Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/540a9f1f-6c90-3f51-b5c2-053f64423b6f.roa
File:                     540a9f1f-6c90-3f51-b5c2-053f64423b6f.roa (raw, json)
Hash identifier:          gVTXw2R2fJADoIkRiLcjJhBDszglzrRRXZADht+71S4=
Subject key identifier:   A1:8F:3E:CE:7E:B0:62:76:3B:59:FA:0B:02:2C:D7:22:AD:10:49:B3
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DEB6DD6E726B38354E880
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/540a9f1f-6c90-3f51-b5c2-053f64423b6f.roa
Signing time:             Tue 12 May 2026 13:06:26 +0000
ROA not before:           Tue 12 May 2026 13:06:26 +0000
ROA not after:            Mon 10 Aug 2026 13:06:26 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:137::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:eb:6d:d6:e7:26:b3:83:54:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:26 2026 GMT
            Not After : Aug 10 13:06:26 2026 GMT
        Subject: CN=c530d252-a432-473b-a525-73641a23fba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:d4:7f:d0:50:92:f0:ef:9e:63:9a:f2:07:
                    9e:82:10:97:df:ba:26:26:8d:e9:b7:88:f4:a2:02:
                    d5:aa:27:c6:70:76:3a:75:0b:f8:60:61:28:7e:68:
                    4f:a1:e9:10:70:ee:cc:3f:93:68:a4:22:79:f4:a7:
                    95:8b:02:a6:66:76:e6:9d:33:1a:05:cc:29:16:37:
                    9b:99:57:dd:3d:c9:5c:96:f7:41:6d:86:50:bb:a7:
                    67:53:ba:fc:97:3f:b7:60:75:de:d5:ca:a5:30:34:
                    4f:a8:8d:59:f6:ae:6f:99:83:5a:ae:48:c7:a5:9e:
                    74:6a:a0:af:ed:cf:7d:69:02:25:b3:2b:01:8a:d9:
                    b8:0b:5e:ff:c9:00:f9:01:cc:ea:f5:96:61:b6:fb:
                    22:23:fd:50:56:be:a4:e8:e0:1e:9e:82:fd:5f:3c:
                    95:2c:43:5e:51:53:bb:dc:2b:81:4e:23:cc:37:3c:
                    f8:97:46:0e:bc:76:07:16:eb:20:06:5f:f3:d5:72:
                    31:d6:08:ed:5b:2a:fd:b3:4c:d1:e5:01:ee:50:e4:
                    85:de:7b:df:73:7a:e9:5f:56:2a:e7:55:ca:02:f3:
                    d9:ac:82:9d:d2:4c:80:b0:4c:0d:7d:65:8b:0d:c5:
                    e7:06:a9:9f:58:12:fa:4e:31:12:fb:52:48:e3:a7:
                    36:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8F:3E:CE:7E:B0:62:76:3B:59:FA:0B:02:2C:D7:22:AD:10:49:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/540a9f1f-6c90-3f51-b5c2-053f64423b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:137::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:e8:46:bb:69:33:87:c1:06:c6:62:82:98:e1:60:7b:da:d3:
         c4:6b:c1:58:d0:12:28:60:2e:1d:ab:fd:48:e3:0d:4d:06:e8:
         64:0a:47:e8:95:ea:7f:73:4c:44:9c:0a:48:60:dd:a7:2e:34:
         a5:eb:94:a3:05:48:fb:12:4e:0e:53:64:b9:c8:c4:74:a1:9c:
         13:e1:42:83:a5:78:a8:11:d7:0c:bd:70:c6:b7:a4:78:7a:a6:
         12:bd:94:55:f4:b3:40:72:2a:db:4c:38:a0:89:44:70:9c:62:
         6b:cf:7d:4a:47:25:db:68:12:dc:be:00:83:24:a4:a1:12:26:
         b7:c9:cd:81:26:3b:4e:cd:13:69:1a:aa:a5:92:0b:11:b5:af:
         7a:16:7f:a1:ea:a3:5f:be:5b:cf:b3:29:77:db:a0:8e:65:0e:
         53:b0:15:40:6b:e6:77:fd:f5:33:d5:4c:cf:c2:49:26:37:88:
         50:ac:7c:ac:66:77:46:0a:55:45:23:c1:7e:6b:90:b9:49:b8:
         03:63:a5:2d:42:39:4b:61:2c:a6:e5:5c:b2:04:bc:a3:21:92:
         24:a4:78:b9:fe:03:3e:23:20:5a:5e:01:dc:2b:f8:b8:47:95:
         44:b2:59:3a:61:e7:56:c2:89:c1:3a:40:0f:5e:f0:94:15:ff:
         0b:76:68:8f
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLett1ucms4NU6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYyNloXDTI2MDgxMDEzMDYyNlowLzEtMCsGA1UEAxMk
YzUzMGQyNTItYTQzMi00NzNiLWE1MjUtNzM2NDFhMjNmYmE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsljUf9BQkvDvnmOa8geeghCX37omJo3pt4j0
ogLVqifGcHY6dQv4YGEofmhPoekQcO7MP5NopCJ59KeViwKmZnbmnTMaBcwpFjeb
mVfdPclclvdBbYZQu6dnU7r8lz+3YHXe1cqlMDRPqI1Z9q5vmYNarkjHpZ50aqCv
7c99aQIlsysBitm4C17/yQD5Aczq9ZZhtvsiI/1QVr6k6OAenoL9XzyVLENeUVO7
3CuBTiPMNzz4l0YOvHYHFusgBl/z1XIx1gjtWyr9s0zR5QHuUOSF3nvfc3rpX1Yq
51XKAvPZrIKd0kyAsEwNfWWLDcXnBqmfWBL6TjES+1JI46c2KQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFKGPPs5+sGJ2O1n6CwIs1yKtEEmzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvNTQwYTlmMWYtNmM5MC0z
ZjUxLWI1YzItMDUzZjY0NDIzYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
ATcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAsehGu2kzh8EGxmKCmOFge9rTxGvBWNASKGAuHav9SOMNTQbo
ZApH6JXqf3NMRJwKSGDdpy40peuUowVI+xJODlNkucjEdKGcE+FCg6V4qBHXDL1w
xrekeHqmEr2UVfSzQHIq20w4oIlEcJxia899Skcl22gS3L4AgySkoRImt8nNgSY7
Ts0TaRqqpZILEbWvehZ/oeqjX75bz7Mpd9ugjmUOU7AVQGvmd/31M9VMz8JJJjeI
UKx8rGZ3RgpVRSPBfmuQuUm4A2OlLUI5S2EspuVcsgS8oyGSJKR4uf4DPiMgWl4B
3Cv4uEeVRLJZOmHnVsKJwTpAD17wlBX/C3Zojw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:41:11 2026 by rpki-client