Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/7956e6eb-2c5a-3d66-98c8-ebf9cb16becb.roa
File:                     7956e6eb-2c5a-3d66-98c8-ebf9cb16becb.roa (raw, json)
Hash identifier:          XO6NW3/hjb8l4o7dSbWN2O1s0BU7VGdhwIZyOyUlAp4=
Subject key identifier:   68:87:DA:0E:EE:89:82:6B:F2:9D:A6:2E:7F:53:0D:79:5C:D7:3B:E4
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E081836D4C7A4FF18FFC0
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/7956e6eb-2c5a-3d66-98c8-ebf9cb16becb.roa
Signing time:             Tue 12 May 2026 13:06:39 +0000
ROA not before:           Tue 12 May 2026 13:06:39 +0000
ROA not after:            Mon 10 Aug 2026 13:06:39 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2e9::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:08:18:36:d4:c7:a4:ff:18:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:39 2026 GMT
            Not After : Aug 10 13:06:39 2026 GMT
        Subject: CN=0f1d0659-ec6e-4739-9320-f0fe872d8571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e7:6e:8f:98:3b:9f:0b:9e:31:52:3a:69:28:
                    6d:26:b2:2c:b0:57:95:bf:c7:10:83:bd:0c:f1:c9:
                    fc:31:ff:95:e8:4d:01:f8:01:a5:37:dc:4a:fa:4e:
                    1d:c1:de:43:7a:99:3c:99:1b:a3:4f:a9:90:f7:db:
                    22:0f:ae:16:b1:37:fc:60:f9:fa:6e:81:66:2a:38:
                    eb:7e:2a:5b:98:a0:d7:36:30:92:59:d1:b9:d1:a9:
                    7a:21:d2:a2:f0:22:9f:ab:00:f9:f7:35:6b:cc:33:
                    59:ad:6a:61:46:5a:e0:84:d1:7b:0b:0a:56:08:61:
                    b2:39:76:39:ac:4a:79:bb:fd:48:db:e6:c9:6d:37:
                    13:dc:70:80:e4:ae:4e:2a:d1:45:95:a9:8c:0a:67:
                    62:ec:47:98:94:c5:8a:89:8f:4c:c1:c1:aa:83:5f:
                    1c:4b:44:37:d3:da:32:9c:bc:1e:7d:01:f4:6a:5e:
                    75:88:a4:5c:db:98:51:8f:42:84:7b:ce:56:46:1f:
                    c2:21:11:57:31:b0:6b:18:23:76:5f:a0:b6:bb:bc:
                    57:82:6c:9f:64:76:58:e5:69:c1:94:8b:d3:bb:7c:
                    1c:69:7f:f4:67:64:f2:b8:57:9d:33:7f:c8:5b:ef:
                    4b:36:80:6c:98:f0:99:fb:32:fa:31:ff:cb:ba:c7:
                    cb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:87:DA:0E:EE:89:82:6B:F2:9D:A6:2E:7F:53:0D:79:5C:D7:3B:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/7956e6eb-2c5a-3d66-98c8-ebf9cb16becb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2e9::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d0:a1:f2:7b:3f:31:09:d9:0e:96:aa:96:b9:9c:04:e1:6a:
         5b:1d:a4:5b:17:bf:b8:62:73:28:47:29:ba:7d:c6:11:5c:a2:
         a8:da:ce:c3:0d:01:91:f8:d7:7e:cb:d7:b5:72:8a:8b:c7:41:
         ba:78:85:01:f7:ed:32:36:11:d5:c6:39:9f:70:38:f1:db:96:
         2e:94:75:1d:0c:1e:84:8b:a7:9d:fd:08:45:a8:96:ba:6c:53:
         b8:05:48:c5:1f:cb:5d:d7:98:48:71:ab:57:d4:37:e4:f8:46:
         ee:84:60:ff:08:d8:24:6c:fc:00:eb:87:70:e2:3e:30:fc:1e:
         18:de:2b:5e:65:cb:79:7e:8b:ed:86:96:7a:f2:a2:2f:4c:2c:
         a4:5d:34:db:62:35:f5:bd:5b:f5:bf:b2:41:0e:04:59:83:30:
         cf:8e:2f:ad:af:52:24:75:85:dd:a8:cc:2b:2b:98:f8:ee:a6:
         e0:9d:3a:83:3c:20:34:2e:ce:66:95:fb:3a:7a:e0:69:ec:e6:
         3c:5a:18:27:8c:17:e5:e7:f9:9e:4f:ce:ef:b4:92:0a:ef:ce:
         33:32:13:7c:68:45:f6:03:d7:85:60:18:45:ba:23:c6:86:53:
         f7:4b:27:35:d2:70:69:dd:82:37:4c:3f:45:ba:19:bb:bc:f0:
         d5:ed:12:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:19 2026 by rpki-client