Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/089bd5b5-7ad5-30c5-92d1-f21bd81cfbd3.roa
File:                     089bd5b5-7ad5-30c5-92d1-f21bd81cfbd3.roa (raw, json)
Hash identifier:          3iTvvlw050a3Yuh30IAiyy7NuTpnBWelxdLc8tnxUq0=
Subject key identifier:   52:6E:52:DC:61:A1:EB:10:1C:D0:8D:C1:EE:1D:A5:46:0C:D1:19:CE
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DFDA09FCAC20BFDD96340
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/089bd5b5-7ad5-30c5-92d1-f21bd81cfbd3.roa
Signing time:             Tue 12 May 2026 13:06:34 +0000
ROA not before:           Tue 12 May 2026 13:06:34 +0000
ROA not after:            Mon 10 Aug 2026 13:06:34 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:253::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:fd:a0:9f:ca:c2:0b:fd:d9:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:34 2026 GMT
            Not After : Aug 10 13:06:34 2026 GMT
        Subject: CN=6587d728-8032-4215-b3e8-97759dd35da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:74:80:67:6f:0d:27:08:22:02:67:09:9b:95:
                    5e:25:8d:86:83:4e:f1:05:c3:7e:f0:e1:40:b6:f0:
                    4f:d2:d8:59:44:32:3e:c7:f5:1a:4e:2a:b9:6d:0a:
                    e2:0d:bf:9c:7e:dd:5d:f5:38:80:39:61:dd:e1:c7:
                    53:59:81:30:c7:f9:48:50:bd:2b:a0:2f:bd:3c:fe:
                    41:8f:ce:a8:18:c5:86:89:59:96:c8:9c:14:2c:2f:
                    1c:b9:ac:5c:eb:09:6d:58:0f:bd:fa:01:b4:ee:e7:
                    50:ff:c8:37:72:05:73:bb:fe:73:03:cf:7e:90:1d:
                    07:01:61:26:30:88:ed:94:1f:0d:dd:e2:a6:8a:b3:
                    05:ad:85:f8:50:b5:25:45:a1:f4:91:37:af:65:79:
                    52:f7:b4:fc:da:7f:d7:3a:37:d0:2e:5b:e9:6e:8e:
                    a9:6a:f9:87:d1:14:79:a9:6d:2f:f4:58:90:bc:1e:
                    cd:87:d5:06:dc:39:88:84:e1:0f:8b:fc:6b:af:78:
                    cb:5d:97:f8:cb:6f:d2:36:03:ee:dc:c5:a0:bf:43:
                    dd:e3:37:a1:29:8e:24:e2:0f:72:7f:e6:c5:4b:d0:
                    83:a8:69:c9:b6:58:e5:a8:09:a3:19:93:7f:76:cd:
                    83:04:62:9f:55:e6:3d:ec:3e:65:47:bc:68:98:2d:
                    cb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6E:52:DC:61:A1:EB:10:1C:D0:8D:C1:EE:1D:A5:46:0C:D1:19:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/089bd5b5-7ad5-30c5-92d1-f21bd81cfbd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:253::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:06:ac:31:d5:19:d9:bf:7a:12:78:09:08:e2:ca:14:28:00:
         f2:ba:77:a3:4c:67:86:2f:98:a0:7b:14:80:34:1f:2b:7f:28:
         21:13:58:4f:8b:94:69:41:79:fc:e6:f3:6f:c2:69:b2:79:3f:
         57:b3:52:92:4c:5e:25:ae:fc:91:d0:35:4d:24:28:e2:f6:54:
         e4:f6:e7:20:cb:e6:8d:7f:ec:47:b0:d2:0e:62:82:94:19:6c:
         73:0a:9f:64:61:2a:bf:ed:73:4a:50:a7:d0:88:bd:ad:b4:b4:
         f8:05:53:c9:ce:be:d3:ca:dc:30:ac:ea:06:1a:63:30:cf:27:
         b5:ed:6c:bf:24:72:4c:1e:59:08:ba:48:c8:05:9e:39:12:98:
         62:cb:bd:5b:29:ed:d1:28:77:ad:8d:df:eb:e6:cb:b6:b3:2e:
         fc:0a:08:01:85:4a:33:44:12:71:33:92:b3:3d:a5:84:42:91:
         b2:e0:f3:bb:ea:36:39:f7:48:a5:1b:fa:e9:97:2e:f6:84:91:
         c5:be:9d:5d:08:c6:2c:bb:fd:50:6f:08:81:3d:ea:e1:35:58:
         7d:12:f4:70:53:92:c7:ca:d7:83:08:37:ab:36:ba:f2:12:b1:
         10:d1:a7:52:02:6d:46:02:7c:c0:c0:9c:77:6a:63:81:41:a1:
         3f:e9:69:d6
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLf2gn8rCC/3ZY0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYzNFoXDTI2MDgxMDEzMDYzNFowLzEtMCsGA1UEAxMk
NjU4N2Q3MjgtODAzMi00MjE1LWIzZTgtOTc3NTlkZDM1ZGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinSAZ28NJwgiAmcJm5VeJY2Gg07xBcN+8OFA
tvBP0thZRDI+x/UaTiq5bQriDb+cft1d9TiAOWHd4cdTWYEwx/lIUL0roC+9PP5B
j86oGMWGiVmWyJwULC8cuaxc6wltWA+9+gG07udQ/8g3cgVzu/5zA89+kB0HAWEm
MIjtlB8N3eKmirMFrYX4ULUlRaH0kTevZXlS97T82n/XOjfQLlvpbo6pavmH0RR5
qW0v9FiQvB7Nh9UG3DmIhOEPi/xrr3jLXZf4y2/SNgPu3MWgv0Pd4zehKY4k4g9y
f+bFS9CDqGnJtljlqAmjGZN/ds2DBGKfVeY97D5lR7xomC3LjQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFFJuUtxhoesQHNCNwe4dpUYM0RnOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvMDg5YmQ1YjUtN2FkNS0z
MGM1LTkyZDEtZjIxYmQ4MWNmYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AlMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAbwasMdUZ2b96EngJCOLKFCgA8rp3o0xnhi+YoHsUgDQfK38o
IRNYT4uUaUF5/Obzb8Jpsnk/V7NSkkxeJa78kdA1TSQo4vZU5PbnIMvmjX/sR7DS
DmKClBlscwqfZGEqv+1zSlCn0Ii9rbS0+AVTyc6+08rcMKzqBhpjMM8nte1svyRy
TB5ZCLpIyAWeORKYYsu9Wynt0Sh3rY3f6+bLtrMu/AoIAYVKM0QScTOSsz2lhEKR
suDzu+o2OfdIpRv66Zcu9oSRxb6dXQjGLLv9UG8IgT3q4TVYfRL0cFOSx8rXgwg3
qza68hKxENGnUgJtRgJ8wMCcd2pjgUGhP+lp1g==
-----END CERTIFICATE-----
Generated at Wed May 13 12:52:20 2026 by rpki-client