Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/0e2caca8-f93d-32c8-b15a-6cd719da0e28.roa
File:                     0e2caca8-f93d-32c8-b15a-6cd719da0e28.roa (raw, json)
Hash identifier:          sdxdVUI1hoE4lZtGJv+ykVfhYSyB8R0oiJRzEoQfXwM=
Subject key identifier:   DD:EF:4E:25:30:25:F5:BA:54:C8:EC:49:11:60:FF:B7:8C:89:E9:97
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DFD6D1FD90184FF6B8380
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/0e2caca8-f93d-32c8-b15a-6cd719da0e28.roa
Signing time:             Tue 12 May 2026 13:06:34 +0000
ROA not before:           Tue 12 May 2026 13:06:34 +0000
ROA not after:            Mon 10 Aug 2026 13:06:34 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:250::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:fd:6d:1f:d9:01:84:ff:6b:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:34 2026 GMT
            Not After : Aug 10 13:06:34 2026 GMT
        Subject: CN=310bacff-fcf0-471e-9e99-2f7482d85fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:cc:e6:12:a7:94:e2:a6:2e:ab:f2:ba:57:
                    c2:bd:69:15:8c:88:e5:e0:fe:63:35:b8:ee:0a:4e:
                    d0:13:62:8f:37:f3:f7:a7:b6:b8:40:e0:af:11:f0:
                    1a:83:6a:6c:0b:bd:e6:1c:3e:a7:26:49:2a:0d:30:
                    2a:54:43:f2:0f:58:95:45:42:d4:e4:15:9f:d3:e1:
                    c6:0c:9d:65:5a:d2:0e:0d:66:51:82:d9:6c:00:0d:
                    64:3b:da:81:fe:2e:1a:c8:fd:36:e2:6d:83:22:cb:
                    d0:d6:9d:0b:e8:00:64:a2:a8:a9:e9:28:b5:7b:ba:
                    30:fc:5e:87:a3:8d:fa:b9:eb:a0:9c:9c:e3:32:94:
                    8d:52:27:74:19:4b:d7:e1:c5:b5:a7:d6:de:64:41:
                    6c:f9:94:f4:46:9b:4d:a5:4e:c0:62:60:78:09:19:
                    39:8f:80:8a:8d:3e:df:f1:c5:33:42:e1:0e:23:cd:
                    78:70:96:a4:fb:0e:74:a1:79:93:7d:08:b8:7a:2f:
                    0a:d2:ed:d2:bb:b6:8a:53:34:69:3f:79:93:87:09:
                    35:fb:06:ef:88:36:8f:f9:b7:c9:6d:cb:b6:81:96:
                    97:e4:2f:ee:f5:a6:72:a9:39:a3:08:0d:93:c9:6e:
                    8f:a9:6a:90:02:8a:d6:cc:fa:b9:96:4c:1d:c0:b4:
                    9a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EF:4E:25:30:25:F5:BA:54:C8:EC:49:11:60:FF:B7:8C:89:E9:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/0e2caca8-f93d-32c8-b15a-6cd719da0e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:250::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:08:ab:c8:75:67:a1:41:3a:25:5f:2f:02:e2:e1:58:50:f3:
         a9:f4:6b:7c:5b:52:52:1f:56:c6:07:cf:21:3e:b3:22:be:6d:
         86:79:40:5e:9b:c6:52:15:e9:58:18:be:27:a1:57:31:cf:22:
         a5:47:e6:b4:bc:2c:26:37:f8:a2:c9:92:b9:0a:98:00:6e:61:
         b0:75:1c:82:ff:9f:cd:d7:d1:4f:ef:9c:74:17:ac:16:12:8a:
         62:56:a4:0a:af:12:4c:f6:ff:5c:90:6f:59:fa:77:47:7a:4a:
         4d:f2:e8:e5:5d:96:77:61:ba:70:75:cd:62:6d:7c:b4:29:af:
         70:df:27:2b:2f:74:a2:cb:8d:6e:05:a1:aa:ac:8c:94:64:27:
         e6:be:a3:3e:1f:95:a3:94:6a:fe:ea:08:d2:3e:36:73:75:9e:
         7b:b2:b4:e5:34:dc:c4:b7:c8:33:c0:c3:00:d7:7d:8e:63:a3:
         2f:c2:56:09:ac:71:4d:d9:00:3f:22:de:23:59:6c:d6:a5:c9:
         6a:d7:d7:a3:66:c1:8c:1e:92:2a:24:d3:a8:f3:b7:01:72:28:
         86:42:13:12:c5:2c:c0:1c:1f:4a:90:88:46:c7:06:25:0e:07:
         97:c8:04:4c:8a:46:c4:8d:9e:b7:03:bd:c9:de:9d:e0:93:32:
         ee:29:3d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:26 2026 by rpki-client