Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3b6883f7-aa94-380f-8b8a-06b1b09a0bde.roa
File:                     3b6883f7-aa94-380f-8b8a-06b1b09a0bde.roa (raw, json)
Hash identifier:          Vx2MKg99nHfGCN/3GWn5DAoOhYuF1E27e1VpzD3fO/E=
Subject key identifier:   2A:E2:FB:8C:69:D6:F0:2B:0B:F9:CD:5B:39:84:DB:C7:5E:23:93:3C
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E0EEAE20DE1324A7CDC00
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3b6883f7-aa94-380f-8b8a-06b1b09a0bde.roa
Signing time:             Tue 12 May 2026 13:06:42 +0000
ROA not before:           Tue 12 May 2026 13:06:42 +0000
ROA not after:            Mon 10 Aug 2026 13:06:42 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:347::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:0e:ea:e2:0d:e1:32:4a:7c:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:42 2026 GMT
            Not After : Aug 10 13:06:42 2026 GMT
        Subject: CN=6f059ae0-3fba-457b-b18b-4476d542489d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dd:cf:c3:70:3e:d8:7a:b5:3f:52:bc:b5:a9:
                    47:53:7a:1b:24:9b:1d:94:e3:d9:a1:c0:19:a3:89:
                    60:64:70:d8:61:87:46:28:ab:4d:3e:5d:e2:27:36:
                    fa:04:5b:4c:98:e0:66:d1:cc:40:1e:36:de:ba:18:
                    ec:ce:64:61:89:17:d6:f4:1b:12:e2:fb:2e:19:0f:
                    e9:62:b4:e1:9a:9f:5c:2b:3b:c8:e7:16:54:4e:45:
                    a5:91:14:87:44:f9:02:84:63:5d:d1:c6:94:99:28:
                    28:3d:22:bd:c0:10:fa:9a:f7:cd:56:8c:cf:98:91:
                    23:31:21:49:aa:4d:8d:42:8a:4b:15:b3:e2:38:6b:
                    d6:3e:c2:c7:1b:72:12:c6:dc:29:92:c5:d0:e2:49:
                    cd:2f:af:c0:d8:b4:dd:89:53:51:34:17:c0:63:e7:
                    05:ce:c2:c5:d9:4a:fc:de:a7:43:31:a0:fe:7e:e3:
                    56:e4:92:01:fa:24:7e:00:57:70:02:38:57:c2:1a:
                    67:59:b3:76:d5:4d:3e:b9:c7:f0:3c:f8:ed:d8:79:
                    af:40:a8:a6:2a:0c:08:10:61:88:8f:90:63:9b:7f:
                    e3:27:db:5f:78:1c:7a:90:80:be:df:1b:6f:22:9f:
                    c4:47:ce:79:a0:b6:ae:dd:04:7c:20:63:d8:24:37:
                    48:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E2:FB:8C:69:D6:F0:2B:0B:F9:CD:5B:39:84:DB:C7:5E:23:93:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/3b6883f7-aa94-380f-8b8a-06b1b09a0bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:347::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ea:de:ad:1f:b7:62:48:9c:90:61:dc:1c:02:6d:f8:36:0e:
         51:10:15:f9:8b:9d:92:7e:5c:f0:cd:0d:f7:3a:15:c5:5d:87:
         7a:5c:6c:8c:ca:7e:7d:73:a5:1c:4e:61:a1:b2:54:3f:da:53:
         11:8c:69:1c:9b:13:76:d0:95:b2:69:a7:22:7d:95:ec:4f:f5:
         a5:43:3d:7c:73:de:83:7f:cb:2f:71:74:ed:bd:c1:52:4f:f3:
         11:e7:c9:61:46:df:4f:b4:9e:b7:df:04:35:d3:c4:cd:c5:ee:
         7c:40:0e:ab:06:02:68:27:89:17:0b:9c:fb:3d:3d:fb:4f:9f:
         38:f1:5c:dc:a8:37:74:21:8c:b9:10:eb:cf:6e:7b:a4:3a:57:
         57:86:bf:6a:f8:9e:cd:dd:2f:42:02:63:df:93:e7:8b:da:00:
         8b:c3:15:c8:39:ed:60:d8:36:2f:03:3d:e5:ae:11:e4:fd:88:
         15:1c:44:ce:c4:17:ec:4e:a8:16:1b:bc:62:d8:3f:d6:77:30:
         d8:84:c1:be:cd:ac:fe:22:0b:7d:75:1f:1f:ea:a5:80:25:d3:
         99:bb:33:a7:7c:0c:7b:1a:e1:80:31:f8:97:91:b2:3e:09:55:
         a3:41:ec:6f:e9:23:99:27:7f:7b:a5:7f:85:d7:53:9a:f7:12:
         ee:bd:7a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:33 2026 by rpki-client