Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/52e8c6f4-8210-3152-986a-6b1318b6ace2.roa
File:                     52e8c6f4-8210-3152-986a-6b1318b6ace2.roa (raw, json)
Hash identifier:          8bmpw6P7OCgp9ZOGCFN7O/FmGPr2spX4I+olX3x3tYQ=
Subject key identifier:   FF:05:B5:07:01:BF:ED:2E:3F:73:EE:77:28:8A:ED:84:AA:02:4F:C7
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E0ED7EB8AB5F2CB88C300
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/52e8c6f4-8210-3152-986a-6b1318b6ace2.roa
Signing time:             Tue 12 May 2026 13:06:42 +0000
ROA not before:           Tue 12 May 2026 13:06:42 +0000
ROA not after:            Mon 10 Aug 2026 13:06:42 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:346::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:0e:d7:eb:8a:b5:f2:cb:88:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:42 2026 GMT
            Not After : Aug 10 13:06:42 2026 GMT
        Subject: CN=1cee0b41-390a-4607-996d-5887de89158f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:46:f1:d6:ce:d6:67:eb:c9:1c:d9:29:73:ba:
                    cc:51:31:06:d8:ee:be:ed:5f:72:eb:aa:95:92:9b:
                    db:6f:50:33:97:fb:eb:53:b0:db:4d:90:18:d2:c2:
                    46:cb:39:f5:2d:95:cc:42:c0:41:82:5f:d7:d1:e3:
                    57:24:8a:42:bd:c1:c1:97:03:72:5a:4f:a0:10:a4:
                    ea:62:e8:70:30:9c:1b:98:48:48:38:08:59:ba:c2:
                    a1:81:20:8b:8b:98:3f:9d:37:5e:0e:3c:f5:a2:d0:
                    f4:ac:39:8f:41:51:e6:1a:4e:5d:ae:5e:4e:3f:d7:
                    06:e7:7c:ee:ce:01:2b:8e:0a:44:1b:50:f0:8f:01:
                    19:a3:16:0c:2b:5f:5c:85:8a:1b:78:11:64:69:2d:
                    2c:98:85:50:4c:03:fb:2b:04:b9:d7:cd:62:95:70:
                    b5:29:8e:79:f1:e3:d4:87:a9:9f:0d:2b:1e:39:9e:
                    57:2f:07:7c:af:36:eb:d8:a2:69:dc:1c:82:30:4a:
                    eb:ae:3d:3a:19:48:dd:fe:61:7d:8b:83:79:28:2d:
                    47:04:be:73:3a:a2:cd:8a:ff:f4:4f:33:d8:4c:5f:
                    d8:58:98:38:9f:f6:20:d6:cc:1b:d1:f9:a5:d3:83:
                    47:df:ec:29:8b:bd:f1:b9:1b:49:6f:62:e8:d5:73:
                    bb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:05:B5:07:01:BF:ED:2E:3F:73:EE:77:28:8A:ED:84:AA:02:4F:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/52e8c6f4-8210-3152-986a-6b1318b6ace2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:346::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:fd:cd:d6:07:a7:41:e1:11:02:d4:1a:1a:5c:7b:bf:0b:5a:
         7f:de:d3:99:e6:d9:c3:a6:04:61:67:12:0f:60:be:70:0f:ea:
         c9:55:14:a3:c0:33:4a:f4:36:63:32:f9:cc:a7:e2:19:b2:b0:
         3c:71:be:ff:cb:e5:52:b6:2b:ab:e7:47:17:ca:2f:c6:7d:08:
         67:dd:d5:e1:fa:25:9b:eb:b8:de:a6:47:c5:ad:4e:ca:f0:6b:
         8a:49:33:67:de:4c:f1:d1:fa:ec:51:5a:ab:bf:98:2c:29:fd:
         6e:66:0a:56:16:98:39:d3:55:a5:fc:32:14:ef:d1:73:b1:dc:
         ba:c0:51:62:e4:b2:ab:fe:23:30:b5:8f:68:ea:e5:a2:d2:53:
         5e:24:f5:fe:cd:1f:a6:7c:34:30:97:13:c0:8a:a4:36:ff:50:
         b1:ab:4f:cd:8f:b2:35:91:a5:62:d9:72:ff:26:02:cd:ec:40:
         8d:a2:de:f4:4f:01:82:a9:42:62:5d:f1:56:7f:b1:41:8b:90:
         d1:34:34:0e:1a:6e:67:f3:00:0c:99:8e:72:95:2a:a0:6d:0b:
         ce:d8:63:32:2a:5d:7d:02:07:3a:22:d3:1a:a1:5b:ad:1d:a7:
         33:a5:f8:14:2a:6b:bd:2b:63:36:91:00:c9:b3:5d:7c:52:7c:
         b8:af:d3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:30:14 2026 by rpki-client