Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/7472e233-c3ae-37b8-a8be-ec2b234930bb.roa
File:                     7472e233-c3ae-37b8-a8be-ec2b234930bb.roa (raw, json)
Hash identifier:          mFZsefGV0Ay9dFlvXmuJ2ZTUxKf417H9MV9TOnLMk1I=
Subject key identifier:   67:8F:2D:CB:D0:15:7A:7D:82:B3:27:01:B0:6A:E3:43:8C:E3:59:17
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584CE62CC51CB73B03ABFCB1D180
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/7472e233-c3ae-37b8-a8be-ec2b234930bb.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     46450
IP address blocks:        2606:3580::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:c5:1c:b7:3b:03:ab:fc:b1:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=dde3f985-5b55-4412-89b2-189de3ab518e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0d:24:31:d3:96:82:e3:2e:96:4f:dc:5a:cf:
                    5c:f6:b8:67:4d:7d:2c:97:9b:65:32:74:4d:06:e4:
                    5e:20:b1:9e:9a:99:93:19:d9:56:74:fb:29:dc:43:
                    07:8b:b2:d9:4e:7a:f8:af:8f:42:a3:11:89:8a:71:
                    8e:85:0e:d0:22:a7:86:1b:ec:77:fb:69:f6:c4:60:
                    b6:ac:72:8d:af:3c:8e:b0:71:64:47:fd:ec:7c:27:
                    49:96:16:09:63:16:24:2c:b6:bd:e7:e9:e8:d6:a5:
                    17:72:4f:ab:a6:c5:fe:24:60:60:3d:a2:2a:6d:d0:
                    68:bc:25:f9:af:f9:f3:44:93:cd:59:82:0c:e1:f4:
                    2f:fc:73:ab:0c:32:71:f2:a2:31:29:a9:70:7b:89:
                    b3:04:a1:88:c9:e5:03:1c:4c:86:d0:10:da:88:43:
                    29:41:0b:33:b4:64:8f:6b:75:a7:4d:a6:3e:85:b8:
                    3d:28:00:9b:ca:d6:7f:46:a8:1b:2a:ac:f0:57:98:
                    ae:3b:f1:c0:fc:ee:9c:ff:11:31:52:e8:79:bb:c5:
                    36:ee:24:33:61:3d:8c:b3:1c:53:0b:af:71:24:72:
                    11:92:5f:9a:21:60:4d:2e:d2:62:bf:04:bb:93:b5:
                    89:42:df:98:8b:47:b9:06:8a:46:8e:77:d8:ed:0f:
                    af:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8F:2D:CB:D0:15:7A:7D:82:B3:27:01:B0:6A:E3:43:8C:E3:59:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/7472e233-c3ae-37b8-a8be-ec2b234930bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:46:50:95:e7:f7:31:d5:62:4a:3d:9f:cc:bd:31:ef:c9:d7:
         47:c6:ac:c8:f2:0b:df:c8:4a:ea:d6:96:34:86:fd:a1:f6:cd:
         68:bc:8d:89:da:ae:2f:59:da:6a:e8:86:16:1b:65:77:fb:01:
         66:19:3c:b3:ac:0f:3d:8a:e3:76:a7:3b:33:62:84:28:f2:4c:
         3d:21:63:9e:52:d5:3c:4b:94:53:e2:cd:54:8c:2e:48:64:24:
         7e:72:7b:dd:7d:ea:60:61:b8:43:10:88:19:42:80:6e:49:4f:
         6c:73:fb:76:a8:bb:a1:c3:3d:ba:b5:f9:ed:8c:b2:dd:a7:22:
         44:95:9f:df:e3:1d:28:9c:3b:83:d7:48:ed:11:0e:3e:e0:83:
         e7:32:eb:69:75:27:6a:90:f6:77:4c:6f:07:52:3d:b4:58:57:
         68:50:56:96:4c:d0:d8:05:0a:cc:28:68:1c:2e:73:cb:c2:ff:
         49:1c:9d:b1:0b:ea:e8:e5:8b:4b:e2:6b:94:43:24:a9:b8:c8:
         4b:da:e5:99:26:5e:c8:34:96:4c:3a:21:3f:25:62:d7:15:fa:
         2f:50:57:27:5d:9f:9b:43:34:41:65:7b:35:3b:b1:71:75:22:
         72:0f:bc:a3:4f:f9:ba:bf:96:43:44:5d:b1:9c:96:79:62:79:
         1a:56:be:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:02 2026 by rpki-client