Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/7dd93470-bc39-3c27-b943-6b325fa7d90f.roa
File:                     7dd93470-bc39-3c27-b943-6b325fa7d90f.roa (raw, json)
Hash identifier:          Nxm8FEYmUP+/H4ElPnxpdyLJlJveJ5CRowwq559uh3I=
Subject key identifier:   A0:74:C4:FB:BB:B6:CB:59:3E:62:D8:02:E7:EA:ED:1C:CC:EC:2F:64
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E04A8F963D23BEFE42300
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/7dd93470-bc39-3c27-b943-6b325fa7d90f.roa
Signing time:             Tue 12 May 2026 13:06:37 +0000
ROA not before:           Tue 12 May 2026 13:06:37 +0000
ROA not after:            Mon 10 Aug 2026 13:06:37 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2b8::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:04:a8:f9:63:d2:3b:ef:e4:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:37 2026 GMT
            Not After : Aug 10 13:06:37 2026 GMT
        Subject: CN=bdc90e18-6d5d-4510-b16e-60aa9498d729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d2:9a:d0:40:5a:39:27:54:42:af:8a:58:24:
                    b3:22:e4:60:10:b8:c5:1a:6b:4b:33:0a:f2:e1:46:
                    09:b6:91:e2:59:ab:29:d5:18:f0:0b:0f:36:a8:6f:
                    8c:55:e3:f1:66:f7:05:20:0c:d1:0a:d9:28:9d:d8:
                    d4:16:a3:13:0d:e7:f8:39:f2:fc:91:e4:b0:22:3b:
                    67:3f:ca:03:74:cc:88:f6:34:19:25:9f:f4:6e:c8:
                    76:06:76:67:3a:6d:8f:8e:a5:b0:ea:95:32:28:80:
                    0b:57:d5:94:5c:85:c0:09:16:bd:38:9a:08:30:97:
                    41:5e:81:5c:e8:61:08:3b:5a:2d:0a:c2:14:22:dc:
                    8b:3e:3a:6b:a2:2d:ee:02:db:82:57:03:b6:34:2e:
                    42:dc:1b:24:85:27:48:45:02:43:57:b0:e9:88:d7:
                    8e:f2:2c:b1:60:99:5f:62:6e:50:b0:d8:22:d8:79:
                    f5:9d:50:7a:b0:cb:e5:84:78:6f:6b:05:a6:5c:a4:
                    ef:62:0b:f0:55:e0:f0:e1:cb:df:f0:eb:85:41:7a:
                    2b:e1:a6:fe:99:f5:dd:dd:30:d9:cd:27:c2:4e:ad:
                    7d:46:a4:82:da:b7:1e:e3:3b:a3:b2:b3:0b:e4:18:
                    be:b2:6d:c8:67:6c:b6:79:7b:11:f8:8f:b4:f2:07:
                    3f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:74:C4:FB:BB:B6:CB:59:3E:62:D8:02:E7:EA:ED:1C:CC:EC:2F:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/7dd93470-bc39-3c27-b943-6b325fa7d90f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2b8::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:47:7c:0c:9b:e3:ea:b2:d0:65:1b:da:ce:14:07:be:9b:0f:
         81:2d:11:2d:9f:54:59:16:53:cb:77:d4:8d:00:56:a1:07:2a:
         29:17:f2:65:9b:42:59:b8:b6:d1:67:38:4d:b8:c3:b8:6a:fb:
         de:4b:6f:9a:7d:17:2d:59:12:13:51:fd:b7:65:31:46:37:ba:
         9a:2c:ff:fd:c5:63:8c:b8:e8:22:11:de:83:96:37:89:b5:47:
         86:88:b9:53:e3:a8:e5:65:49:25:9e:98:5c:90:d8:6a:c0:59:
         e0:7d:bb:c5:bd:78:09:3d:eb:1f:35:b7:d2:8c:9e:de:bd:01:
         29:48:42:70:0f:22:87:cd:a9:68:1b:66:cf:c0:60:b7:00:d4:
         a9:5f:ed:68:2b:11:9e:e6:5b:33:89:0b:79:28:43:36:c7:35:
         a7:df:8c:22:db:22:39:ed:44:94:67:e4:af:76:78:99:8d:10:
         1e:53:e4:31:91:57:79:f1:17:0c:d3:3a:ba:6b:12:0b:0b:15:
         b7:ad:ef:ef:e6:e0:8b:19:ea:7c:53:34:c2:c4:ae:62:01:f3:
         86:ba:87:2d:78:66:e0:0d:a4:16:01:03:5f:df:d1:3c:92:6a:
         b9:02:06:22:61:be:e3:e1:d1:53:b1:14:82:02:97:60:0b:1f:
         78:d3:68:68
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLgSo+WPSO+/kIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYzN1oXDTI2MDgxMDEzMDYzN1owLzEtMCsGA1UEAxMk
YmRjOTBlMTgtNmQ1ZC00NTEwLWIxNmUtNjBhYTk0OThkNzI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNKa0EBaOSdUQq+KWCSzIuRgELjFGmtLMwry
4UYJtpHiWasp1RjwCw82qG+MVePxZvcFIAzRCtkondjUFqMTDef4OfL8keSwIjtn
P8oDdMyI9jQZJZ/0bsh2BnZnOm2PjqWw6pUyKIALV9WUXIXACRa9OJoIMJdBXoFc
6GEIO1otCsIUItyLPjproi3uAtuCVwO2NC5C3BskhSdIRQJDV7DpiNeO8iyxYJlf
Ym5QsNgi2Hn1nVB6sMvlhHhvawWmXKTvYgvwVeDw4cvf8OuFQXor4ab+mfXd3TDZ
zSfCTq19RqSC2rce4zujsrML5Bi+sm3IZ2y2eXsR+I+08gc/YwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFKB0xPu7tstZPmLYAufq7RzM7C9kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvN2RkOTM0NzAtYmMzOS0z
YzI3LWI5NDMtNmIzMjVmYTdkOTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
ArgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAjEd8DJvj6rLQZRvazhQHvpsPgS0RLZ9UWRZTy3fUjQBWoQcq
KRfyZZtCWbi20Wc4TbjDuGr73ktvmn0XLVkSE1H9t2UxRje6miz//cVjjLjoIhHe
g5Y3ibVHhoi5U+Oo5WVJJZ6YXJDYasBZ4H27xb14CT3rHzW30oye3r0BKUhCcA8i
h82paBtmz8BgtwDUqV/taCsRnuZbM4kLeShDNsc1p9+MItsiOe1ElGfkr3Z4mY0Q
HlPkMZFXefEXDNM6umsSCwsVt63v7+bgixnqfFM0wsSuYgHzhrqHLXhm4A2kFgED
X9/RPJJquQIGImG+4+HRU7EUggKXYAsfeNNoaA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:02:54 2026 by rpki-client