Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/63dfc8bf-4866-3391-8457-bab129eef71d.roa
File:                     63dfc8bf-4866-3391-8457-bab129eef71d.roa (raw, json)
Hash identifier:          irGDg05W8OOQVK8NmO4KTWhIQSoHSAVdSabN9lsYYM4=
Subject key identifier:   83:59:46:50:42:DA:02:A6:70:F1:28:83:36:34:3F:BB:AE:60:77:B7
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E181C21638F095C9BB380
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/63dfc8bf-4866-3391-8457-bab129eef71d.roa
Signing time:             Tue 12 May 2026 13:06:47 +0000
ROA not before:           Tue 12 May 2026 13:06:47 +0000
ROA not after:            Mon 10 Aug 2026 13:06:47 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3c1::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:18:1c:21:63:8f:09:5c:9b:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:47 2026 GMT
            Not After : Aug 10 13:06:47 2026 GMT
        Subject: CN=4a8dda95-e9e5-456a-a852-0f8771bbe5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8f:b3:f4:94:9c:30:96:ca:40:e9:90:28:1c:
                    ae:86:f8:f7:98:98:0b:cd:8d:9d:a2:1b:de:36:9e:
                    48:c4:9d:83:28:36:09:cb:55:a1:2a:b2:56:3d:52:
                    c9:20:d3:37:5f:dd:c8:df:f8:70:12:3d:ae:f8:51:
                    43:c2:0e:71:75:fa:08:5d:ef:e3:2d:b0:44:c1:f6:
                    98:f3:d7:ff:91:2e:35:c5:e4:20:fb:a9:b7:43:74:
                    ad:d3:85:66:23:1a:64:c0:a6:fc:f0:66:bc:04:c8:
                    88:4f:a2:b5:ea:27:20:fe:fd:c1:8d:d8:fe:9d:4b:
                    86:9b:b2:da:40:7f:93:1f:27:65:e8:30:fe:d6:32:
                    8b:1d:8a:d7:df:2b:73:b7:21:4c:99:be:e3:0b:3f:
                    d3:00:f9:4a:5d:d0:7a:73:b7:b5:10:25:23:f8:54:
                    50:05:a1:a0:94:02:bc:0a:fe:94:ca:e0:ed:97:75:
                    f9:ca:fd:1f:bf:28:ad:71:53:49:6b:d9:be:42:45:
                    12:da:50:f4:fd:48:5d:32:22:7e:29:d6:de:1b:de:
                    24:bf:43:b3:e5:80:b0:56:d2:eb:7c:50:db:44:32:
                    86:0f:c5:39:d5:9f:e4:cd:c1:2f:84:fe:2b:51:b9:
                    84:62:da:c9:28:73:c1:21:8e:8a:39:a3:6f:49:fb:
                    da:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:59:46:50:42:DA:02:A6:70:F1:28:83:36:34:3F:BB:AE:60:77:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/63dfc8bf-4866-3391-8457-bab129eef71d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3c1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:41:43:31:5d:fa:a5:09:9b:2a:ba:b1:2d:8f:ea:5f:04:4b:
         76:b0:d1:05:f2:36:b4:15:4a:a2:5c:87:08:68:23:95:eb:06:
         f4:e4:c4:8c:b4:94:97:92:28:07:be:14:a9:62:f2:f0:54:bc:
         47:e1:a8:58:0b:26:af:de:46:eb:63:cf:1e:a2:68:e5:4d:8e:
         0b:ac:ab:2c:5e:d1:56:09:84:97:0e:23:d7:1b:c5:ae:80:f8:
         0b:a6:dd:47:46:e0:a8:c1:25:97:24:e8:31:4c:6a:46:8c:2b:
         14:8b:d3:55:3c:e4:51:1c:17:e1:d4:68:dc:21:66:d5:e8:be:
         df:00:3e:bb:ad:30:88:c7:1b:9b:2c:14:c3:a0:8f:b5:bf:e2:
         5f:e2:f7:49:f6:95:e7:b4:a7:ea:b9:c5:6b:e8:c7:6d:66:b2:
         3c:5f:cd:d9:2a:ac:d3:37:1b:f1:a5:20:2f:f8:f0:b1:26:ab:
         b5:65:6c:49:d3:22:0a:88:1f:aa:7b:5b:8c:99:17:40:92:e0:
         87:98:39:b2:47:0e:31:2f:77:a0:21:1a:a7:44:67:e8:c3:f8:
         ec:84:61:36:aa:c7:2a:4e:75:70:e6:19:20:94:2e:8a:af:9b:
         9d:94:c0:db:20:5e:a2:a5:d5:b9:3e:b4:da:55:d9:8b:a0:19:
         c0:52:9b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:22 2026 by rpki-client