Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/656fe96d-5080-36ea-be1e-4ca67c5e98b3.roa
File:                     656fe96d-5080-36ea-be1e-4ca67c5e98b3.roa (raw, json)
Hash identifier:          NU/oC2XoUhbnN4ccUtxG5cVV71ThxN7cIGlJ+OMVRLU=
Subject key identifier:   7A:A5:EB:D5:42:2D:39:9F:FF:AF:4F:85:E0:E1:1E:F7:B0:7E:55:EA
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DFC55F1EA8BE858DA8400
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/656fe96d-5080-36ea-be1e-4ca67c5e98b3.roa
Signing time:             Tue 12 May 2026 13:06:34 +0000
ROA not before:           Tue 12 May 2026 13:06:34 +0000
ROA not after:            Mon 10 Aug 2026 13:06:34 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:240::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:fc:55:f1:ea:8b:e8:58:da:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:34 2026 GMT
            Not After : Aug 10 13:06:34 2026 GMT
        Subject: CN=60e34d78-1222-489d-bb49-fd0d888ec3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:79:4a:53:94:be:fd:e5:18:71:7d:96:d1:10:
                    34:b0:b8:c1:39:14:e0:70:c5:2b:75:87:34:ec:d0:
                    bb:ef:a8:19:b9:1b:e1:46:4b:c6:f1:b5:95:ea:c6:
                    3d:d9:3e:99:8f:b5:7b:26:9e:25:83:62:95:40:0f:
                    ad:52:9a:1a:6e:d8:88:88:64:fd:96:70:5a:94:d3:
                    25:1b:64:20:e6:60:6e:80:ec:1d:a3:0d:93:8b:48:
                    0f:0d:12:49:95:5a:42:c4:0c:77:2a:49:b4:a5:52:
                    5a:ae:42:2e:de:76:3b:45:bf:ae:15:7a:9a:a7:e5:
                    45:be:5e:04:73:a7:8b:29:5e:e2:aa:6a:8f:f1:d2:
                    11:5c:9b:17:71:23:7b:cd:2a:0d:c4:b6:73:ac:5e:
                    3f:ff:23:45:7c:19:f8:6c:94:e9:5f:55:01:e4:3e:
                    5a:a3:ea:bc:7b:13:4f:d1:29:05:3f:73:ab:17:cc:
                    92:f4:a0:1c:34:a9:01:76:b6:3f:13:a1:87:1f:b7:
                    ae:f9:1b:7a:59:f2:4c:6a:b9:b4:09:a8:69:65:f1:
                    77:48:da:0a:f2:03:a4:c9:c5:14:54:f3:74:5e:1e:
                    3b:53:ec:a0:04:ba:6b:b2:f7:e7:f2:41:68:6f:67:
                    71:62:99:a8:e6:97:dd:49:3b:07:bd:c3:03:55:a1:
                    f1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A5:EB:D5:42:2D:39:9F:FF:AF:4F:85:E0:E1:1E:F7:B0:7E:55:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/656fe96d-5080-36ea-be1e-4ca67c5e98b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:240::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e0:fe:63:30:85:95:f1:69:1f:c4:f3:a9:d7:24:a7:4a:6f:
         31:e0:b9:23:08:ce:a7:27:c6:54:0f:f2:f7:2c:74:32:f2:29:
         87:90:be:7b:6b:56:42:2e:67:13:4b:d5:f1:b7:c6:fb:61:90:
         9a:48:ff:c7:fb:6f:01:ac:35:7c:3a:90:cb:52:e3:d6:0b:64:
         b8:7a:7e:f4:af:56:e6:e1:22:b0:cf:92:55:8b:96:30:d0:d6:
         f4:a8:2f:b2:4e:13:22:88:50:4a:8f:e0:ad:ff:6f:9e:c5:8e:
         f3:3e:4e:1d:1a:df:fc:67:5f:7c:c9:e1:bb:b7:ab:75:1b:f0:
         3d:60:87:1c:0b:aa:cd:bf:92:40:8d:31:f6:1e:2d:a2:d0:8c:
         27:97:53:d3:88:0e:c7:21:da:87:59:d7:dd:57:e6:45:12:2b:
         e0:e1:19:a2:87:67:ed:86:24:ca:46:32:6c:ec:6c:7a:a5:3b:
         94:3c:b0:15:a6:5d:26:75:28:7d:84:7f:bb:bf:65:d7:df:aa:
         7f:15:27:86:b0:08:79:19:de:0e:b1:80:07:b0:f5:ea:36:37:
         af:95:ca:7e:2f:a2:1b:fe:ac:f0:9b:20:ee:45:ac:79:0f:16:
         4b:af:af:04:8b:a3:52:3a:ef:b7:f8:7f:7d:de:e5:d1:8b:7a:
         98:95:af:55
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLfxV8eqL6FjahAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYzNFoXDTI2MDgxMDEzMDYzNFowLzEtMCsGA1UEAxMk
NjBlMzRkNzgtMTIyMi00ODlkLWJiNDktZmQwZDg4OGVjM2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3lKU5S+/eUYcX2W0RA0sLjBORTgcMUrdYc0
7NC776gZuRvhRkvG8bWV6sY92T6Zj7V7Jp4lg2KVQA+tUpoabtiIiGT9lnBalNMl
G2Qg5mBugOwdow2Ti0gPDRJJlVpCxAx3Kkm0pVJarkIu3nY7Rb+uFXqap+VFvl4E
c6eLKV7iqmqP8dIRXJsXcSN7zSoNxLZzrF4//yNFfBn4bJTpX1UB5D5ao+q8exNP
0SkFP3OrF8yS9KAcNKkBdrY/E6GHH7eu+Rt6WfJMarm0CahpZfF3SNoK8gOkycUU
VPN0Xh47U+ygBLprsvfn8kFob2dxYpmo5pfdSTsHvcMDVaHxiwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFHql69VCLTmf/69PheDhHvewflXqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvNjU2ZmU5NmQtNTA4MC0z
NmVhLWJlMWUtNGNhNjdjNWU5OGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AkAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAWuD+YzCFlfFpH8Tzqdckp0pvMeC5IwjOpyfGVA/y9yx0MvIp
h5C+e2tWQi5nE0vV8bfG+2GQmkj/x/tvAaw1fDqQy1Lj1gtkuHp+9K9W5uEisM+S
VYuWMNDW9Kgvsk4TIohQSo/grf9vnsWO8z5OHRrf/GdffMnhu7erdRvwPWCHHAuq
zb+SQI0x9h4totCMJ5dT04gOxyHah1nX3VfmRRIr4OEZoodn7YYkykYybOxseqU7
lDywFaZdJnUofYR/u79l19+qfxUnhrAIeRneDrGAB7D16jY3r5XKfi+iG/6s8Jsg
7kWseQ8WS6+vBIujUjrvt/h/fd7l0Yt6mJWvVQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:46:23 2026 by rpki-client