Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/23d80e60-1825-37e9-aed6-23a2a8a43cf3.roa
File:                     23d80e60-1825-37e9-aed6-23a2a8a43cf3.roa (raw, json)
Hash identifier:          kOVaS6NvKAiQ81lUsX1XJJZdMELeMThgOLiWEvz/e9Q=
Subject key identifier:   03:9F:D7:AF:E8:83:C9:A1:72:FE:A6:21:F6:C1:EA:EC:83:69:33:FF
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DE0F26BB889C24454B700
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/23d80e60-1825-37e9-aed6-23a2a8a43cf3.roa
Signing time:             Tue 12 May 2026 13:06:21 +0000
ROA not before:           Tue 12 May 2026 13:06:21 +0000
ROA not after:            Mon 10 Aug 2026 13:06:21 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:82::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:e0:f2:6b:b8:89:c2:44:54:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:21 2026 GMT
            Not After : Aug 10 13:06:21 2026 GMT
        Subject: CN=be3b158d-4516-4e10-9862-aeef49e862e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f2:5f:87:cd:48:dd:24:5e:bd:5a:f6:a1:16:
                    ef:6d:ed:4d:12:4d:88:6f:ed:66:43:cc:ef:0f:f1:
                    cc:4c:1c:63:28:3e:08:96:12:2d:9d:d7:84:44:4f:
                    2c:f4:d4:bd:79:c2:a5:e0:82:f6:66:74:e5:54:85:
                    5c:2c:aa:78:74:13:8a:7f:15:c1:73:94:b3:3c:d5:
                    49:07:51:a8:02:2e:ab:8b:b1:77:3a:10:f5:e7:ba:
                    45:60:0c:11:8b:86:ab:99:61:f3:ca:0b:84:86:87:
                    4b:f9:1f:6d:fb:a6:dc:b7:d3:59:ee:ab:26:ba:f5:
                    e2:23:c5:e4:51:ba:71:32:05:ca:2a:cb:4d:9f:32:
                    40:c8:cc:89:08:7f:d7:d2:a5:d8:de:73:6c:5d:7f:
                    f7:d6:e8:1a:da:13:c3:b7:02:56:ce:09:e6:54:87:
                    1b:70:e7:93:ee:47:59:27:38:db:a1:3a:3f:9e:1b:
                    f6:37:85:bc:1a:7c:a3:a6:83:58:f0:40:84:81:1b:
                    40:ff:d3:03:d7:28:ca:dd:96:7f:8f:f6:74:e0:cc:
                    28:9a:dd:8c:31:4f:17:ee:61:30:3e:35:fb:58:70:
                    97:1a:b5:a7:2e:5e:ef:47:48:0d:76:b3:70:5b:55:
                    8a:b8:f8:a4:0b:e4:f6:cc:52:9e:0a:8d:75:53:55:
                    8d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9F:D7:AF:E8:83:C9:A1:72:FE:A6:21:F6:C1:EA:EC:83:69:33:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/23d80e60-1825-37e9-aed6-23a2a8a43cf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:82::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:19:47:74:cc:47:6a:11:60:1b:65:7f:e2:c3:4f:76:ec:a5:
         2b:fc:40:15:92:09:aa:f2:2a:6d:5e:ab:69:37:60:5d:f2:54:
         2b:9d:7f:80:ca:e3:28:b3:90:7b:6a:85:83:fe:9e:24:2c:fe:
         f5:36:bf:ac:0c:d0:47:77:e7:13:0c:6f:99:99:51:b2:57:cc:
         81:74:8b:2c:c0:69:bf:23:80:a0:f6:ad:09:39:8c:a0:f5:74:
         ce:be:92:65:23:8f:38:2f:1e:91:cc:4c:31:6f:41:16:a3:c8:
         1e:3f:36:89:46:b2:c8:b1:45:c6:3b:22:11:a9:3a:d3:95:46:
         47:65:b2:7c:5e:e1:19:fc:4d:d6:29:44:bf:a1:87:f0:46:cd:
         a3:fa:1d:72:e1:91:91:20:78:bf:f4:87:b5:03:e6:62:7e:05:
         72:1f:cc:26:10:43:6a:e3:df:c8:0d:c7:a7:2b:e1:af:ca:17:
         4f:ac:23:29:82:9f:08:9c:92:f3:07:ca:76:28:25:16:bc:57:
         c8:59:e5:2a:f1:d0:df:ab:5f:07:a6:4e:cc:30:a6:86:d9:e6:
         29:71:31:4a:13:78:7f:48:6d:89:bc:e7:5c:b5:51:47:bd:0e:
         de:a0:5e:62:ec:4c:c6:3b:7b:53:01:71:46:71:e3:7a:4b:9d:
         40:c5:8b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:23 2026 by rpki-client