Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/1fcd66f5-d02d-3878-9e2b-6ac28587cf14.roa
File:                     1fcd66f5-d02d-3878-9e2b-6ac28587cf14.roa (raw, json)
Hash identifier:          hdtU9gBUQRwsQSlxcUgW1fYKfNsu3Mrro+woZPgSKJg=
Subject key identifier:   E7:81:0E:22:85:E0:55:C9:5A:75:49:C0:F2:40:63:1A:38:87:B2:57
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E19D8ADAE5C395EC2C080
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/1fcd66f5-d02d-3878-9e2b-6ac28587cf14.roa
Signing time:             Tue 12 May 2026 13:06:47 +0000
ROA not before:           Tue 12 May 2026 13:06:47 +0000
ROA not after:            Mon 10 Aug 2026 13:06:47 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3d8::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:19:d8:ad:ae:5c:39:5e:c2:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:47 2026 GMT
            Not After : Aug 10 13:06:47 2026 GMT
        Subject: CN=8b6396c1-b2f7-435d-8d7d-cfe7e2c7e7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:e1:9e:f9:47:25:cc:9b:d3:8c:74:d6:30:
                    8b:c2:ff:ea:80:39:84:49:4a:93:72:a0:63:86:90:
                    db:93:76:4e:25:b4:90:76:c1:91:44:dc:ae:5d:6a:
                    6c:ac:3c:c6:b8:8e:f1:39:fc:41:e1:8f:30:4b:ea:
                    3c:de:d5:cd:ab:a9:5a:bd:fe:03:81:c3:c0:e4:45:
                    41:9c:f9:95:a1:79:6f:49:93:30:30:59:7b:f0:b2:
                    c5:4a:7d:10:95:50:2f:03:1a:91:cd:47:65:0c:4d:
                    42:49:c7:18:98:8f:50:c7:8d:6d:17:e4:dc:b9:62:
                    53:3b:4c:ac:f4:71:41:4b:a3:ac:55:8d:4f:1e:85:
                    2d:9b:b0:45:98:b4:63:fa:f0:fe:c7:9e:52:45:0e:
                    f1:06:cd:02:aa:6b:28:6e:db:12:20:09:e0:fa:1d:
                    1c:ba:16:ea:2e:d1:41:59:56:ee:31:47:0a:4f:86:
                    f6:2c:92:aa:67:61:b9:77:ad:91:0e:df:9b:65:a8:
                    f7:7f:98:5a:ec:e4:80:a0:10:f7:d7:60:30:01:c9:
                    e5:76:8b:5c:5e:00:cb:6c:f7:55:94:39:9b:63:ea:
                    0b:ef:c1:4b:b4:1d:73:08:92:97:eb:58:cc:00:18:
                    37:8c:da:66:97:e2:03:9f:c3:c7:22:60:7d:be:08:
                    dd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:81:0E:22:85:E0:55:C9:5A:75:49:C0:F2:40:63:1A:38:87:B2:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/1fcd66f5-d02d-3878-9e2b-6ac28587cf14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3d8::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:18:a5:43:db:92:25:62:ad:9a:3d:89:2b:0c:1b:09:19:e1:
         e0:83:e8:ed:9a:fe:35:60:19:09:00:61:55:2b:2c:0f:c9:97:
         19:15:b6:ce:9a:a2:2d:23:18:ab:5e:bf:d3:03:10:0b:41:54:
         7f:ff:33:61:67:69:d1:15:66:8b:9d:8b:0c:7d:79:6c:5e:87:
         2d:bf:a4:67:a9:46:51:0f:87:8b:1d:ed:d5:29:09:bb:03:e3:
         e7:23:b8:e7:d1:f2:83:23:06:66:db:41:4c:f8:cc:5b:b8:a0:
         43:0e:5d:37:12:9f:a5:ce:51:1d:1b:95:28:0b:32:a5:d5:53:
         d3:86:cd:6b:1c:4c:22:ce:79:b3:72:79:46:67:ea:34:ef:86:
         92:ec:ef:33:c1:a1:97:ef:82:5f:4f:d8:8a:00:98:8f:66:cf:
         b4:46:9c:29:51:77:1d:02:23:1a:b8:26:ad:94:df:22:26:ec:
         10:08:84:37:7f:df:96:46:3c:ae:a3:db:8b:02:70:4a:54:02:
         db:fd:2a:05:a8:df:e6:fd:7b:9b:f1:b1:d9:92:ae:62:27:a9:
         f4:8a:3a:cb:7f:0c:a0:55:37:5f:ed:ca:4a:7e:c9:ea:d5:90:
         b5:af:15:03:0f:e3:1e:d9:d8:c1:a3:f0:3a:75:25:77:8e:fe:
         dd:a2:f3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:42:58 2026 by rpki-client