Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/30137571-2f74-3f1c-8293-094a0be61d7e.roa
File:                     30137571-2f74-3f1c-8293-094a0be61d7e.roa (raw, json)
Hash identifier:          9+eAY5sKv1APLH9MqzeiXG581U+jYng5lP3H0Chp+k4=
Subject key identifier:   0C:97:39:C2:BF:58:A9:FB:C9:19:5D:96:26:E5:E0:0D:F2:47:68:C1
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DE1BEC78336062A694740
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/30137571-2f74-3f1c-8293-094a0be61d7e.roa
Signing time:             Tue 12 May 2026 13:06:21 +0000
ROA not before:           Tue 12 May 2026 13:06:21 +0000
ROA not after:            Mon 10 Aug 2026 13:06:21 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:90::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:e1:be:c7:83:36:06:2a:69:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:21 2026 GMT
            Not After : Aug 10 13:06:21 2026 GMT
        Subject: CN=de19a156-4937-417f-9867-b9a3d83b549f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:03:7b:fe:be:de:4a:f4:35:bd:8b:fd:0b:7f:
                    55:aa:15:39:5d:fd:f6:5e:36:81:81:d2:05:27:22:
                    2b:f2:f8:64:18:65:c6:f7:ad:70:3c:b5:54:6f:79:
                    61:c9:21:0d:a9:a0:ac:f2:b5:d9:44:84:f7:c9:48:
                    6f:60:f7:26:0d:e9:c1:01:76:0f:39:2c:68:67:2b:
                    4b:d3:6c:78:3b:20:ed:32:e6:fd:15:52:df:35:d2:
                    07:ff:91:81:64:42:3d:6c:80:ad:d5:d5:00:06:a6:
                    42:ef:05:bd:11:da:76:f0:a6:84:6d:09:17:5a:4e:
                    1b:55:f8:f0:a4:8a:6c:68:4a:57:b9:3d:23:4b:75:
                    ae:bb:2c:5a:4c:62:0f:e8:03:52:24:a3:5d:64:ef:
                    9b:db:c1:fd:d0:e4:3a:7f:24:05:9d:c2:d1:59:a7:
                    4f:67:a7:b8:5c:db:08:c5:af:98:e4:7b:08:b4:78:
                    1c:0a:2c:e0:26:09:e0:c2:30:f5:82:a7:ca:9b:90:
                    82:03:f8:ca:c8:95:de:ae:7e:1a:a9:69:0a:38:d6:
                    68:fb:18:c7:1d:4a:2b:d7:63:d8:35:1f:79:9c:90:
                    cb:6b:dd:7f:a3:4e:8a:9e:52:0a:77:42:1c:81:8a:
                    b5:04:5d:c8:76:d5:d8:76:27:c0:8a:77:66:65:4c:
                    29:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:97:39:C2:BF:58:A9:FB:C9:19:5D:96:26:E5:E0:0D:F2:47:68:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/30137571-2f74-3f1c-8293-094a0be61d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:90::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:50:75:4d:a3:af:ea:f4:6c:a6:26:37:4c:69:52:35:27:8d:
         3c:84:75:b7:76:cb:84:2c:a5:3f:f9:2f:8a:c3:a5:71:b3:22:
         93:6c:46:f2:e4:89:ac:2e:1b:df:a7:54:e9:ea:6f:b7:75:c4:
         fa:ee:bc:d7:27:de:6a:d6:56:aa:36:80:67:91:42:a4:2c:b4:
         52:97:65:d9:2e:54:5d:05:04:6b:47:cd:c2:bd:07:75:5d:5c:
         88:d5:95:48:ed:32:81:3e:75:fb:29:13:16:f1:27:9a:83:d1:
         ce:8b:f0:fa:c3:ea:e8:18:1c:dd:66:d0:21:0d:4c:dd:f6:70:
         39:af:c6:de:9a:3a:6f:db:76:70:93:fa:5e:8a:39:a2:1a:b5:
         62:d9:de:4c:7a:c2:e5:9d:63:63:f4:8b:45:fa:e8:f5:86:4d:
         0f:fc:da:7f:ba:90:9a:f9:4e:cb:ca:4e:ef:b1:8e:37:5b:5e:
         8d:c9:52:94:cf:98:70:5b:3b:82:b1:6f:20:ab:ff:4f:81:ea:
         14:e5:26:77:40:b7:d9:1a:1f:90:0d:a5:6f:b2:24:2d:66:05:
         5a:49:0b:76:f7:41:ce:0e:bd:3e:0c:c3:4a:af:d8:b1:e2:b4:
         70:5a:23:20:be:91:a6:94:83:e7:61:54:ae:9c:ed:94:9d:49:
         27:d6:d4:61
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLeG+x4M2BippR0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYyMVoXDTI2MDgxMDEzMDYyMVowLzEtMCsGA1UEAxMk
ZGUxOWExNTYtNDkzNy00MTdmLTk4NjctYjlhM2Q4M2I1NDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gN7/r7eSvQ1vYv9C39VqhU5Xf32XjaBgdIF
JyIr8vhkGGXG961wPLVUb3lhySENqaCs8rXZRIT3yUhvYPcmDenBAXYPOSxoZytL
02x4OyDtMub9FVLfNdIH/5GBZEI9bICt1dUABqZC7wW9Edp28KaEbQkXWk4bVfjw
pIpsaEpXuT0jS3WuuyxaTGIP6ANSJKNdZO+b28H90OQ6fyQFncLRWadPZ6e4XNsI
xa+Y5HsItHgcCizgJgngwjD1gqfKm5CCA/jKyJXern4aqWkKONZo+xjHHUor12PY
NR95nJDLa91/o06KnlIKd0IcgYq1BF3IdtXYdifAindmZUwpSQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFAyXOcK/WKn7yRldlibl4A3yR2jBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvMzAxMzc1NzEtMmY3NC0z
ZjFjLTgyOTMtMDk0YTBiZTYxZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AJAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEALVB1TaOv6vRspiY3TGlSNSeNPIR1t3bLhCylP/kvisOlcbMi
k2xG8uSJrC4b36dU6epvt3XE+u681yfeatZWqjaAZ5FCpCy0Updl2S5UXQUEa0fN
wr0HdV1ciNWVSO0ygT51+ykTFvEnmoPRzovw+sPq6Bgc3WbQIQ1M3fZwOa/G3po6
b9t2cJP6Xoo5ohq1YtneTHrC5Z1jY/SLRfro9YZND/zaf7qQmvlOy8pO77GON1te
jclSlM+YcFs7grFvIKv/T4HqFOUmd0C32RofkA2lb7IkLWYFWkkLdvdBzg69PgzD
Sq/YseK0cFojIL6RppSD52FUrpztlJ1JJ9bUYQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:08:37 2026 by rpki-client