:42:5a:90:
                    d9:7e:db:73:6a:27:b2:c0:89:32:e7:5f:e3:bc:96:
                    12:bc:ff:65:8d:e5:26:4c:6a:61:ac:b2:07:72:58:
                    19:f0:5c:ef:4a:74:75:29:d6:50:27:88:76:80:0b:
                    6d:32:b5:a6:2b:20:df:7c:21:e6:99:45:44:60:06:
                    39:f0:60:10:35:e7:82:3b:84:29:58:0f:96:32:44:
                    3e:f4:1b:5d:61:85:d0:74:8a:50:ba:e4:2e:d6:31:
                    55:a7:74:63:5b:38:d3:f6:81:39:4d:ac:77:f2:14:
                    f2:f1:f8:67:19:27:ac:39:2f:93:94:18:f1:b2:2a:
                    6a:51:19:ef:a4:f1:97:8b:43:94:ea:fb:c4:e7:64:
                    e5:c5:39:8f:cc:e7:27:75:35:ab:67:a8:98:11:f1:
                    df:4c:c7:7d:e2:77:46:38:e3:36:1e:2f:c7:44:a0:
                    e2:4e:1d:f9:08:d5:62:58:dc:b8:c0:3e:96:7b:6e:
                    6e:e2:b3:bd:82:d5:2e:13:ff:53:80:3f:2a:39:c0:
                    25:01:d8:c2:1f:55:59:95:89:fd:a9:ad:1b:aa:0a:
                    a2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:89:10:C8:63:D8:17:97:54:15:E7:A4:8D:B6:88:5C:4E:CC:84:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/bc7387ae-002f-3045-a8d3-87e993c21f45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl

            X509v3 Authority Key Identifier:
                keyid:67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c8:90::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:27:ec:45:2b:8d:a5:eb:3c:41:81:74:9c:13:ea:2c:90:6d:
         de:b2:71:55:8c:9b:b0:23:c6:8f:cd:f1:32:c4:b7:e7:9d:64:
         c9:f3:0d:a9:4c:8f:2f:61:fd:00:e3:02:44:e0:e7:67:19:40:
         95:be:90:51:ec:a1:a6:e0:68:02:db:22:6a:05:fb:f9:a3:78:
         18:7d:04:b1:79:75:a3:63:04:05:c2:b0:f1:b0:6e:00:f9:97:
         e0:3f:10:13:01:3a:3e:43:8b:4f:83:96:f0:5b:24:7e:d6:35:
         4f:6a:8f:7b:fb:4f:bc:9c:a9:3c:28:17:0c:d7:bb:38:33:97:
         16:af:91:ad:6c:6a:c9:a9:09:9f:55:ad:5b:cd:59:e7:46:64:
         fa:3b:0d:25:c9:ae:53:49:60:d9:47:dc:47:73:8a:0d:6d:8d:
         75:b0:d9:30:49:8a:76:6c:3b:df:09:1a:52:4a:3a:3a:ad:e8:
         08:af:64:da:49:65:81:f1:64:96:f3:4e:1b:78:ab:8c:4c:37:
         31:5f:f5:ba:19:71:27:ee:0e:84:fc:af:09:41:ed:6b:5d:c2:
         da:5e:86:37:b7:75:e2:78:fe:0d:33:ee:42:86:c5:97:93:a6:
         0a:38:6a:ab:b1:b4:38:18:cf:a5:9e:c5:49:36:2d:f2:ce:50:
         5f:86:60:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 18:23:08 2026 by rpki-client