Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/332940c0-1fff-317e-82ab-bfc0250415e0.roa
File:                     332940c0-1fff-317e-82ab-bfc0250415e0.roa (raw, json)
Hash identifier:          ahHoom4KtYU8lgYs8rZrY3NkEewTaa6IrPAql/7zKwU=
Subject key identifier:   71:08:02:FE:83:C9:CA:F6:C4:A5:50:AE:6A:5F:A1:BC:61:1E:92:94
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E07BEC9C5C0E31ACC7B40
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/332940c0-1fff-317e-82ab-bfc0250415e0.roa
Signing time:             Tue 12 May 2026 13:06:39 +0000
ROA not before:           Tue 12 May 2026 13:06:39 +0000
ROA not after:            Mon 10 Aug 2026 13:06:39 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2e4::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:07:be:c9:c5:c0:e3:1a:cc:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:39 2026 GMT
            Not After : Aug 10 13:06:39 2026 GMT
        Subject: CN=a8f45eb1-361b-45b0-bf20-e4c6a973cf58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:90:02:9b:ec:35:80:a9:68:7c:bc:24:71:83:
                    1b:da:51:c7:71:6c:bf:b4:c0:26:0a:26:29:09:d0:
                    75:1b:de:6f:cd:1f:da:ff:53:0c:55:95:c1:cf:6f:
                    37:ad:e5:10:3b:c6:ff:28:a2:99:a0:56:b5:0c:9b:
                    2d:ec:10:fe:75:fc:ba:eb:d0:2e:df:e2:4c:30:b7:
                    52:83:ca:23:ae:f0:b4:c7:0e:b4:04:a5:97:84:33:
                    46:cb:32:fa:99:4c:3c:b4:30:fa:65:49:7f:b3:06:
                    68:8b:47:e0:4d:6e:6a:1c:50:1d:cd:69:47:7d:f7:
                    67:ee:60:c5:bd:41:c9:bc:04:80:a4:84:40:85:d0:
                    24:8d:e3:e4:1f:39:31:79:ec:2f:5d:63:52:00:37:
                    7b:1d:04:64:91:81:dc:e1:22:bd:f6:41:61:d0:50:
                    c1:ba:65:7f:14:39:0d:74:85:23:44:4d:60:7c:1f:
                    20:66:d6:8a:2e:86:d4:23:64:0b:5a:0d:b0:c5:e9:
                    6c:5c:d0:3b:13:d2:59:12:59:8d:91:16:0a:7e:c1:
                    5c:85:71:76:03:2a:c3:b9:ce:a1:be:ba:e8:91:12:
                    0e:12:21:dd:8d:8a:b4:bd:e2:7c:e3:69:d6:fe:80:
                    3c:4f:be:d1:31:c8:80:a0:74:85:2e:e3:43:28:bd:
                    8c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:08:02:FE:83:C9:CA:F6:C4:A5:50:AE:6A:5F:A1:BC:61:1E:92:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/332940c0-1fff-317e-82ab-bfc0250415e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2e4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:2d:95:e3:90:a2:57:96:ce:9d:2a:9f:f5:72:b3:4c:bc:2c:
         11:42:32:1c:b7:9c:85:18:dc:9f:ea:c5:42:0f:dd:ed:8d:2a:
         0f:30:d8:94:27:2a:cc:da:e4:a3:b4:15:c7:c6:f2:29:cf:2b:
         72:cb:b0:20:77:7f:e7:52:a4:1f:a7:de:a4:80:25:e4:ea:8a:
         48:8e:b6:2d:57:1c:64:9c:cc:66:41:39:e0:74:5c:4a:60:d7:
         63:ae:75:ad:33:c8:b4:6a:7e:07:5f:d8:7d:f9:3c:dc:27:31:
         14:70:e3:16:a2:26:f7:ac:28:6b:b4:06:2a:b3:c8:16:aa:6b:
         82:18:87:91:ca:63:b9:3e:c6:33:31:fe:58:74:1f:a1:32:50:
         f2:99:c7:31:5b:41:fb:90:36:fa:db:ab:b3:a2:96:d0:40:5b:
         57:a0:09:ab:4e:7a:50:06:b1:f7:46:61:25:45:58:41:c1:2f:
         19:4c:cf:8f:2e:a1:bf:1c:ab:46:b1:52:b7:71:ea:9f:a3:51:
         49:06:fc:ab:e7:db:c7:df:7f:60:fa:52:c0:60:7f:26:71:16:
         3d:50:c8:7e:85:46:05:1f:82:a3:83:63:ee:b3:43:bd:0d:e8:
         f0:6c:de:bb:65:55:80:18:5b:04:46:d8:e0:57:8c:fd:63:87:
         af:c4:4a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:40 2026 by rpki-client