Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/2db7b4ef-12ea-3b7b-b932-51a145b42dd6.roa
File:                     2db7b4ef-12ea-3b7b-b932-51a145b42dd6.roa (raw, json)
Hash identifier:          Ax5xUOuKaSPKobEtovwJ4abO3tPEIODLms3ATBCW4Gw=
Subject key identifier:   1F:65:5C:5C:F9:FD:C2:3D:13:3C:0D:D1:BF:68:A4:8C:EF:80:CF:43
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E0B24555963FFC680D380
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/2db7b4ef-12ea-3b7b-b932-51a145b42dd6.roa
Signing time:             Tue 12 May 2026 13:06:41 +0000
ROA not before:           Tue 12 May 2026 13:06:41 +0000
ROA not after:            Mon 10 Aug 2026 13:06:41 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:314::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:0b:24:55:59:63:ff:c6:80:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:41 2026 GMT
            Not After : Aug 10 13:06:41 2026 GMT
        Subject: CN=9ffd5cd6-4b9b-4327-bf88-649da5cfadf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4a:7b:b1:39:62:96:05:66:1c:a4:54:9f:8f:
                    4f:48:0a:cf:cb:cb:76:f8:8a:f6:a2:71:f3:be:b2:
                    73:a0:97:e1:d0:1e:3f:a0:b5:f6:d0:4d:ca:4a:50:
                    dd:c5:2d:1d:b8:3c:98:b0:f1:63:3d:7a:cd:6c:60:
                    68:2d:84:61:c3:a6:bc:21:58:b0:aa:33:f0:84:5b:
                    47:9b:c0:0a:ef:82:be:0d:4f:5f:04:61:1c:f6:35:
                    ee:86:4a:ef:5e:c4:15:ef:19:1c:11:3e:e8:9d:db:
                    10:43:ae:51:7d:77:98:62:64:51:56:0c:46:ea:c9:
                    8e:42:dc:47:6f:3d:08:19:e1:34:cc:b3:e5:81:3e:
                    2f:f0:88:78:55:e4:2a:33:0a:48:de:bd:b7:2c:c5:
                    00:71:68:00:26:55:00:07:ce:28:b6:fe:78:89:68:
                    1c:99:81:cb:51:66:89:9e:c9:3f:c9:97:aa:63:41:
                    90:83:1c:42:5b:80:60:bc:01:b1:44:6b:db:0e:28:
                    26:4b:09:c1:ac:3a:bf:c0:40:5c:41:80:9e:f2:4b:
                    cd:54:09:f6:71:ab:ff:44:6d:6e:cd:df:92:02:25:
                    30:0a:43:7d:66:bf:38:1e:f8:96:f9:31:29:47:bd:
                    15:a5:6c:34:3e:04:2b:5d:e7:88:5d:78:86:9b:cd:
                    83:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:65:5C:5C:F9:FD:C2:3D:13:3C:0D:D1:BF:68:A4:8C:EF:80:CF:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/2db7b4ef-12ea-3b7b-b932-51a145b42dd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:314::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:1d:3c:3d:5b:00:05:d5:cd:5f:f8:cb:f9:61:97:83:a9:2d:
         88:7b:e0:82:86:a3:58:ba:4e:66:00:c4:ad:77:03:8b:f8:5a:
         55:54:b4:78:ec:2b:0f:8c:5b:c3:11:ea:e0:36:6e:62:3b:89:
         13:65:7f:d0:26:a5:67:b0:7a:a7:e8:65:1c:e9:e9:f8:13:c9:
         20:75:38:ea:29:f8:b1:4b:19:ae:6d:fe:e3:73:62:c5:63:68:
         9d:c5:a9:03:75:63:3d:58:c0:ce:12:9c:5b:62:bd:00:72:8a:
         1e:6a:90:60:7b:f5:ff:d6:d2:e8:96:2e:35:4a:a5:76:43:42:
         91:68:ea:10:37:97:f0:d3:46:45:e3:db:62:b1:6b:19:b5:96:
         43:67:06:91:f5:54:76:4d:6f:79:2c:05:96:e8:1e:61:f7:e4:
         68:a8:58:f5:97:5d:1b:d0:99:67:35:25:18:8d:97:55:61:aa:
         ad:65:cc:9e:ab:f0:2b:1d:08:f6:ac:fe:b7:d2:d6:db:de:04:
         9e:64:eb:ef:cb:20:2f:12:26:39:b4:01:47:a3:03:7f:08:4d:
         c8:a3:48:74:c0:34:7d:97:4d:1e:d8:7f:22:82:bd:09:cb:01:
         19:a0:8c:c7:23:62:cc:4d:c9:ec:e6:58:2d:fc:43:b1:de:d1:
         45:2b:c8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:27 2026 by rpki-client