Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/5a237fbc-8c16-34f9-882c-856512b44d0a.roa
File:                     5a237fbc-8c16-34f9-882c-856512b44d0a.roa (raw, json)
Hash identifier:          UsVH8pUjCkKFHLwIZrgdlCFZOUN2KJLw/NRO6y3i28o=
Subject key identifier:   95:73:C3:25:AD:3F:1E:54:D9:A7:DC:41:2A:6A:DD:3F:2B:86:A9:C9
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DDCC21FDEC95B09422BA0
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/5a237fbc-8c16-34f9-882c-856512b44d0a.roa
Signing time:             Tue 12 May 2026 13:06:19 +0000
ROA not before:           Tue 12 May 2026 13:06:19 +0000
ROA not after:            Mon 10 Aug 2026 13:06:19 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:37::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:dc:c2:1f:de:c9:5b:09:42:2b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:19 2026 GMT
            Not After : Aug 10 13:06:19 2026 GMT
        Subject: CN=33f843f2-a9dc-4f0e-bc43-91c16591ae5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6b:74:7f:a8:47:68:93:c2:70:30:5a:5f:7e:
                    76:ba:5e:04:f1:af:ce:4f:30:d4:b5:ad:06:08:9b:
                    aa:50:2e:88:34:b3:e5:72:ab:c8:89:16:c5:87:34:
                    21:70:5d:97:2b:ba:af:ab:37:c5:b4:93:e1:b1:a0:
                    56:a4:5a:47:2a:5c:98:b3:2e:13:04:fc:9e:03:6c:
                    20:30:45:17:9a:d6:3d:1e:79:b1:3e:fe:d6:9b:38:
                    bc:d9:ba:0b:fb:c8:1e:6e:9e:75:aa:f9:54:19:ac:
                    ce:15:fa:30:e2:a1:5a:f7:24:3b:84:86:25:38:17:
                    7e:e7:29:36:83:9a:4c:23:57:55:40:e5:02:ea:9b:
                    52:6a:65:d1:74:f9:ee:ba:ab:c6:5f:41:c1:16:68:
                    51:8f:0b:0a:a4:77:4a:ed:84:8a:15:90:5e:19:66:
                    3a:e2:23:cb:43:5b:29:22:6f:90:77:5a:dc:49:3d:
                    82:18:c1:c1:1f:87:55:52:53:1c:af:a5:0f:ed:39:
                    c4:18:3e:98:f7:13:b6:ed:50:e7:02:c0:a3:be:46:
                    d1:ea:e0:ea:5b:e6:15:63:9c:33:aa:aa:31:80:8e:
                    52:29:01:ac:0c:de:97:68:8a:69:2b:81:3c:99:05:
                    22:e1:89:55:4c:08:15:43:8a:a8:93:a8:a1:08:c1:
                    70:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:73:C3:25:AD:3F:1E:54:D9:A7:DC:41:2A:6A:DD:3F:2B:86:A9:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/5a237fbc-8c16-34f9-882c-856512b44d0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:37::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:23:a9:cb:3d:76:dc:34:11:4e:15:e5:ab:87:f4:01:af:09:
         08:a8:32:e9:8f:40:97:ab:5d:bc:fa:d3:60:c8:44:95:ee:ef:
         47:fd:3b:2e:3c:6c:e9:28:07:1b:5c:eb:47:da:70:f2:4d:20:
         57:7f:0d:f5:e7:fe:ed:29:f5:75:d9:7d:4d:bd:21:a6:b9:ae:
         e4:73:bf:52:81:8e:6c:4f:e7:73:4b:d3:4d:3c:35:9d:66:90:
         8a:1b:d8:ed:55:b5:12:ea:9b:cf:f4:21:b7:43:7e:ec:07:4a:
         ba:4b:33:14:9f:da:d1:d2:9c:23:23:58:4d:50:89:94:d2:51:
         33:58:cf:8b:86:4d:c2:7c:bf:35:64:40:1c:5d:d4:7d:62:43:
         1a:e0:30:09:5a:19:0c:0b:5e:e8:e1:f3:df:23:a5:aa:f7:8e:
         f6:bf:28:05:21:f5:06:1b:5f:67:b2:7a:8a:68:35:b0:7b:db:
         ef:b5:b0:c0:1f:d0:35:22:07:53:08:02:3f:76:12:55:0b:81:
         be:c8:8d:42:f7:bf:28:f7:6c:f8:74:a8:1e:f0:14:b9:2e:51:
         e3:42:4c:97:cb:dd:67:b8:68:6c:f5:0a:86:53:ae:62:6a:65:
         08:97:87:90:16:e1:b3:c3:3c:96:6e:68:e7:de:58:e4:5e:93:
         a1:e3:92:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:24 2026 by rpki-client