Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/38f52015-c511-392e-9947-ebbc353fcbbd.roa
File:                     38f52015-c511-392e-9947-ebbc353fcbbd.roa (raw, json)
Hash identifier:          eE8eVwu76gxD3gB13a7Hm4vXVR5JENVZJEpFAVBTl60=
Subject key identifier:   4B:5C:A9:01:DA:BE:0E:74:CF:11:D5:3C:70:36:BB:30:6B:20:24:56
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DF2D619E87A26A3E11680
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/38f52015-c511-392e-9947-ebbc353fcbbd.roa
Signing time:             Tue 12 May 2026 13:06:29 +0000
ROA not before:           Tue 12 May 2026 13:06:29 +0000
ROA not after:            Mon 10 Aug 2026 13:06:29 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1ad::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:f2:d6:19:e8:7a:26:a3:e1:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:29 2026 GMT
            Not After : Aug 10 13:06:29 2026 GMT
        Subject: CN=5df02419-ef03-43c3-a825-4dd8efc03df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c0:6a:cc:f8:8a:53:da:f7:b7:88:96:b1:22:
                    0a:8f:6f:1f:c1:0c:8e:0c:60:ae:33:fd:00:39:48:
                    51:35:ab:9b:bf:ff:05:ec:48:5e:13:17:4d:9e:1f:
                    d6:09:9e:7e:e4:ca:33:25:47:29:98:3a:69:77:d6:
                    ee:92:08:c4:03:ce:65:ed:30:cf:a8:56:9e:d2:6a:
                    20:44:e3:56:d0:04:bd:06:dc:7f:e0:b0:3c:f6:d2:
                    9b:9c:84:99:7a:58:06:54:84:33:73:ef:f9:80:91:
                    dc:f6:df:31:57:59:31:2d:47:23:fb:55:43:65:e1:
                    f3:fc:b2:82:b7:b4:1e:1c:a7:29:6d:ed:c5:97:13:
                    10:66:d1:1b:74:9e:f9:54:53:71:b9:61:0c:85:37:
                    89:68:8c:b9:3a:16:65:6b:b2:63:7b:6e:f6:af:0b:
                    17:3b:37:75:ba:2d:87:23:7c:30:2a:56:54:fd:b6:
                    1a:4c:51:0a:74:64:43:75:af:6b:50:1d:c0:5b:53:
                    a6:1d:25:0a:4c:d0:d1:fe:78:0c:3f:c1:44:2b:70:
                    a7:c8:b0:a3:b3:ab:1f:19:80:50:cc:ec:c4:7c:d2:
                    54:d3:01:5a:81:75:f5:3c:8e:a1:a5:56:c7:18:70:
                    76:6f:4e:ce:92:11:e7:16:65:1c:c0:92:33:a9:71:
                    41:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5C:A9:01:DA:BE:0E:74:CF:11:D5:3C:70:36:BB:30:6B:20:24:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/38f52015-c511-392e-9947-ebbc353fcbbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1ad::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:37:ec:74:6e:9a:f0:d9:1e:5f:7b:99:d5:d6:d7:39:ac:8b:
         94:4f:4b:64:6f:50:97:76:f5:52:92:2c:b8:df:43:7f:68:d7:
         f3:f3:b8:00:67:5c:23:1f:e4:40:be:65:4f:ea:45:a5:27:1d:
         bf:2a:9d:87:b1:a4:03:9b:71:4c:d9:44:7e:fa:f2:c8:97:0b:
         cc:d3:04:48:aa:a8:8a:3d:ef:fa:b5:5b:5c:be:b8:a9:24:e2:
         ac:74:c1:36:46:94:b7:6f:a6:f0:45:54:93:f2:b1:af:20:9d:
         f9:58:f9:1f:b4:5f:6f:e7:ac:05:ab:8c:37:93:41:86:7f:ce:
         cf:5a:12:37:e2:5d:83:da:e8:88:02:0f:37:27:90:63:1b:b7:
         d7:7b:b1:c1:84:5a:96:6e:80:ff:5c:64:c6:9b:fa:38:34:f5:
         e9:03:1e:ff:0d:fb:a0:cd:4e:93:dd:0e:af:e3:51:6b:b1:1d:
         de:e8:05:26:88:40:85:d2:e3:a6:3a:f6:bf:81:f3:b8:3e:62:
         96:64:7d:32:db:43:e9:f3:82:8f:0d:06:b7:aa:e6:17:00:c5:
         f7:e6:16:4f:25:a5:76:be:a5:ca:ee:1a:28:cd:45:9d:38:8f:
         49:36:6e:8c:63:22:f7:4f:af:53:2c:3d:99:3e:ba:94:30:d5:
         54:57:10:f7
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLfLWGeh6JqPhFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYyOVoXDTI2MDgxMDEzMDYyOVowLzEtMCsGA1UEAxMk
NWRmMDI0MTktZWYwMy00M2MzLWE4MjUtNGRkOGVmYzAzZGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8BqzPiKU9r3t4iWsSIKj28fwQyODGCuM/0A
OUhRNaubv/8F7EheExdNnh/WCZ5+5MozJUcpmDppd9bukgjEA85l7TDPqFae0mog
RONW0AS9Btx/4LA89tKbnISZelgGVIQzc+/5gJHc9t8xV1kxLUcj+1VDZeHz/LKC
t7QeHKcpbe3FlxMQZtEbdJ75VFNxuWEMhTeJaIy5OhZla7Jje272rwsXOzd1ui2H
I3wwKlZU/bYaTFEKdGRDda9rUB3AW1OmHSUKTNDR/ngMP8FEK3CnyLCjs6sfGYBQ
zOzEfNJU0wFagXX1PI6hpVbHGHB2b07OkhHnFmUcwJIzqXFBqwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFEtcqQHavg50zxHVPHA2uzBrICRWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvMzhmNTIwMTUtYzUxMS0z
OTJlLTk5NDctZWJiYzM1M2ZjYmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
Aa0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEALjfsdG6a8NkeX3uZ1dbXOayLlE9LZG9Ql3b1UpIsuN9Df2jX
8/O4AGdcIx/kQL5lT+pFpScdvyqdh7GkA5txTNlEfvryyJcLzNMESKqoij3v+rVb
XL64qSTirHTBNkaUt2+m8EVUk/KxryCd+Vj5H7Rfb+esBauMN5NBhn/Oz1oSN+Jd
g9roiAIPNyeQYxu313uxwYRalm6A/1xkxpv6ODT16QMe/w37oM1Ok90Or+NRa7Ed
3ugFJohAhdLjpjr2v4HzuD5ilmR9MttD6fOCjw0Gt6rmFwDF9+YWTyWldr6lyu4a
KM1FnTiPSTZujGMi90+vUyw9mT66lDDVVFcQ9w==
-----END CERTIFICATE-----
Generated at Wed May 13 05:47:27 2026 by rpki-client