Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/35622f96-9183-33b9-8c18-6baa6000a227.roa
File:                     35622f96-9183-33b9-8c18-6baa6000a227.roa (raw, json)
Hash identifier:          WTde+ipsshj/P0SdrREs7JT1S6+dc2YuOolZ3Kre6i8=
Subject key identifier:   7C:B4:BB:AC:F5:7E:A0:DE:DF:48:C6:D4:36:6A:20:5B:BC:D2:D0:D1
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DF92B7B6CEAB0183F7339
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/35622f96-9183-33b9-8c18-6baa6000a227.roa
Signing time:             Tue 12 May 2026 13:06:32 +0000
ROA not before:           Tue 12 May 2026 13:06:32 +0000
ROA not after:            Mon 10 Aug 2026 13:06:32 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:20f::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:f9:2b:7b:6c:ea:b0:18:3f:73:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:32 2026 GMT
            Not After : Aug 10 13:06:32 2026 GMT
        Subject: CN=63afbbf4-f5a4-432c-961d-b9039d2720e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1e:a2:e0:da:be:d4:42:d1:ec:f4:95:7d:b5:
                    80:91:d7:54:c8:4b:ab:ab:11:85:0c:90:2e:96:8e:
                    f3:b3:22:90:7f:3c:cb:20:02:e3:f5:aa:67:3b:9a:
                    99:1d:7c:6a:80:0c:fb:31:ec:ba:d9:0d:10:29:e8:
                    48:8a:b1:d9:ec:89:10:00:b8:cc:c0:e1:6d:97:60:
                    68:75:95:87:76:24:f8:3f:70:15:a8:0c:91:83:b6:
                    93:09:04:e7:f1:bb:00:2c:69:e5:f7:ee:11:4d:2c:
                    73:b5:bb:ce:39:07:f4:27:c1:50:43:2b:b1:47:c1:
                    7d:27:6a:ac:2c:a3:ec:78:a7:81:ad:9f:db:17:84:
                    f0:89:97:0b:ed:04:62:ba:f3:91:f5:00:13:0c:f2:
                    ff:37:4e:fa:be:05:15:55:ed:7c:8d:a4:b3:da:2d:
                    9f:38:92:57:26:70:07:97:5c:27:80:d9:e1:57:ce:
                    c7:fa:e7:cb:45:5e:5e:0d:ec:48:98:0f:37:d7:ab:
                    43:a6:26:1a:06:c5:61:b9:78:f5:7b:1a:9a:e7:1f:
                    e4:6f:51:a3:61:4f:5d:d1:11:80:c4:36:83:34:52:
                    b5:79:ec:ae:89:4e:e5:65:23:84:a8:b7:7f:90:b4:
                    04:22:ff:77:1f:ad:fe:51:5f:6a:79:22:18:dc:33:
                    80:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B4:BB:AC:F5:7E:A0:DE:DF:48:C6:D4:36:6A:20:5B:BC:D2:D0:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/35622f96-9183-33b9-8c18-6baa6000a227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:20f::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:df:27:13:54:ae:9b:74:f7:6b:ef:f2:57:ff:10:a8:28:15:
         a2:f2:a8:40:b5:d2:82:7d:25:46:b6:83:8d:aa:66:ab:8c:23:
         16:b5:23:e0:d9:0b:97:97:09:f7:f9:eb:2a:b5:da:5b:54:02:
         07:ab:c0:71:f1:c8:de:60:e2:09:6f:a6:f1:bc:d6:dd:5e:3f:
         d0:7b:1f:c6:d5:5a:03:c8:4e:fe:30:ed:2e:14:22:1c:42:72:
         15:eb:3f:23:05:65:f3:95:51:8e:d3:e7:fc:6b:01:b6:63:df:
         49:f9:94:b5:0f:ac:91:2c:3a:0c:37:4a:f6:34:43:75:a7:76:
         8e:85:aa:91:c7:0f:75:3a:cd:1e:89:20:f5:88:e2:9a:cf:f9:
         cb:c7:a4:bc:4e:b3:fe:90:ba:75:6b:32:89:87:84:94:4d:71:
         ee:37:af:e5:01:07:2f:95:6d:05:e2:c0:24:5a:ac:39:08:bd:
         bc:81:f4:59:cb:7a:55:a1:98:7e:c3:59:e9:48:75:9c:af:a9:
         7b:22:1c:e8:fc:65:c0:16:2e:b9:6e:bf:32:e4:0b:48:12:19:
         08:9e:64:aa:7d:b8:e6:5c:43:26:28:83:10:23:76:9d:70:34:
         8a:00:f0:77:4a:69:71:33:f1:55:84:d1:84:46:38:cc:60:3b:
         fb:d8:ed:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:53 2026 by rpki-client