Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/23099ea8-b4ef-3ffa-8bab-cb43313a8559.roa
File:                     23099ea8-b4ef-3ffa-8bab-cb43313a8559.roa (raw, json)
Hash identifier:          3xfmVaOJ+fQpYUjuUQaT8rEGl9Dnigj6Ug6IbamnIS0=
Subject key identifier:   C8:C1:F2:18:B5:87:21:66:A5:05:E5:99:42:9D:03:9A:E7:FC:0A:FE
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DDE71A9FB1773255E9D80
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/23099ea8-b4ef-3ffa-8bab-cb43313a8559.roa
Signing time:             Tue 12 May 2026 13:06:19 +0000
ROA not before:           Tue 12 May 2026 13:06:19 +0000
ROA not after:            Mon 10 Aug 2026 13:06:19 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:55::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:de:71:a9:fb:17:73:25:5e:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:19 2026 GMT
            Not After : Aug 10 13:06:19 2026 GMT
        Subject: CN=42af2591-ef65-4421-9f92-0a804af59cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:28:9c:50:6d:88:0b:36:f3:c4:db:63:0e:b7:
                    e1:75:02:61:8f:c4:a5:96:d7:3c:25:bb:b0:00:7a:
                    33:ed:80:83:0f:5f:8e:bc:11:15:d0:90:15:17:d7:
                    6e:57:bb:50:ad:3e:3b:e1:c2:6a:5c:fa:d2:b8:2a:
                    c3:5f:a7:a2:65:9b:04:29:d5:0d:b4:f6:38:57:8a:
                    02:71:21:15:e3:e7:14:f2:82:0b:d3:19:7a:81:99:
                    b6:04:fb:9f:96:30:70:d6:79:43:63:b7:54:39:2c:
                    f4:86:7d:ce:9a:f8:39:a8:2b:8d:02:88:6b:85:65:
                    71:41:af:bb:d0:74:b5:91:e6:ca:1c:19:88:c2:dc:
                    9b:9c:ae:e9:f1:42:2d:29:2b:2d:ee:79:d5:3d:f5:
                    db:aa:f1:d9:40:a7:01:9d:b5:70:03:e6:6a:c1:78:
                    f0:c4:fa:22:a8:6a:31:70:b6:1a:e1:93:f7:15:00:
                    75:4f:81:cb:81:41:2f:a9:48:db:e5:71:13:bd:d2:
                    e3:e4:ae:90:bd:db:b6:dc:d8:63:b2:f8:af:49:36:
                    b7:08:31:2f:02:b3:a2:61:05:59:e3:bb:e5:87:1e:
                    50:e2:56:2d:fe:3e:36:92:01:86:4c:62:8b:72:e0:
                    e2:26:12:9b:ce:0e:7d:a4:84:90:ae:90:95:27:c8:
                    17:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C1:F2:18:B5:87:21:66:A5:05:E5:99:42:9D:03:9A:E7:FC:0A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/23099ea8-b4ef-3ffa-8bab-cb43313a8559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:55::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:6a:9a:cb:dd:eb:01:18:72:8d:6b:df:e4:d9:39:1c:ba:e1:
         95:5c:1b:e2:5f:e1:87:b3:45:23:9e:3b:01:c2:9c:28:90:c1:
         0f:c9:63:7e:85:2b:49:38:85:42:f9:86:76:a8:ba:b1:20:7e:
         59:f6:72:6c:7d:77:56:8b:52:fa:50:51:fc:62:e7:1a:55:c3:
         04:89:98:03:28:0c:6d:10:a4:9e:1d:99:d0:39:ef:7b:bd:06:
         4f:21:7e:94:df:8d:72:ab:03:fe:3c:70:59:1b:7c:df:62:ba:
         d4:b9:ab:d0:0d:99:bf:fc:33:f7:70:09:d5:31:00:b6:31:4d:
         d4:4f:c2:09:78:21:c0:d4:f6:d9:fc:e9:8a:0d:0d:ce:05:bd:
         0b:0e:23:16:53:c0:90:b0:5a:52:22:32:72:2c:a3:10:1a:ee:
         e3:08:35:44:6d:13:cb:3d:89:01:c8:e0:b2:aa:d3:b3:bb:cc:
         80:e1:38:73:c0:47:09:5d:6c:37:72:48:eb:12:31:cb:4c:31:
         23:ba:b1:e8:69:38:0d:32:6b:00:dc:4f:af:1f:6b:a3:ab:9d:
         81:ea:a3:c6:df:d5:2e:61:93:1a:50:07:54:6a:95:3c:1c:f0:
         e6:ba:e0:78:0e:95:d8:83:aa:e4:93:9f:e1:d9:73:27:b5:6b:
         a8:b7:31:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:29 2026 by rpki-client