Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3afdf4ac-c6a0-3da4-ab21-998fd1c4b322.roa
File:                     3afdf4ac-c6a0-3da4-ab21-998fd1c4b322.roa (raw, json)
Hash identifier:          pHmWKrLyqmU9hux6sCSOZ3V9wP81W4CZFcBpQBfRsvY=
Subject key identifier:   A4:56:05:0C:EA:DA:07:9C:A0:81:98:49:36:D6:EE:96:C4:B2:5A:57
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E068F34BA504C90D6CC00
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3afdf4ac-c6a0-3da4-ab21-998fd1c4b322.roa
Signing time:             Tue 12 May 2026 13:06:38 +0000
ROA not before:           Tue 12 May 2026 13:06:38 +0000
ROA not after:            Mon 10 Aug 2026 13:06:38 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2d3::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:06:8f:34:ba:50:4c:90:d6:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:38 2026 GMT
            Not After : Aug 10 13:06:38 2026 GMT
        Subject: CN=ce6941db-02f3-4475-9bb6-68792ca9db58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:da:a8:0e:ae:74:5f:87:9e:47:7f:1c:0a:3c:
                    31:c2:02:3e:f7:9c:01:05:38:e1:32:6b:db:38:10:
                    9f:18:e7:06:44:1b:30:a3:c4:93:fe:a1:a1:16:5c:
                    ef:5a:41:83:39:fb:97:d3:5d:75:0a:d7:58:79:ff:
                    b7:a8:c3:47:e7:b3:20:b7:b7:7e:ad:2c:ae:74:18:
                    fc:e0:14:8c:74:f3:29:1d:51:28:61:bc:6b:38:82:
                    b6:a1:0b:b8:89:03:ca:ee:6e:dd:13:fd:2c:fb:c0:
                    99:e0:d1:e9:a4:db:e0:e4:55:c8:4f:e7:cc:e7:51:
                    76:f1:07:0c:4c:d0:b7:12:a8:2d:9e:15:64:c9:63:
                    b4:07:8e:53:f9:af:8b:a5:a5:e9:b4:7c:ba:49:ac:
                    16:65:48:59:cb:49:e5:a5:c2:19:4d:d5:f4:0e:fc:
                    86:0b:e8:f5:9a:a4:0b:1d:a2:4a:2b:a9:7f:7e:0a:
                    b6:71:98:93:d0:1a:2a:e4:67:6b:11:10:70:16:34:
                    9b:51:0c:ae:0d:6c:be:80:c8:bc:5c:18:f3:bf:61:
                    ff:5e:3e:76:c5:72:93:93:2b:f4:4f:27:9e:8e:57:
                    69:04:ff:c7:c7:07:ac:2d:53:b5:4e:bb:dc:9c:7b:
                    69:3b:6e:a9:56:af:6b:56:f9:1d:5e:cf:21:a3:be:
                    29:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:56:05:0C:EA:DA:07:9C:A0:81:98:49:36:D6:EE:96:C4:B2:5A:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3afdf4ac-c6a0-3da4-ab21-998fd1c4b322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2d3::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:b3:06:c1:2c:1f:21:c6:ab:ac:14:14:7b:1b:48:e8:04:3c:
         46:f1:1a:25:63:d7:46:31:14:27:16:e3:10:f6:e6:6d:63:f8:
         a3:ce:c0:c4:36:98:f6:68:de:e8:b1:7f:66:c8:c3:da:3e:81:
         68:0c:96:e7:ad:a6:53:4e:b9:c9:ce:7a:7a:a8:43:cb:0a:2e:
         bf:ea:dd:18:d9:7f:af:d0:4d:62:05:13:7f:ad:2f:8f:c1:8e:
         54:c5:81:03:10:d9:f6:bd:19:38:72:4f:67:6e:45:98:8d:bf:
         8d:44:04:20:d1:97:bb:68:c9:d2:29:6e:75:c9:ff:8b:b2:2f:
         ec:f2:aa:df:14:08:2d:7c:0a:6a:69:75:4c:44:d6:2d:8e:26:
         08:5b:53:7f:f7:33:e5:2f:3b:58:11:d2:d9:88:4e:36:b2:8d:
         ab:ae:d7:a4:dc:df:3b:ed:43:4b:40:0b:c4:14:94:5c:98:fa:
         c3:aa:2f:bc:07:c5:af:26:ef:b2:6e:c6:f8:4f:0a:15:93:97:
         db:6a:3d:2c:a4:f8:df:97:4e:82:3e:19:d2:b0:06:05:6d:1f:
         0e:81:f7:ed:d7:70:99:f1:29:0f:3e:a9:03:01:aa:7a:dd:9b:
         92:e2:0c:44:4a:44:aa:10:6e:28:cd:7a:20:e3:f8:d1:29:ea:
         97:9d:f0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:16:53 2026 by rpki-client