Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/4ce0f843-2789-3bf8-8eae-eba35e0d9520.roa
File:                     4ce0f843-2789-3bf8-8eae-eba35e0d9520.roa (raw, json)
Hash identifier:          saD9yAnoWv0/5LP14NxaHfhT6/qJiEjsRhm6QWYQ/Fg=
Subject key identifier:   DD:FA:A8:50:D8:EF:C9:6D:12:73:C4:C1:3D:8D:53:D2:81:6D:B6:6A
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DFE012535797C6D048100
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/4ce0f843-2789-3bf8-8eae-eba35e0d9520.roa
Signing time:             Tue 12 May 2026 13:06:34 +0000
ROA not before:           Tue 12 May 2026 13:06:34 +0000
ROA not after:            Mon 10 Aug 2026 13:06:34 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:258::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:fe:01:25:35:79:7c:6d:04:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:34 2026 GMT
            Not After : Aug 10 13:06:34 2026 GMT
        Subject: CN=68a0254d-9823-4f5b-8e92-1612daed7c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ad:2a:04:b5:23:a7:5d:b6:22:bf:29:86:0a:
                    10:5b:03:51:6b:54:70:4a:75:15:6f:b0:5c:9e:92:
                    04:d9:88:21:80:c9:5f:23:1d:9c:aa:0c:c2:e2:92:
                    6d:ed:a8:41:9a:3e:e6:81:ec:ef:72:97:35:ec:bb:
                    91:c4:ee:3e:36:b3:89:b5:96:f1:a1:11:ae:93:20:
                    c0:98:6c:05:f0:9b:51:9f:cc:2e:5c:bd:ea:95:1a:
                    8e:d0:06:a2:67:c6:f8:2a:55:79:d6:f9:af:b9:70:
                    83:2a:5f:23:c1:1c:3d:f8:c8:0d:49:fa:e3:26:07:
                    35:84:62:25:ca:34:0f:78:f6:30:f8:e5:fd:ea:06:
                    57:ef:aa:7a:4a:94:73:cc:9c:29:0b:31:22:c9:66:
                    98:7e:a8:b2:bc:0b:2d:a4:6a:23:14:af:ad:56:af:
                    cc:e8:73:2a:03:14:fd:d5:c0:45:39:3e:db:26:d4:
                    f3:a0:aa:08:b1:53:02:a9:eb:ad:c8:da:1c:4f:eb:
                    f9:9c:3d:d8:07:ba:70:67:e1:85:cb:40:f5:7b:75:
                    3b:e7:20:c3:95:99:55:b4:98:c5:43:05:b7:86:92:
                    9b:eb:7e:3d:1e:09:8b:d8:3c:78:ba:78:9a:65:03:
                    99:72:ec:e6:e0:59:64:82:76:d1:9a:60:54:88:21:
                    d9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FA:A8:50:D8:EF:C9:6D:12:73:C4:C1:3D:8D:53:D2:81:6D:B6:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/4ce0f843-2789-3bf8-8eae-eba35e0d9520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:258::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:af:f1:0f:2e:2b:73:9d:e4:7a:4d:4e:f4:52:fb:1d:02:42:
         47:91:59:c1:75:9c:8d:16:f5:71:68:85:4f:31:06:09:18:01:
         c4:8d:bf:ce:36:5e:af:cb:c4:92:82:a3:95:1b:01:85:4a:5f:
         d1:38:91:82:4b:92:f1:f8:d0:4d:8f:e3:66:28:49:08:60:fe:
         cd:13:01:1b:77:db:17:5b:b7:fa:96:f4:9a:4f:2d:2e:07:e1:
         c1:51:8a:82:6b:40:48:99:1a:af:28:95:97:6f:5d:12:c9:db:
         95:df:53:d1:ec:6c:6c:6d:ac:d8:02:ad:38:01:35:c1:c1:3e:
         15:a2:13:5a:fe:7e:74:a3:6b:ef:93:12:a6:66:24:37:75:76:
         77:7b:08:fd:3d:d5:d9:36:9c:18:6c:a4:f4:5e:9f:3a:28:2e:
         b7:5f:b5:ba:78:ca:b2:2b:7f:98:f9:50:c8:c2:78:ca:6f:75:
         fe:79:d5:a6:4f:3c:59:70:1c:98:a6:dc:1e:3c:48:fa:fd:1e:
         56:2e:fb:6d:62:41:3b:57:0a:3c:49:c6:1d:3b:5f:61:57:69:
         4b:88:ce:c4:55:7a:f9:c7:a5:dd:1d:d5:14:9b:08:ca:9a:7e:
         10:48:04:f9:ab:27:75:4e:25:8b:76:2c:c0:db:15:e2:c6:ee:
         4d:08:68:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:10 2026 by rpki-client