Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/225ece80-a880-3800-ba81-25964bfb1f76.roa
File:                     225ece80-a880-3800-ba81-25964bfb1f76.roa (raw, json)
Hash identifier:          Ca1NOUDoukqpZgMNb7yny5VmPO8Gjvd6BPDgjHLw98M=
Subject key identifier:   2E:41:D0:E2:1C:1D:2F:48:88:08:4E:55:83:2A:0E:7F:F2:A2:EF:44
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DF148BB4D1424BBD78980
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/225ece80-a880-3800-ba81-25964bfb1f76.roa
Signing time:             Tue 12 May 2026 13:06:28 +0000
ROA not before:           Tue 12 May 2026 13:06:28 +0000
ROA not after:            Mon 10 Aug 2026 13:06:28 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:195::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:f1:48:bb:4d:14:24:bb:d7:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:28 2026 GMT
            Not After : Aug 10 13:06:28 2026 GMT
        Subject: CN=13587368-808e-487e-a2f1-2b89b1ecf845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:65:04:7e:51:43:68:2d:80:fb:c4:4d:0c:
                    53:d7:b1:cd:97:d6:67:32:52:62:40:79:3e:8f:f0:
                    83:9e:27:c4:54:bc:9b:cc:77:c8:3b:e8:73:2d:22:
                    a8:55:c5:d8:23:af:bc:f3:69:0d:ad:b9:cb:86:62:
                    f0:e5:9b:9c:17:52:34:8f:d7:76:1d:c5:cc:57:94:
                    e2:5d:52:63:ed:fd:97:15:74:8a:3d:69:ff:51:69:
                    75:ab:b1:c6:7d:c5:57:3b:1f:de:fc:e4:a1:37:33:
                    4a:ea:e2:c8:39:3e:a7:71:2d:08:75:b2:bd:3b:02:
                    17:fb:9f:5f:81:ab:9a:18:de:de:16:d5:c8:ae:fd:
                    de:97:a5:07:98:5b:d3:57:d1:33:63:6f:63:a7:96:
                    52:5a:a5:35:8d:cf:d6:b4:c8:69:e1:24:7e:9a:16:
                    4b:ea:58:2d:7b:16:0d:ab:87:b5:a6:01:be:b9:d2:
                    e7:b1:0a:56:ab:9d:40:d7:59:f0:79:32:f2:32:4c:
                    79:22:97:b0:9c:0e:cd:1c:37:a9:df:aa:00:45:f6:
                    bb:82:3f:5a:76:bd:9f:ae:7e:68:b6:d5:32:ba:92:
                    18:e0:fe:2c:86:50:bc:4b:11:99:20:7d:c6:33:1d:
                    04:06:31:5c:d9:2f:ad:b3:32:d0:1c:c6:6c:40:75:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:41:D0:E2:1C:1D:2F:48:88:08:4E:55:83:2A:0E:7F:F2:A2:EF:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/225ece80-a880-3800-ba81-25964bfb1f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:195::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:79:af:46:3a:57:e2:ae:b2:d9:a6:16:71:ab:88:69:ce:8e:
         5d:86:ed:11:a0:dd:7c:66:5c:29:54:d0:e3:13:13:68:7a:9b:
         1d:8b:15:a4:b8:51:f1:ad:be:d4:05:29:5d:21:b1:a6:b1:64:
         06:9c:ea:c5:ab:b6:a3:fc:77:eb:fc:65:94:30:80:55:f8:58:
         b2:0b:f1:a9:6a:a3:1b:30:a3:86:da:7c:3f:aa:b6:57:ab:c6:
         fa:cc:95:58:54:78:ac:d0:d7:9d:f1:9b:b9:5a:16:3b:22:bc:
         36:89:b9:43:e7:fb:d6:da:97:59:fc:d7:51:64:35:c6:cf:80:
         d4:2e:b4:42:df:c7:e2:dc:da:7f:ed:14:3b:1c:f0:ca:0e:27:
         ef:65:a2:ac:b6:b0:4d:94:a1:9b:7d:1e:3d:c1:1d:f2:7f:56:
         0d:bb:e3:f5:ae:18:4f:e7:d5:23:fc:a3:e5:0e:eb:f4:14:73:
         81:4c:5c:d0:5a:36:06:48:e2:f7:89:2a:d3:e7:ad:47:5d:fb:
         c0:cc:03:55:4f:b5:23:05:5f:b4:c9:4e:65:c1:94:9e:3f:9b:
         71:d4:52:c5:0e:59:72:cd:ae:c7:eb:c5:1a:07:dd:2d:64:38:
         c1:e3:e7:4f:2b:1e:47:89:9c:aa:77:6b:32:4b:fc:ec:19:0d:
         ae:e2:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:02:41 2026 by rpki-client