Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/02e61319-c479-30ef-838c-db3549be2863.roa
File:                     02e61319-c479-30ef-838c-db3549be2863.roa (raw, json)
Hash identifier:          j6eSrd0XFIbcW725lDXoZhIOwgUI+gTwwm+1aZ4lmm0=
Subject key identifier:   25:1D:1C:65:35:93:B9:3C:41:8F:E5:F7:3F:23:D4:C0:24:54:12:B8
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E19172448C3A04014CA00
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/02e61319-c479-30ef-838c-db3549be2863.roa
Signing time:             Tue 12 May 2026 13:06:47 +0000
ROA not before:           Tue 12 May 2026 13:06:47 +0000
ROA not after:            Mon 10 Aug 2026 13:06:47 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3ce::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:19:17:24:48:c3:a0:40:14:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:47 2026 GMT
            Not After : Aug 10 13:06:47 2026 GMT
        Subject: CN=57a26e08-e0b3-4e30-b31e-730feec23bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:b5:0f:ba:34:7f:bc:d6:b8:80:9b:b4:6a:
                    7a:4e:91:03:55:34:8c:5f:93:4e:6c:04:de:72:2c:
                    64:43:54:06:c8:5d:de:8a:18:74:f2:14:78:82:47:
                    5a:c1:fd:45:bc:f6:36:e7:d8:cc:02:7e:07:cd:92:
                    83:87:d2:ab:dd:ad:b5:8a:13:7b:78:17:ee:ba:4b:
                    aa:54:7d:54:84:6f:0f:d4:e9:4a:ba:c2:45:0f:35:
                    2a:8c:a2:14:d2:b1:9b:12:de:37:c7:66:8e:21:2e:
                    9b:b3:71:88:0b:19:05:94:d4:a7:57:8b:7a:8f:59:
                    d3:d5:fc:e4:75:78:8a:3b:fe:79:6e:80:bf:f4:69:
                    ed:d9:6c:92:b2:62:d4:aa:ef:b7:28:04:1b:b3:87:
                    18:e2:93:b7:88:a8:1e:65:46:7e:a4:29:98:37:ad:
                    5c:67:f4:4b:57:99:43:02:57:35:84:f4:b4:d0:91:
                    39:0d:c6:a0:27:fb:94:6d:d5:8b:19:b5:17:84:dd:
                    59:52:6a:e2:24:7e:4a:c6:ba:33:31:2c:6a:8f:e8:
                    06:0a:ff:af:7a:94:fd:30:f1:40:6c:3a:89:4f:d8:
                    f5:5d:97:55:f9:a6:3e:fe:58:0f:a8:d4:00:dd:cd:
                    e1:28:95:77:15:1d:b6:e5:e0:83:7d:22:90:b3:45:
                    6c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1D:1C:65:35:93:B9:3C:41:8F:E5:F7:3F:23:D4:C0:24:54:12:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/02e61319-c479-30ef-838c-db3549be2863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3ce::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:1e:4c:7a:e0:71:3b:82:9f:09:6b:ec:c5:98:34:80:0b:13:
         73:a2:ca:98:1d:83:c0:9a:e9:87:d9:f2:dd:d5:76:a5:7d:43:
         ee:f9:65:78:30:82:20:9e:85:a3:4b:12:47:0e:16:cc:de:c7:
         a6:60:22:45:8d:fb:2f:13:2a:0e:eb:02:a6:be:d2:1e:86:6a:
         3e:88:70:7e:34:ee:c9:73:99:e9:6d:b8:b3:c1:1a:b0:f8:70:
         e3:c1:7a:ea:03:5d:51:2d:24:19:e1:c6:09:71:77:81:d6:81:
         21:76:64:c4:a3:bd:e9:7b:a2:2f:d2:a0:98:ec:ac:c8:d9:28:
         a1:ff:97:9f:8d:1a:8c:a1:a0:29:9b:17:3c:dd:19:78:df:12:
         41:7f:25:4d:64:45:85:a5:70:8a:95:92:95:67:9b:0b:7c:90:
         a5:f9:4b:8b:fe:4e:b0:26:49:49:36:62:26:f1:87:2c:fe:2d:
         6f:60:31:30:f1:15:8a:cc:d7:ca:4c:b3:57:4d:b5:92:62:09:
         ff:15:d0:52:08:ec:23:e9:b3:c9:24:c5:e1:9c:1f:24:a3:f4:
         5d:d8:e6:ad:0d:e4:e4:68:24:41:5a:d4:aa:8c:e4:86:83:51:
         0a:de:7c:6e:05:44:aa:c1:ac:c8:72:7c:24:2b:64:4c:f0:2f:
         b5:2b:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:29:13 2026 by rpki-client