Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/5fb55df3-9101-32ec-9e12-5cc763c7f184.roa
File:                     5fb55df3-9101-32ec-9e12-5cc763c7f184.roa (raw, json)
Hash identifier:          yK9T/WVpoA8IJEl5x75k0lef1Q+as4/AW/9ZEusDT0A=
Subject key identifier:   E8:28:15:2D:E8:C1:86:D9:AB:3B:4E:10:84:12:9E:9A:88:C7:B2:EC
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DE4F7DAC4F8A1D8B58700
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/5fb55df3-9101-32ec-9e12-5cc763c7f184.roa
Signing time:             Tue 12 May 2026 13:06:22 +0000
ROA not before:           Tue 12 May 2026 13:06:22 +0000
ROA not after:            Mon 10 Aug 2026 13:06:22 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:c9::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:e4:f7:da:c4:f8:a1:d8:b5:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:22 2026 GMT
            Not After : Aug 10 13:06:22 2026 GMT
        Subject: CN=6b3087fc-ed56-48c5-96a1-62afc87ac874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c1:80:e6:f4:e5:18:26:bb:cc:3f:0b:d6:b5:
                    b9:5f:0f:77:1f:7a:1a:7d:79:a1:fb:f8:ef:d6:8c:
                    cd:df:94:a0:c4:c1:ac:b0:bb:e5:72:a2:76:fc:3a:
                    6c:fa:d2:e3:d7:93:1e:3e:dc:f9:18:36:87:fc:a3:
                    9f:8d:6a:36:34:1e:f5:34:5b:bf:08:95:4d:14:61:
                    99:7d:fe:94:ee:18:d4:4a:31:42:87:a3:09:4e:1c:
                    a3:37:9e:bd:14:77:ac:9d:42:54:f9:9a:9b:dd:97:
                    d5:85:27:23:cf:ee:2f:7e:29:31:43:8c:ae:4d:78:
                    73:6d:64:68:57:fc:4e:2e:af:32:48:a7:72:76:90:
                    81:e0:47:b5:ad:eb:6e:25:e5:33:ac:8e:2a:9d:fb:
                    6a:14:c6:f3:65:12:a7:e5:4a:fa:78:c5:af:24:9d:
                    ab:25:33:d1:d0:95:0d:0d:4f:35:99:5f:27:5b:92:
                    5d:64:6b:fc:09:03:93:c5:53:89:f0:e8:88:e9:07:
                    f3:77:11:dc:d0:81:53:d3:d8:91:c4:8c:5d:aa:6b:
                    1f:3a:ae:51:4f:da:2f:e1:8b:b8:b0:75:fc:75:df:
                    6a:17:fc:7d:ed:1e:95:6b:7d:19:4c:07:5b:02:f0:
                    31:23:db:f0:31:07:6b:18:6f:b7:fd:ba:be:24:f5:
                    65:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:28:15:2D:E8:C1:86:D9:AB:3B:4E:10:84:12:9E:9A:88:C7:B2:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/5fb55df3-9101-32ec-9e12-5cc763c7f184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:c9::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:08:62:9d:40:ce:53:e7:4f:61:17:ed:6f:35:7d:da:94:27:
         cb:92:35:ca:a0:5a:23:b1:85:7f:c9:bf:c6:48:a3:27:11:e5:
         05:2f:cf:af:24:10:f9:ba:8e:10:83:49:dc:f5:02:92:dc:76:
         26:c2:62:92:9a:79:06:41:9c:83:b7:a8:eb:44:62:e9:f9:57:
         55:b5:eb:52:99:17:e3:e0:b4:01:4c:e4:66:46:09:70:bd:91:
         09:90:1d:be:cf:39:97:0e:17:02:f0:5f:46:d5:78:99:84:2d:
         52:04:f0:e2:c4:0f:eb:ea:a4:c6:f2:10:96:d8:4c:c3:85:b8:
         f9:68:7c:16:55:d4:84:9b:17:ef:a0:96:25:34:9a:b7:14:c6:
         29:27:db:81:d1:96:87:52:00:6f:98:bb:13:94:eb:ac:04:00:
         b2:c7:8a:d5:3e:c4:4c:ec:85:a0:e4:7f:35:b3:70:38:05:7b:
         8e:30:c5:3c:c9:2e:40:e9:21:2b:9d:0c:ac:b6:b7:27:35:2e:
         1f:90:a4:c5:c3:b1:29:57:32:8c:16:05:47:8d:f4:de:a3:fe:
         4e:6e:46:00:75:13:10:a0:ba:3b:50:38:06:cf:07:d5:6a:f4:
         7c:ed:a7:4a:db:a7:78:cd:05:c4:ee:c5:99:a7:7f:36:2a:4d:
         6b:66:60:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:58 2026 by rpki-client