Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/709a7e9d-183d-3905-8d6e-53c0a69643a1.roa
File:                     709a7e9d-183d-3905-8d6e-53c0a69643a1.roa (raw, json)
Hash identifier:          b/ilE0WsiKMoaNPfkJ+7cX8QKDWhnXORQt3k7ZJ7LMM=
Subject key identifier:   52:5B:30:6B:1B:1B:7A:CE:4B:7F:13:64:FF:00:1E:E5:41:33:E0:96
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DF59646498252B11B3C80
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/709a7e9d-183d-3905-8d6e-53c0a69643a1.roa
Signing time:             Tue 12 May 2026 13:06:30 +0000
ROA not before:           Tue 12 May 2026 13:06:30 +0000
ROA not after:            Mon 10 Aug 2026 13:06:30 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1d8::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:f5:96:46:49:82:52:b1:1b:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:30 2026 GMT
            Not After : Aug 10 13:06:30 2026 GMT
        Subject: CN=13c55531-e14d-4174-a20a-456f60c9e6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:09:07:68:b9:6c:20:26:75:25:7b:76:ff:90:
                    d0:66:f3:34:e7:41:94:de:56:50:f0:a9:60:74:e2:
                    5f:9d:3a:17:49:a1:23:96:da:85:54:c4:f0:1f:15:
                    cc:c0:23:f9:fd:ff:d8:e4:4e:6b:15:37:f4:f3:a7:
                    79:95:35:3e:4a:af:bb:a0:8b:c1:58:77:7d:33:ea:
                    fe:b4:ff:42:99:3c:35:8d:81:93:8e:65:40:ec:33:
                    f5:81:0b:4a:c2:87:d2:61:0f:a5:b6:a3:31:ef:86:
                    0b:1b:d9:9b:8d:f2:85:cd:5a:4f:73:34:e2:67:97:
                    12:08:d1:57:6e:8e:89:aa:3f:be:69:eb:29:45:30:
                    5f:3f:8c:c2:2e:c8:22:e3:ce:65:85:1f:42:95:a0:
                    52:fa:5b:5b:59:5d:da:83:0b:e0:57:3b:93:62:1d:
                    d7:65:63:01:d6:43:1f:b8:49:bc:46:6b:91:e6:a5:
                    e1:42:af:40:cb:57:76:72:27:70:f5:d1:05:42:27:
                    0d:b6:96:2d:11:04:15:23:c0:a8:ac:0e:87:b1:3c:
                    f1:f4:3b:01:20:16:a4:2b:b1:a3:6b:a1:3b:9a:46:
                    ff:92:cc:3f:1b:c0:29:85:11:21:ed:35:c3:d7:fd:
                    81:cf:0d:de:80:65:99:58:e8:e3:b5:f8:c6:60:5f:
                    14:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5B:30:6B:1B:1B:7A:CE:4B:7F:13:64:FF:00:1E:E5:41:33:E0:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/709a7e9d-183d-3905-8d6e-53c0a69643a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1d8::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:e7:70:41:05:34:88:47:c6:7c:d4:56:42:0a:8c:7a:51:75:
         6b:3f:40:eb:af:07:df:8d:4a:4a:9c:93:8b:3e:3b:a2:12:0c:
         5e:80:2b:7b:25:b9:d3:4b:28:8c:06:68:c7:ea:90:37:d1:73:
         ab:05:42:12:e1:06:77:9b:ef:4b:2f:db:01:18:ab:23:5b:8a:
         37:0c:64:39:5b:51:89:89:b2:c7:20:e3:09:f1:ef:11:b0:18:
         18:65:58:90:d5:d8:88:aa:4a:66:0a:8a:7a:2e:f5:0a:69:01:
         f6:6e:63:ba:d2:f0:f1:ee:e9:d5:ac:58:8a:4f:2f:d8:fa:62:
         62:93:22:46:ec:3e:43:51:eb:d0:6d:c5:a9:d7:5a:47:2c:f0:
         4c:85:bd:b3:62:51:bf:71:b0:80:04:13:c1:78:fa:6b:ca:84:
         e0:f6:ff:3c:df:a6:3b:96:38:36:41:b2:bb:66:f9:cf:f8:76:
         b8:6f:9a:5f:a7:89:7b:d4:e1:3c:9c:92:41:f1:0f:d0:b2:62:
         ac:de:ff:7b:2a:aa:30:a1:b4:42:f5:27:cb:f5:08:3c:e9:d0:
         de:cc:d6:c6:0d:ef:20:73:f6:ca:43:b7:14:6b:ca:1c:f4:d6:
         77:24:29:d3:7d:bd:1c:d7:0f:94:4b:fc:ec:6a:fb:10:f8:ea:
         ed:46:58:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:30:00 2026 by rpki-client