Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/5ab3d737-41b8-3035-b0a3-fbf46ae2958e.roa
File:                     5ab3d737-41b8-3035-b0a3-fbf46ae2958e.roa (raw, json)
Hash identifier:          Agen0jHVjAeW3uArIIZdOFoQu/ZT9nQq2S0hAFZwtzk=
Subject key identifier:   A2:0C:E9:98:B1:54:C5:E2:8E:08:2B:1E:B1:83:FB:A1:DB:5C:29:0A
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E0D2DCD0FC46EF5F5C1B0
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/5ab3d737-41b8-3035-b0a3-fbf46ae2958e.roa
Signing time:             Tue 12 May 2026 13:06:41 +0000
ROA not before:           Tue 12 May 2026 13:06:41 +0000
ROA not after:            Mon 10 Aug 2026 13:06:41 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:32f::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:0d:2d:cd:0f:c4:6e:f5:f5:c1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:41 2026 GMT
            Not After : Aug 10 13:06:41 2026 GMT
        Subject: CN=587b3412-67b7-4280-8891-8c01aa1008a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d7:f4:b2:3f:3d:52:ae:6f:ab:22:b1:ad:88:
                    2c:4c:4a:08:b0:48:3e:23:fb:72:07:af:68:4f:03:
                    7e:c9:39:74:2d:55:16:5b:c1:4e:13:35:95:ed:dc:
                    0a:10:65:bc:90:c3:d0:bb:00:28:4d:b7:94:e6:42:
                    fe:58:ee:5b:5c:4f:61:68:7f:dc:55:d0:7c:3d:c0:
                    23:8d:bf:67:8d:a2:fc:5b:35:f5:ce:c4:f1:23:58:
                    63:82:a8:c3:3e:41:70:dd:43:cd:71:86:c1:e0:de:
                    8e:76:8c:d9:e3:4f:d6:ce:44:c7:2f:c8:34:4a:2c:
                    ad:36:6f:c3:2c:57:6d:48:47:63:15:bf:3a:13:0f:
                    f6:a4:04:14:f7:9e:52:5c:fa:b5:52:37:04:b0:10:
                    47:bf:38:9e:02:e7:38:9a:18:c2:5d:81:dd:3b:f4:
                    df:dd:55:80:c0:55:c5:58:01:71:5f:60:41:99:ce:
                    91:93:6a:9e:3e:97:64:86:fd:00:4d:ea:7c:cf:c0:
                    00:b4:3b:e6:a4:05:c6:37:86:fb:7f:b2:3b:31:b8:
                    75:55:a8:ce:52:5b:8a:22:fa:e4:07:50:66:68:0b:
                    96:41:fe:cd:91:0b:8f:cc:f8:61:08:49:99:63:ba:
                    26:bb:e5:56:57:e4:10:32:cf:79:f2:49:4c:e3:27:
                    58:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0C:E9:98:B1:54:C5:E2:8E:08:2B:1E:B1:83:FB:A1:DB:5C:29:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/5ab3d737-41b8-3035-b0a3-fbf46ae2958e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:32f::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:11:bf:45:58:e5:48:02:c0:7e:09:5b:ff:f7:3c:28:ef:46:
         96:67:6b:ee:00:c9:65:44:9b:44:16:f3:11:1c:b7:95:cc:ff:
         13:64:6d:7d:57:47:94:d0:25:7a:9b:4b:07:ce:4a:8f:28:20:
         b3:1e:b2:68:6d:f0:4e:ca:ed:7f:e5:ab:63:40:6d:5c:03:68:
         25:ba:b6:f4:df:16:62:88:b0:b8:57:14:de:35:84:94:d4:8a:
         03:39:7f:3b:8c:73:29:fc:da:77:1d:ee:8a:c0:68:d2:90:66:
         55:b3:2e:0a:95:2b:58:21:08:c3:cd:c8:b4:04:44:5c:59:b2:
         3f:9e:51:e1:63:13:54:20:8b:1f:aa:fc:dd:97:25:8b:ee:db:
         98:02:39:0b:99:80:86:83:c1:cc:82:4a:2c:97:e1:c1:d9:85:
         6c:9f:12:43:f1:4c:a4:86:36:c2:56:05:a0:2c:c7:d1:e9:64:
         17:8b:41:3b:ae:02:1e:bc:9a:c1:4a:e1:47:7f:2c:86:be:08:
         5a:5c:62:ad:4e:45:da:f5:94:77:84:1b:85:0a:32:a4:e2:3a:
         b5:e8:cf:27:a7:fb:ea:7c:1a:ac:f1:38:8f:e6:43:73:2b:eb:
         26:38:69:4b:f3:de:75:e7:3d:00:b9:bf:dc:32:55:e1:c5:5c:
         23:fa:fd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:57 2026 by rpki-client