Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/13725a65-6872-3ec7-9d07-9dbe58ea8ac4.roa
File:                     13725a65-6872-3ec7-9d07-9dbe58ea8ac4.roa (raw, json)
Hash identifier:          XngJ2EW2NGfm11ldhE4bTHTnNmVjSbb/AdL1MfhLZp0=
Subject key identifier:   61:70:C1:98:BC:BD:63:17:A3:AC:B3:B3:00:B2:A0:B1:43:DF:1C:CF
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DFB288D30FB1E7C41D180
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/13725a65-6872-3ec7-9d07-9dbe58ea8ac4.roa
Signing time:             Tue 12 May 2026 13:06:33 +0000
ROA not before:           Tue 12 May 2026 13:06:33 +0000
ROA not after:            Mon 10 Aug 2026 13:06:33 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:22e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:fb:28:8d:30:fb:1e:7c:41:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:33 2026 GMT
            Not After : Aug 10 13:06:33 2026 GMT
        Subject: CN=db78455b-3c26-4f21-8273-9d41930564f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2a:af:f7:f9:c4:b1:72:c7:2b:18:20:37:5a:
                    56:fb:17:71:15:f6:cf:13:c4:2f:e7:0a:aa:e9:20:
                    e5:07:ab:01:78:c7:d9:95:d0:2b:bd:d1:ac:ea:50:
                    cb:20:2d:be:91:f2:b8:4b:0c:f1:db:5d:0f:1f:59:
                    44:e1:2d:c8:52:99:e9:fa:0c:07:08:26:41:42:29:
                    e7:e7:43:85:40:1b:bb:ea:95:37:43:6c:44:c1:4a:
                    c1:b4:7a:b3:f5:52:c7:07:86:c3:3a:85:54:27:66:
                    77:8d:fa:bf:55:c0:20:29:02:c8:f4:c3:2c:6c:d0:
                    6d:54:1c:ff:ac:12:f9:06:d3:16:48:12:b6:bf:55:
                    32:ff:67:e4:c0:4c:3b:f8:eb:5c:ac:2c:3f:40:e4:
                    f0:51:24:52:a8:f3:02:cb:88:d3:4d:79:1a:e3:f6:
                    a2:2a:59:c1:2c:64:81:f0:bc:df:50:eb:fc:b2:cf:
                    32:4c:e3:08:02:52:07:69:80:4a:c9:b4:a4:74:39:
                    4b:d4:56:76:37:62:1d:70:38:3d:ea:ca:4b:2d:ae:
                    c2:8d:e8:5c:9c:9d:a4:00:7c:7f:70:95:ec:68:e9:
                    55:b6:12:d4:48:9d:08:34:e6:56:22:91:33:20:70:
                    dd:bb:57:29:8e:f0:ed:50:07:c8:3c:e3:f8:a5:3e:
                    ec:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:70:C1:98:BC:BD:63:17:A3:AC:B3:B3:00:B2:A0:B1:43:DF:1C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/13725a65-6872-3ec7-9d07-9dbe58ea8ac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:22e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:47:b2:a9:4d:cc:43:1f:f8:bd:4d:9b:2c:7c:ee:ae:55:39:
         e9:b1:6b:84:a3:ae:be:4e:01:02:b0:63:10:7e:93:0d:51:ca:
         79:a8:62:74:9f:12:83:6f:92:d8:a4:6a:b0:35:3b:22:a3:bd:
         29:ce:1d:a0:89:ac:95:f9:73:0f:13:bb:b7:c9:a7:7d:50:7d:
         06:63:ad:0c:83:e7:e9:59:10:3d:c4:7a:23:02:e9:33:5d:55:
         18:50:b2:87:2a:d8:83:21:e4:16:7f:62:38:4c:19:8b:86:8e:
         c6:41:06:75:36:32:9b:14:09:a9:8e:d1:84:8f:13:e1:b5:5a:
         ae:2e:2f:86:bc:8c:1c:f9:ea:1f:d4:79:76:1f:42:94:a6:db:
         7c:f4:12:04:53:49:a1:12:3c:bb:2c:6b:a4:3a:97:84:d5:f1:
         a1:f5:43:47:6a:0f:ea:61:13:00:bf:b5:43:7f:11:cc:38:94:
         7c:05:b9:84:3c:f0:57:f7:3e:4b:a6:4e:f8:8a:4b:21:9e:10:
         aa:83:da:22:40:80:96:d0:7b:ce:29:e7:0b:95:38:1a:58:29:
         9d:19:d0:74:8f:2e:ec:ec:f4:d4:81:d1:66:bd:f5:83:65:08:
         86:bf:ce:aa:48:ba:b4:96:5e:31:9d:f6:51:f3:f7:12:4d:cd:
         52:0d:ae:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:34 2026 by rpki-client