Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/172ffee5-c417-3fba-8e1f-ff905de44529.roa
File:                     172ffee5-c417-3fba-8e1f-ff905de44529.roa (raw, json)
Hash identifier:          ESNnzaIb4A/Hm+ClvvMl1x33RxXRx9huPQ5T79vF3wQ=
Subject key identifier:   8A:64:6E:B3:5A:E6:53:A2:99:F3:B2:FB:6E:9B:65:B1:FB:2D:C7:B4
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DE165E588F817F570BF00
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/172ffee5-c417-3fba-8e1f-ff905de44529.roa
Signing time:             Tue 12 May 2026 13:06:21 +0000
ROA not before:           Tue 12 May 2026 13:06:21 +0000
ROA not after:            Mon 10 Aug 2026 13:06:21 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:8a::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:e1:65:e5:88:f8:17:f5:70:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:21 2026 GMT
            Not After : Aug 10 13:06:21 2026 GMT
        Subject: CN=6c612470-17f7-473c-8da9-c96e0dbb5a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:c9:f3:86:76:44:e1:b4:04:ef:ac:5a:de:
                    55:d2:e8:d6:5a:8c:84:51:01:14:9b:98:c5:8a:50:
                    11:2e:e0:d1:25:8b:fc:59:14:07:bf:69:fe:53:0d:
                    04:3c:95:43:ca:78:74:e6:03:d1:f4:f6:f4:01:b6:
                    eb:4b:0a:d7:f2:5f:15:9e:3c:e6:08:8d:ab:b5:4c:
                    96:3d:d3:17:0b:c6:ea:96:bb:7c:96:0b:c2:6a:2f:
                    e6:fd:e6:70:88:03:6a:38:9b:ed:1f:c9:e2:78:35:
                    ea:7b:45:13:42:93:d7:ce:3e:40:a5:ed:e0:b9:b8:
                    f3:b0:d5:fd:af:1b:ae:71:8c:3d:3a:7b:e9:94:aa:
                    21:6e:66:76:bd:36:9c:90:aa:65:a6:3d:e7:5e:b1:
                    82:39:15:d0:45:14:58:3b:a4:52:51:3e:8c:24:5f:
                    1a:20:0b:18:0b:c6:ba:17:51:60:ec:1f:7b:7d:a9:
                    bd:18:df:db:b2:01:33:28:f1:2e:4c:d3:3d:ff:a2:
                    bb:b7:a9:18:10:96:20:5b:22:2f:4a:6e:1a:cf:5c:
                    cf:1a:59:1d:9a:47:2c:cd:e7:e2:80:d3:d1:47:ee:
                    16:23:03:c7:5b:4c:8e:1d:f0:45:9e:f3:81:df:3a:
                    7f:bb:9c:ac:0a:03:6a:f9:f3:8e:f5:79:85:4f:ab:
                    2b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:64:6E:B3:5A:E6:53:A2:99:F3:B2:FB:6E:9B:65:B1:FB:2D:C7:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/172ffee5-c417-3fba-8e1f-ff905de44529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:8a::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d6:07:23:1d:0c:86:bf:4d:de:28:f5:5a:a4:fc:d0:d9:38:
         06:d8:2f:18:ed:54:01:d1:ea:3f:ed:4c:ef:47:ac:33:9b:e1:
         de:d3:38:2a:87:6f:ca:13:59:17:98:54:08:8b:94:f7:05:13:
         01:5e:60:59:f3:a3:25:0c:5e:52:32:c6:60:c6:b5:c7:b3:54:
         3f:97:8a:1b:59:f7:c1:d7:cd:53:19:fa:0f:d1:de:73:af:11:
         5e:c3:66:be:f2:0c:4a:1c:b9:64:bb:8b:6e:53:08:a0:16:e2:
         a6:df:17:ca:22:46:de:a6:61:a1:fc:33:93:93:f8:f3:87:bd:
         be:aa:1e:1b:d4:7d:f6:04:78:cc:44:4b:3c:70:20:70:6e:fa:
         4c:60:86:cf:05:ea:c9:4b:0e:b5:a7:b3:74:2b:1a:cd:b2:11:
         fb:61:31:c9:04:19:ce:2c:c5:ca:ef:33:19:33:b7:15:9d:7a:
         ab:aa:a5:51:fa:fa:95:79:09:bf:6e:31:82:bf:02:9f:20:77:
         3c:b0:75:cf:c2:71:f7:12:6b:4c:44:7e:fc:20:cc:ca:cd:1a:
         89:6a:6b:06:f8:c6:d1:2e:d3:58:41:84:ba:1a:c2:51:26:5b:
         84:e6:ba:d8:39:2c:cc:ea:bf:db:6e:21:58:f1:09:14:4f:a4:
         dc:2c:80:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:47:52 2026 by rpki-client