Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/856dafd5-a25a-3fe9-81d3-37fc8f5ac0e3.roa
File:                     856dafd5-a25a-3fe9-81d3-37fc8f5ac0e3.roa (raw, json)
Hash identifier:          yGtp54GIo7WdWaNyhGlAO/2Cg2mgNdLG7UtmaZpBB+w=
Subject key identifier:   8C:5E:19:7B:72:5E:3B:58:AF:9F:82:43:24:01:88:0E:AC:29:ED:83
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DF575C20B4CA5977EA080
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/856dafd5-a25a-3fe9-81d3-37fc8f5ac0e3.roa
Signing time:             Tue 12 May 2026 13:06:30 +0000
ROA not before:           Tue 12 May 2026 13:06:30 +0000
ROA not after:            Mon 10 Aug 2026 13:06:30 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1d6::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:f5:75:c2:0b:4c:a5:97:7e:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:30 2026 GMT
            Not After : Aug 10 13:06:30 2026 GMT
        Subject: CN=8efcf572-b1a1-49bc-81c2-149dc1ef921a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e0:0e:b1:a9:fc:cd:8e:0e:e5:cb:24:16:48:
                    2f:0f:a4:73:26:45:1d:aa:49:09:90:9f:23:1e:61:
                    41:94:1a:a3:d2:cc:bf:e4:e0:2b:46:e4:e9:54:1f:
                    7d:15:74:0a:f7:8a:9e:c9:ed:e3:72:ef:c3:dd:a7:
                    d1:1f:28:b3:54:4a:fd:23:42:d8:81:b1:0c:32:a9:
                    3b:39:06:fb:50:27:76:2e:17:aa:72:16:50:2f:85:
                    bb:b9:b8:ee:81:2d:37:56:ed:1e:0e:6a:2e:b6:65:
                    2d:c1:ba:06:b6:06:21:49:7a:33:1c:b2:d3:44:29:
                    73:11:f5:fa:eb:7d:9e:ae:31:1f:da:53:d5:fe:48:
                    25:86:99:c0:da:3c:ce:c9:ae:58:11:eb:ab:e4:36:
                    a7:c3:76:42:cc:e8:b0:bf:45:c4:98:84:d7:f3:2f:
                    bc:60:20:e0:c2:1e:fd:4b:76:1c:b9:8f:92:2c:3a:
                    92:ff:8d:a0:1b:69:f4:de:ec:a3:36:b1:28:e3:f1:
                    aa:31:20:e0:5d:ab:2b:83:65:d3:38:75:2f:3c:13:
                    cc:3d:7d:59:32:31:54:6e:fb:6e:2e:39:16:3e:71:
                    ad:11:84:a6:37:05:45:ea:4c:ff:8f:d4:9f:2e:ed:
                    da:16:50:80:f2:80:fc:55:ba:2d:3c:8d:73:ad:1e:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5E:19:7B:72:5E:3B:58:AF:9F:82:43:24:01:88:0E:AC:29:ED:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/856dafd5-a25a-3fe9-81d3-37fc8f5ac0e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1d6::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:5f:43:9d:20:e6:d4:b0:81:42:01:d4:82:91:a9:4d:70:5f:
         cd:3e:77:b3:f4:9d:6d:6d:b6:e6:09:43:c5:25:90:bf:f4:5c:
         98:35:75:bd:5c:5a:10:02:b1:ce:ad:d6:79:2e:4e:6c:0f:c3:
         dc:75:ca:45:9c:98:b0:8d:91:bd:ef:cb:9e:1a:47:f4:02:65:
         e3:a2:24:fc:c4:50:71:62:4d:4d:ae:03:98:63:77:61:76:47:
         b7:27:1f:86:21:a1:67:77:a6:89:00:fb:50:88:87:05:6f:7d:
         80:85:a2:18:36:6c:8e:f3:f3:55:29:54:26:78:b9:c5:f9:5e:
         dd:a3:af:0d:bb:ec:7f:b4:dd:3b:79:40:43:4f:ab:3d:07:b7:
         ab:05:aa:15:ea:d7:03:9a:05:a1:87:59:08:ae:04:da:35:c7:
         99:47:b6:a5:79:7a:53:7d:13:50:7e:9f:86:55:bf:dd:11:fd:
         c7:7e:4d:7c:d8:a2:61:ca:95:39:34:6e:25:e5:33:60:b8:df:
         21:37:6f:41:db:91:a9:cc:87:52:d1:67:28:7d:19:76:c6:83:
         22:dd:b8:43:ef:d7:f7:72:a5:74:4d:bb:e7:12:76:6b:78:64:
         6d:83:49:e6:de:50:05:38:a7:30:26:fe:2c:26:ef:81:a0:34:
         f6:f8:f0:1c
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLfV1wgtMpZd+oIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYzMFoXDTI2MDgxMDEzMDYzMFowLzEtMCsGA1UEAxMk
OGVmY2Y1NzItYjFhMS00OWJjLTgxYzItMTQ5ZGMxZWY5MjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuAOsan8zY4O5cskFkgvD6RzJkUdqkkJkJ8j
HmFBlBqj0sy/5OArRuTpVB99FXQK94qeye3jcu/D3afRHyizVEr9I0LYgbEMMqk7
OQb7UCd2LheqchZQL4W7ubjugS03Vu0eDmoutmUtwboGtgYhSXozHLLTRClzEfX6
632erjEf2lPV/kglhpnA2jzOya5YEeur5Danw3ZCzOiwv0XEmITX8y+8YCDgwh79
S3YcuY+SLDqS/42gG2n03uyjNrEo4/GqMSDgXasrg2XTOHUvPBPMPX1ZMjFUbvtu
LjkWPnGtEYSmNwVF6kz/j9SfLu3aFlCA8oD8VbotPI1zrR6itwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFIxeGXtyXjtYr5+CQyQBiA6sKe2DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvODU2ZGFmZDUtYTI1YS0z
ZmU5LTgxZDMtMzdmYzhmNWFjMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AdYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEA0V9DnSDm1LCBQgHUgpGpTXBfzT53s/SdbW225glDxSWQv/Rc
mDV1vVxaEAKxzq3WeS5ObA/D3HXKRZyYsI2Rve/LnhpH9AJl46Ik/MRQcWJNTa4D
mGN3YXZHtycfhiGhZ3emiQD7UIiHBW99gIWiGDZsjvPzVSlUJni5xfle3aOvDbvs
f7TdO3lAQ0+rPQe3qwWqFerXA5oFoYdZCK4E2jXHmUe2pXl6U30TUH6fhlW/3RH9
x35NfNiiYcqVOTRuJeUzYLjfITdvQduRqcyHUtFnKH0ZdsaDIt24Q+/X93KldE27
5xJ2a3hkbYNJ5t5QBTinMCb+LCbvgaA09vjwHA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:18:51 2026 by rpki-client