Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/23bcb121-65e5-31cf-85cf-7662685d442e.roa
File:                     23bcb121-65e5-31cf-85cf-7662685d442e.roa (raw, json)
Hash identifier:          Zl35Mg5H1UEEW7c7xphNzRv3Xqcz1ImajcdI8RQati8=
Subject key identifier:   9D:41:62:17:D0:26:3A:86:D8:69:D4:2F:3E:10:B0:3F:C3:75:F0:74
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DDEF5F185C4629EAFC900
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/23bcb121-65e5-31cf-85cf-7662685d442e.roa
Signing time:             Tue 12 May 2026 13:06:20 +0000
ROA not before:           Tue 12 May 2026 13:06:20 +0000
ROA not after:            Mon 10 Aug 2026 13:06:20 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:5e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:de:f5:f1:85:c4:62:9e:af:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:20 2026 GMT
            Not After : Aug 10 13:06:20 2026 GMT
        Subject: CN=02531798-e74d-4b83-856d-cb0e14373fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:87:4d:44:6b:44:4e:9e:55:52:1e:16:83:
                    d6:53:c1:15:fe:d1:57:e7:64:4b:50:aa:dd:a0:78:
                    18:ac:92:da:d4:f8:27:bb:db:f4:fe:d7:ba:e6:9a:
                    c3:0a:c3:96:70:fb:c4:27:6c:8c:91:35:af:e4:10:
                    02:2b:3e:73:fb:e9:72:c2:bd:fa:fd:11:f8:a1:2c:
                    ea:8b:5f:7a:3f:2e:1f:96:d5:94:79:ab:dd:5e:c4:
                    b0:da:a8:99:79:fb:40:1a:63:b2:d4:bd:38:4f:0e:
                    47:cf:e8:b4:a5:b7:a2:3b:41:87:ad:6f:69:05:8a:
                    94:6a:41:85:af:a7:8c:eb:0f:38:8f:f7:37:9e:ac:
                    b5:65:70:09:6a:d6:f0:29:f0:cd:15:cb:f4:73:26:
                    18:cb:e3:6a:1c:cd:73:ce:8d:57:82:a8:d1:65:be:
                    16:ff:0a:d1:19:2b:6c:ea:89:f7:c5:dc:4c:61:ec:
                    81:e4:7a:ed:d2:1e:46:00:ed:5b:22:ce:7f:0c:fd:
                    ce:80:e8:6f:31:b5:f3:8a:f2:6b:f0:b4:02:f2:56:
                    db:6e:b1:88:be:a6:8f:16:c1:d1:f4:21:90:48:c2:
                    ff:18:d7:ff:a7:ae:2a:a9:5f:27:a4:ab:10:e1:f9:
                    30:a1:0f:d5:f0:65:25:46:e9:5e:75:66:3e:85:84:
                    e8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:41:62:17:D0:26:3A:86:D8:69:D4:2F:3E:10:B0:3F:C3:75:F0:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/23bcb121-65e5-31cf-85cf-7662685d442e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:5e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:18:6d:e0:49:49:14:5a:50:17:06:b4:53:27:91:a2:dd:51:
         4d:ad:b0:8b:77:68:d3:fb:0e:66:eb:43:35:89:2d:ee:e1:1b:
         4e:38:7e:a6:58:37:3e:30:06:e1:6a:6b:57:22:6d:d2:79:ee:
         16:ba:83:c8:8e:59:de:4c:e8:0c:c0:31:79:73:78:53:02:fe:
         7e:14:d4:e8:2b:3b:49:20:aa:c5:1e:57:a2:66:23:c8:71:8f:
         55:ad:e2:5e:b2:30:ac:65:87:b8:3d:5e:00:85:3f:b2:38:3b:
         e0:c2:0b:01:4d:e3:03:ee:73:85:d1:e6:c6:b7:c5:da:b2:9d:
         dc:05:c1:65:62:4f:52:14:c9:ae:77:0c:2e:f6:ec:3e:2f:ca:
         37:6a:cf:66:cd:92:fb:d0:f8:2d:0f:8b:92:5c:b9:31:30:0b:
         fb:dc:0b:51:8e:a6:52:d1:b1:7f:17:78:95:be:bd:01:d5:10:
         53:d8:32:f1:09:ad:45:04:47:f8:ba:14:a8:df:0d:27:e9:66:
         13:e9:4f:5c:d0:ae:f4:36:a1:83:39:23:ef:4f:ef:b2:65:2d:
         1a:f4:d6:7f:3b:24:bb:91:3e:30:1d:b7:c3:76:e4:8e:fc:b5:
         31:31:45:01:b6:d9:cb:bc:57:07:0c:08:64:13:95:9b:1a:36:
         7f:41:6e:df
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLd718YXEYp6vyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYyMFoXDTI2MDgxMDEzMDYyMFowLzEtMCsGA1UEAxMk
MDI1MzE3OTgtZTc0ZC00YjgzLTg1NmQtY2IwZTE0MzczZmRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvuHTURrRE6eVVIeFoPWU8EV/tFX52RLUKrd
oHgYrJLa1Pgnu9v0/te65prDCsOWcPvEJ2yMkTWv5BACKz5z++lywr36/RH4oSzq
i196Py4fltWUeavdXsSw2qiZeftAGmOy1L04Tw5Hz+i0pbeiO0GHrW9pBYqUakGF
r6eM6w84j/c3nqy1ZXAJatbwKfDNFcv0cyYYy+NqHM1zzo1XgqjRZb4W/wrRGSts
6on3xdxMYeyB5Hrt0h5GAO1bIs5/DP3OgOhvMbXzivJr8LQC8lbbbrGIvqaPFsHR
9CGQSML/GNf/p64qqV8npKsQ4fkwoQ/V8GUlRuledWY+hYToRwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFJ1BYhfQJjqG2GnULz4QsD/DdfB0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvMjNiY2IxMjEtNjVlNS0z
MWNmLTg1Y2YtNzY2MjY4NWQ0NDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AF4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAoRht4ElJFFpQFwa0UyeRot1RTa2wi3do0/sOZutDNYkt7uEb
Tjh+plg3PjAG4WprVyJt0nnuFrqDyI5Z3kzoDMAxeXN4UwL+fhTU6Cs7SSCqxR5X
omYjyHGPVa3iXrIwrGWHuD1eAIU/sjg74MILAU3jA+5zhdHmxrfF2rKd3AXBZWJP
UhTJrncMLvbsPi/KN2rPZs2S+9D4LQ+Lkly5MTAL+9wLUY6mUtGxfxd4lb69AdUQ
U9gy8QmtRQRH+LoUqN8NJ+lmE+lPXNCu9Dahgzkj70/vsmUtGvTWfzsku5E+MB23
w3bkjvy1MTFFAbbZy7xXBwwIZBOVmxo2f0Fu3w==
-----END CERTIFICATE-----
Generated at Wed May 13 09:11:58 2026 by rpki-client