Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/2bb7cbc7-ce85-324c-97a4-d9710dc909fd.roa
File:                     2bb7cbc7-ce85-324c-97a4-d9710dc909fd.roa (raw, json)
Hash identifier:          5m9wNNG+9j2aw45+/kc3wnP1/J5TwS+NV2bC405c6DQ=
Subject key identifier:   63:3F:05:A9:FE:E5:8F:84:0D:D6:AC:DA:09:34:16:B8:26:22:87:BB
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E0BA4454A2AC5DD8C7E00
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/2bb7cbc7-ce85-324c-97a4-d9710dc909fd.roa
Signing time:             Tue 12 May 2026 13:06:41 +0000
ROA not before:           Tue 12 May 2026 13:06:41 +0000
ROA not after:            Mon 10 Aug 2026 13:06:41 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:31b::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:0b:a4:45:4a:2a:c5:dd:8c:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:41 2026 GMT
            Not After : Aug 10 13:06:41 2026 GMT
        Subject: CN=958885af-f645-49d4-93c2-ac2109eb666f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f5:37:5d:cc:a0:ce:85:ed:5c:ea:6e:96:d7:
                    d8:8c:ae:29:0a:e5:87:d7:39:c8:87:96:13:fd:65:
                    34:ce:2d:03:19:e4:b4:fe:87:c6:59:cf:76:9f:93:
                    27:14:83:07:ec:11:1c:f4:f6:72:4c:3b:17:ac:88:
                    a3:16:1f:cd:c4:cf:0b:bb:83:36:72:18:e9:78:91:
                    03:7c:b8:01:91:64:27:8e:f6:78:cd:3c:56:6f:0f:
                    e0:95:b5:4e:37:72:46:b2:1f:0a:38:46:2f:6d:03:
                    dc:0f:9e:49:1d:83:93:e5:98:86:35:21:9e:d6:42:
                    e9:8f:ef:f2:09:de:41:9d:1e:40:ea:05:0c:84:53:
                    b7:13:84:e8:6b:7f:f4:3f:60:f9:40:1d:28:f6:d1:
                    14:e1:10:ef:d9:f5:81:64:0a:ef:9b:8a:87:e4:89:
                    c7:fa:0a:64:1b:b8:fd:23:3b:f0:ef:9a:3f:a7:ce:
                    7c:78:b6:79:51:a3:13:6d:80:bc:47:5c:1c:e6:b6:
                    a3:6e:23:3f:d8:34:a3:cc:5a:c1:11:0c:dd:76:77:
                    bb:d3:12:25:a6:0f:2a:e1:f1:1f:1f:5f:1c:c6:d2:
                    5e:87:88:af:f7:c5:62:e0:11:9a:9b:68:1e:54:f9:
                    98:87:13:49:c2:7c:ba:08:0d:e1:68:db:d1:d0:21:
                    aa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3F:05:A9:FE:E5:8F:84:0D:D6:AC:DA:09:34:16:B8:26:22:87:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/2bb7cbc7-ce85-324c-97a4-d9710dc909fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:31b::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e1:93:a9:3c:53:2d:d7:20:3c:45:c8:af:53:5e:72:f0:21:
         47:c6:43:0b:df:d0:cb:8a:32:43:73:72:2a:db:1c:18:b6:ea:
         5d:60:87:13:44:23:c6:fe:ec:37:27:ee:f3:82:d7:f9:2f:f4:
         84:94:71:4d:8f:c8:95:02:dc:71:f8:52:a5:8f:0e:45:44:0b:
         72:82:b4:9b:5c:01:19:1c:27:fa:b5:57:0d:19:43:b1:22:0c:
         12:a2:2c:b3:83:d4:ad:56:10:74:60:bd:bb:4a:90:95:9d:18:
         6e:11:b4:54:c6:0b:8f:8a:6f:43:8a:3f:1d:d0:52:7e:af:f9:
         74:06:c6:6b:09:53:56:60:58:ef:97:3f:dd:85:ae:e6:0c:25:
         f9:e5:88:b5:a6:91:92:4a:7f:2d:52:ce:f2:dc:83:3f:44:62:
         16:da:10:02:76:26:55:82:0b:d1:74:4d:9f:e3:5a:a6:dc:72:
         27:c0:eb:45:24:14:d8:ae:fa:c1:a7:c1:b7:00:5c:a4:21:e4:
         39:fb:47:c6:5a:e3:ed:9f:95:72:73:eb:f9:db:62:20:05:77:
         5f:e3:14:f0:c4:09:4d:11:6b:ac:57:c6:ee:f9:27:39:89:e7:
         d9:f9:5e:be:6a:4a:26:f7:08:cf:ad:ab:2c:d5:8d:54:13:5b:
         ad:df:96:fd
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLgukRUoqxd2MfgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDY0MVoXDTI2MDgxMDEzMDY0MVowLzEtMCsGA1UEAxMk
OTU4ODg1YWYtZjY0NS00OWQ0LTkzYzItYWMyMTA5ZWI2NjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vU3XcygzoXtXOpultfYjK4pCuWH1znIh5YT
/WU0zi0DGeS0/ofGWc92n5MnFIMH7BEc9PZyTDsXrIijFh/NxM8Lu4M2chjpeJED
fLgBkWQnjvZ4zTxWbw/glbVON3JGsh8KOEYvbQPcD55JHYOT5ZiGNSGe1kLpj+/y
Cd5BnR5A6gUMhFO3E4Toa3/0P2D5QB0o9tEU4RDv2fWBZArvm4qH5InH+gpkG7j9
Izvw75o/p858eLZ5UaMTbYC8R1wc5rajbiM/2DSjzFrBEQzddne70xIlpg8q4fEf
H18cxtJeh4iv98Vi4BGam2geVPmYhxNJwny6CA3haNvR0CGqEQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFGM/Ban+5Y+EDdas2gk0FrgmIoe7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvMmJiN2NiYzctY2U4NS0z
MjRjLTk3YTQtZDk3MTBkYzkwOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AxswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAluGTqTxTLdcgPEXIr1NecvAhR8ZDC9/Qy4oyQ3NyKtscGLbq
XWCHE0Qjxv7sNyfu84LX+S/0hJRxTY/IlQLccfhSpY8ORUQLcoK0m1wBGRwn+rVX
DRlDsSIMEqIss4PUrVYQdGC9u0qQlZ0YbhG0VMYLj4pvQ4o/HdBSfq/5dAbGawlT
VmBY75c/3YWu5gwl+eWItaaRkkp/LVLO8tyDP0RiFtoQAnYmVYIL0XRNn+Naptxy
J8DrRSQU2K76wafBtwBcpCHkOftHxlrj7Z+VcnPr+dtiIAV3X+MU8MQJTRFrrFfG
7vknOYnn2flevmpKJvcIz62rLNWNVBNbrd+W/Q==
-----END CERTIFICATE-----
Generated at Wed May 13 07:15:09 2026 by rpki-client