Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/17992761-e289-3430-be43-d05129efc435.roa
File:                     17992761-e289-3430-be43-d05129efc435.roa (raw, json)
Hash identifier:          ehDE3LHHzf0SqFqznoGvs+CWBvxFWrWm+bo8Afno+pk=
Subject key identifier:   CF:83:DB:89:97:F0:A9:1A:E2:27:5E:0A:DD:1B:E5:37:DB:59:F6:FC
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E11452CB28F2A4A98D800
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/17992761-e289-3430-be43-d05129efc435.roa
Signing time:             Tue 12 May 2026 13:06:43 +0000
ROA not before:           Tue 12 May 2026 13:06:43 +0000
ROA not after:            Mon 10 Aug 2026 13:06:43 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:367::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:11:45:2c:b2:8f:2a:4a:98:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:43 2026 GMT
            Not After : Aug 10 13:06:43 2026 GMT
        Subject: CN=1eb5fcbf-1e5b-4d96-8ff7-bb7224a0b2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3e:76:24:aa:d4:ce:1d:6b:6d:41:36:28:8e:
                    c7:27:85:7e:d3:92:2a:0d:52:ab:c3:51:af:7d:93:
                    56:6a:67:86:17:a2:fa:0e:05:c8:6c:77:4e:9b:69:
                    e8:d6:03:b9:65:c3:80:41:df:d0:58:c5:c4:db:37:
                    6f:22:e3:30:9d:23:3e:0a:1d:25:d6:d5:f0:ec:d3:
                    18:24:f1:72:bf:e2:65:ef:3a:24:18:9d:a2:90:07:
                    59:33:38:b6:34:ff:e2:5a:57:02:f5:65:97:d2:a2:
                    ac:05:71:99:59:dd:0d:c4:35:3a:33:cf:df:95:ea:
                    82:f9:07:ad:dd:3f:e4:63:fb:37:b4:b0:6d:0d:af:
                    78:d9:7a:27:db:9b:c2:f9:c6:48:38:b7:a6:f7:10:
                    b1:73:63:4d:bd:59:dd:73:b0:34:dd:da:58:0e:68:
                    77:6f:ed:1e:95:4d:26:d7:ad:ff:32:71:1a:01:e0:
                    2d:22:97:52:a3:1a:19:93:7a:46:83:f8:b3:74:64:
                    e3:d4:5a:ae:2b:de:4a:67:a5:b6:1a:8f:a9:87:ed:
                    19:40:13:3f:3e:6d:a4:1d:a2:cf:53:78:e4:64:72:
                    b9:ec:d0:c6:ef:a8:d6:47:5a:bd:57:94:dc:71:c9:
                    1b:f0:33:d7:6a:ea:ad:dd:c6:77:eb:26:72:99:6c:
                    c4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:83:DB:89:97:F0:A9:1A:E2:27:5E:0A:DD:1B:E5:37:DB:59:F6:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/17992761-e289-3430-be43-d05129efc435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:367::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:0b:51:26:79:69:58:fc:fd:49:93:bd:95:ba:87:2b:de:2f:
         eb:b3:9b:b3:28:04:32:40:9d:e6:ec:57:a6:81:59:b3:03:e8:
         c5:e8:36:52:f7:db:eb:25:de:05:0e:4e:4e:86:85:09:a6:7c:
         16:17:5c:86:df:9f:44:c8:49:4c:47:af:a1:1d:f0:c4:9b:99:
         50:a7:37:4a:ca:e2:2f:b4:ef:3c:ba:6a:76:a2:35:35:d9:8e:
         e5:80:da:00:be:3b:36:a5:f8:9e:9b:ec:88:e7:f4:32:0e:e3:
         4f:ad:0a:b4:32:2c:10:b9:ed:d4:67:68:89:25:c1:1e:6e:65:
         84:a9:8e:7e:58:89:33:be:41:a2:d9:53:59:a6:0d:ea:4c:4a:
         03:f1:cc:13:68:c4:8b:86:d9:8b:4b:53:8a:96:6f:c3:37:61:
         4d:28:1e:ac:18:a1:d8:7b:a6:58:10:84:a9:51:93:38:79:c3:
         2f:63:85:ed:55:95:70:57:00:26:2f:ef:c1:a7:15:2f:35:d4:
         ec:40:45:1b:88:6a:87:f4:3e:dd:aa:2d:f9:92:77:77:93:59:
         50:d2:a8:04:e3:6f:32:e6:07:36:26:8a:5d:11:89:d9:59:9f:
         e1:6f:e4:02:70:8a:48:a1:d4:f4:04:3b:15:6f:f6:fb:61:e1:
         2d:ad:74:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:46:15 2026 by rpki-client