Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/1add3f77-4a72-3070-af2b-32c343a5d3f6.roa
File:                     1add3f77-4a72-3070-af2b-32c343a5d3f6.roa (raw, json)
Hash identifier:          D+xOOva0u7IPtLHtA4QOfmrKuMPuu9FY8u20wvwqVw8=
Subject key identifier:   58:C1:C2:37:69:A1:AB:8A:95:C1:C3:18:8F:D3:C5:7A:37:84:81:5A
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E177F78446A0EC83421C0
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/1add3f77-4a72-3070-af2b-32c343a5d3f6.roa
Signing time:             Tue 12 May 2026 13:06:46 +0000
ROA not before:           Tue 12 May 2026 13:06:46 +0000
ROA not after:            Mon 10 Aug 2026 13:06:46 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3b9::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:17:7f:78:44:6a:0e:c8:34:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:46 2026 GMT
            Not After : Aug 10 13:06:46 2026 GMT
        Subject: CN=83621aaa-f4b0-4736-8493-ed137726f53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b4:99:96:c9:37:40:dc:73:03:c5:a1:9b:6d:
                    bb:06:03:39:38:72:85:8f:94:1b:d2:c4:d0:9e:d7:
                    e1:60:0e:0e:8f:18:34:88:e9:d4:fc:4a:e2:30:8f:
                    9d:12:0f:9f:2b:ca:fb:e3:43:81:62:e3:a1:d3:b7:
                    f4:d3:67:4d:68:e3:4f:04:8d:65:be:d7:a0:16:60:
                    15:04:e3:38:8c:59:ef:78:1b:d5:de:d8:4c:2d:15:
                    10:b0:50:1b:18:7d:6c:a2:9e:84:ec:a4:9a:b4:b9:
                    9d:79:ff:4b:6a:ba:49:0f:54:d4:c5:9a:49:14:81:
                    c9:33:16:07:2b:f3:81:cf:91:38:b9:52:8b:09:bb:
                    02:9c:4b:59:a9:01:47:84:9e:b3:24:69:8f:09:be:
                    a0:e9:24:77:e4:7d:a6:68:6b:14:cc:55:d3:7f:ff:
                    10:85:d5:f3:d7:e7:15:25:54:79:32:9d:ce:b5:73:
                    08:ef:a8:c7:24:81:f7:ae:e5:c3:2d:9c:ce:95:b9:
                    72:48:3b:08:a6:c2:65:96:dc:f2:73:88:6f:80:19:
                    52:c2:7b:23:9c:4b:01:96:b9:13:00:aa:d0:06:d7:
                    9a:43:f1:22:a1:de:4a:99:20:8b:cb:8d:7c:ce:04:
                    a4:41:47:21:93:7f:c9:86:76:18:11:8f:90:81:a1:
                    b8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C1:C2:37:69:A1:AB:8A:95:C1:C3:18:8F:D3:C5:7A:37:84:81:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/1add3f77-4a72-3070-af2b-32c343a5d3f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3b9::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:e5:13:b5:db:be:37:e3:ae:f2:0f:58:a1:29:81:b6:27:59:
         04:e0:ba:b5:55:60:bf:c7:29:e4:e0:47:5e:12:ce:d3:4d:32:
         63:46:ea:49:23:43:a4:b1:9a:cb:5e:a1:ee:41:d6:a8:2d:61:
         8c:29:14:f1:9c:a2:3c:c2:86:ca:d0:46:53:14:45:21:6f:ce:
         ca:7b:a6:39:ca:5f:28:b8:30:14:b3:42:e5:ed:97:f8:df:64:
         26:49:c0:15:9e:f1:93:c4:65:f6:7a:48:f7:c8:d0:ce:65:29:
         45:b4:cb:95:53:82:12:0a:07:f9:92:b5:e2:0b:d2:e3:8b:f7:
         dc:73:37:9b:ff:25:b9:72:5d:8d:9e:ad:a9:87:40:70:dc:eb:
         7d:a8:a2:e5:8f:e5:e3:7f:7b:b5:cc:01:44:e1:3e:44:1e:56:
         6d:b5:81:b5:8d:65:02:44:00:e6:ce:4b:4b:ee:b4:a6:71:26:
         72:6a:50:35:95:d9:d9:34:4f:41:47:ed:43:b0:bf:5e:a3:84:
         76:45:a9:e0:15:8c:8f:ac:fe:a2:9f:86:31:b4:d8:9e:67:74:
         00:a8:aa:70:d4:b0:51:36:e6:d2:b6:e5:20:75:89:90:81:c4:
         c3:91:9f:8b:d2:22:87:9c:e3:5a:30:02:20:7d:e9:dc:1e:52:
         51:68:20:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:30:03 2026 by rpki-client