Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/8bc5eef2-89c1-33a7-8a0a-b54480b13c71.roa
File:                     8bc5eef2-89c1-33a7-8a0a-b54480b13c71.roa (raw, json)
Hash identifier:          hNn2c/OoJ3naO3CBcvZ7JbSOwzt10Otie5ahsnxcvmk=
Subject key identifier:   BA:D8:6C:C2:FC:8E:CF:B9:76:9F:26:85:20:D9:ED:DE:28:61:47:03
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DECD9067149FDE530AA80
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/8bc5eef2-89c1-33a7-8a0a-b54480b13c71.roa
Signing time:             Tue 12 May 2026 13:06:26 +0000
ROA not before:           Tue 12 May 2026 13:06:26 +0000
ROA not after:            Mon 10 Aug 2026 13:06:26 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:14e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:ec:d9:06:71:49:fd:e5:30:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:26 2026 GMT
            Not After : Aug 10 13:06:26 2026 GMT
        Subject: CN=3da7ae71-7cb1-4147-aeef-0da085133578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:03:63:c3:68:bb:25:c3:74:01:c2:68:9b:cb:
                    8e:46:20:23:b9:33:bb:5a:1d:9b:69:4d:8d:9a:49:
                    a6:70:15:d7:76:f8:6c:e0:82:13:30:77:83:eb:60:
                    a5:b1:41:41:bd:77:00:d1:55:e4:b6:e6:3f:fe:e3:
                    31:5c:35:17:87:8d:1f:52:5b:f2:2a:f0:42:d8:f5:
                    2d:db:bd:ed:9b:de:c7:69:ad:66:d2:35:2b:80:c9:
                    6d:7f:b3:fd:11:fd:29:d6:98:98:91:1b:55:1e:ab:
                    e0:11:cf:83:87:b7:d9:a3:0b:a6:94:ec:92:48:6e:
                    92:0d:ed:25:7c:79:89:0b:5d:79:2e:43:62:2a:dc:
                    f0:08:6e:f0:ae:d2:72:ac:68:f1:e3:06:73:a4:a5:
                    f8:4a:95:64:2e:c8:8b:c5:3c:99:f2:b4:7c:63:cc:
                    49:26:6f:b6:f1:1f:b5:26:60:d5:c2:7d:c1:11:7b:
                    42:af:7f:f6:15:36:a1:e5:b2:25:92:9b:dd:b2:f3:
                    b8:77:03:f6:51:16:5e:e7:dc:dc:b6:ea:af:35:c6:
                    9c:21:24:43:b8:2a:88:06:49:0a:44:a9:9b:ac:34:
                    a8:d5:3d:c9:5c:f2:55:8d:c8:18:7a:d7:81:bf:50:
                    53:e2:29:de:53:21:ee:ef:cb:b6:a6:8a:78:42:00:
                    00:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D8:6C:C2:FC:8E:CF:B9:76:9F:26:85:20:D9:ED:DE:28:61:47:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/8bc5eef2-89c1-33a7-8a0a-b54480b13c71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:14e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:bf:1d:8d:54:4a:f4:00:16:5d:b5:80:92:59:59:07:02:a1:
         2c:4a:e0:2a:7a:89:87:31:0d:bf:e5:28:94:4c:33:c3:4a:72:
         57:a6:4a:ae:f4:bd:cd:eb:90:0a:ec:c3:4f:21:50:c6:be:84:
         af:30:27:89:9f:88:09:e4:0c:e5:98:69:61:08:5a:92:fb:30:
         84:a0:8c:00:07:a5:15:71:04:f6:6e:08:83:f6:fb:f9:22:50:
         5a:84:fb:c3:4f:f7:67:3f:ff:5d:23:f6:b0:23:1a:cd:47:b5:
         0b:a2:38:93:b4:d4:9e:bc:27:8d:0e:d6:02:ee:38:7c:7f:2f:
         d4:ab:72:c0:ab:1e:8f:86:f8:24:18:d6:b5:68:e8:50:b0:0a:
         b3:5c:39:77:64:3f:e7:6e:b2:06:47:cb:a5:3b:1e:ac:db:a5:
         36:c9:44:30:f0:c7:e7:db:9d:9b:dc:a3:e5:de:81:73:fc:62:
         6a:82:04:2c:37:da:81:bc:c9:4b:65:1c:92:81:ea:b3:2f:d2:
         17:66:4c:90:da:af:39:84:2c:26:b6:b8:39:bd:0c:7e:5c:75:
         f6:ce:50:8f:fb:03:23:0f:c4:c4:72:57:6f:f6:51:88:4f:77:
         aa:fc:a4:74:ac:10:de:5f:87:91:3b:60:82:0c:f1:51:33:6b:
         26:01:4b:c9
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLezZBnFJ/eUwqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYyNloXDTI2MDgxMDEzMDYyNlowLzEtMCsGA1UEAxMk
M2RhN2FlNzEtN2NiMS00MTQ3LWFlZWYtMGRhMDg1MTMzNTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgNjw2i7JcN0AcJom8uORiAjuTO7Wh2baU2N
mkmmcBXXdvhs4IITMHeD62ClsUFBvXcA0VXktuY//uMxXDUXh40fUlvyKvBC2PUt
273tm97Haa1m0jUrgMltf7P9Ef0p1piYkRtVHqvgEc+Dh7fZowumlOySSG6SDe0l
fHmJC115LkNiKtzwCG7wrtJyrGjx4wZzpKX4SpVkLsiLxTyZ8rR8Y8xJJm+28R+1
JmDVwn3BEXtCr3/2FTah5bIlkpvdsvO4dwP2URZe59zctuqvNcacISRDuCqIBkkK
RKmbrDSo1T3JXPJVjcgYeteBv1BT4ineUyHu78u2pop4QgAAOQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFLrYbML8js+5dp8mhSDZ7d4oYUcDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvOGJjNWVlZjItODljMS0z
M2E3LThhMGEtYjU0NDgwYjEzYzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AU4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAT78djVRK9AAWXbWAkllZBwKhLErgKnqJhzENv+UolEwzw0py
V6ZKrvS9zeuQCuzDTyFQxr6ErzAniZ+ICeQM5ZhpYQhakvswhKCMAAelFXEE9m4I
g/b7+SJQWoT7w0/3Zz//XSP2sCMazUe1C6I4k7TUnrwnjQ7WAu44fH8v1KtywKse
j4b4JBjWtWjoULAKs1w5d2Q/526yBkfLpTserNulNslEMPDH59udm9yj5d6Bc/xi
aoIELDfagbzJS2UckoHqsy/SF2ZMkNqvOYQsJra4Ob0Mflx19s5Qj/sDIw/ExHJX
b/ZRiE93qvykdKwQ3l+HkTtgggzxUTNrJgFLyQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:35:11 2026 by rpki-client