Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/67dc9205-3438-38d0-9efb-da06cdccf9b3.roa
File:                     67dc9205-3438-38d0-9efb-da06cdccf9b3.roa (raw, json)
Hash identifier:          0k/bg4Zg2HUkJZAqZaBdJqskut7vSbhlUZRJlFhs82o=
Subject key identifier:   5E:5D:09:29:39:3B:A7:87:B2:D5:51:18:FC:45:3F:E1:14:AA:B4:1E
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DE669983D415E02E53000
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/67dc9205-3438-38d0-9efb-da06cdccf9b3.roa
Signing time:             Tue 12 May 2026 13:06:23 +0000
ROA not before:           Tue 12 May 2026 13:06:23 +0000
ROA not after:            Mon 10 Aug 2026 13:06:23 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:e2::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:e6:69:98:3d:41:5e:02:e5:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:23 2026 GMT
            Not After : Aug 10 13:06:23 2026 GMT
        Subject: CN=4e7b0f16-97e3-4ae5-a8f8-4c21bb1a2389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:7f:4c:f5:24:28:9b:80:36:88:4a:2a:e2:
                    24:47:6a:30:31:ff:02:24:a1:a6:9b:87:90:08:a0:
                    d8:3c:cb:fe:4b:97:27:b5:f2:a7:97:25:79:16:f0:
                    9b:7b:85:ba:1f:fb:19:a3:99:85:88:59:fb:46:a2:
                    1a:5d:e3:f7:b4:d6:b5:ce:4c:5f:24:79:2c:37:b1:
                    ce:df:4b:ad:66:cf:de:e3:8c:4a:b6:f4:8b:f7:60:
                    3a:31:25:03:ef:6d:d1:34:e1:83:6c:32:6b:d9:d7:
                    5b:f6:c6:52:4b:f5:ac:09:f3:b2:1e:18:67:37:cb:
                    5a:66:57:19:13:39:4c:1a:fe:26:cf:cd:08:61:00:
                    98:26:b6:b5:7d:04:79:fd:1a:35:2a:39:e0:90:45:
                    be:5f:16:00:de:8f:db:8a:75:13:30:6b:40:d8:95:
                    d7:00:de:b9:56:39:43:50:47:93:cd:68:fe:f5:8a:
                    4d:4b:d3:bc:29:e1:5d:23:ec:fe:e7:20:5e:54:a5:
                    91:89:84:a2:c3:88:ab:8e:cf:1d:85:2c:55:b3:e8:
                    f7:60:5f:df:82:b4:af:69:09:72:b0:42:6e:84:b6:
                    98:e8:1f:91:5a:04:93:94:da:c3:9d:1c:6c:49:f7:
                    18:aa:d5:f9:93:11:90:94:0c:5b:50:40:c2:9e:07:
                    4f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5D:09:29:39:3B:A7:87:B2:D5:51:18:FC:45:3F:E1:14:AA:B4:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/67dc9205-3438-38d0-9efb-da06cdccf9b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:e2::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:a9:08:62:d5:dd:6a:30:d5:af:f2:1b:3d:58:8b:65:39:bf:
         d2:34:fd:da:b9:65:64:68:23:9b:c1:8c:63:7c:e3:c3:53:ab:
         36:9f:f6:5d:c0:56:43:a6:76:e2:18:91:48:86:80:0f:cd:c5:
         f5:f3:48:96:96:cc:e0:75:39:55:88:33:bf:0c:c3:78:46:bf:
         64:44:28:39:3c:7d:9e:c9:bc:31:88:8d:da:d8:9f:82:d9:c0:
         37:db:82:43:6b:47:c3:b0:6d:b2:fd:d3:3b:e3:c5:44:e7:80:
         ab:f0:bd:2e:1a:7a:7f:97:68:48:fe:33:a4:16:90:d9:a5:2b:
         c0:b5:b0:b3:fe:9d:59:3e:eb:b4:24:11:f5:14:44:96:0a:a0:
         c8:e8:71:de:46:f3:5d:37:09:09:0c:77:bc:4b:63:6f:83:81:
         30:97:0d:56:77:17:16:60:fb:0c:1b:a2:7c:61:9e:3a:42:83:
         69:80:39:fe:1f:74:32:cc:2d:5d:aa:53:09:e3:05:13:4a:12:
         3c:57:ba:29:1f:f0:7b:45:c4:b3:c0:46:e8:57:a6:60:b1:a5:
         b2:d5:35:78:55:1b:82:84:1e:8e:7e:6a:da:80:bf:ba:a3:32:
         ba:dc:54:00:55:eb:67:0d:81:26:c4:6a:6c:02:7d:b9:9b:80:
         77:be:60:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:30 2026 by rpki-client