Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/9019cb67-9cad-3786-b315-37c143f52994.roa
File:                     9019cb67-9cad-3786-b315-37c143f52994.roa (raw, json)
Hash identifier:          x6djwCk4aLKEtmyDzJ+tE0hLzrdlEL2O/kPTIMKshsk=
Subject key identifier:   B7:15:34:29:DE:AC:9C:13:BB:7F:C5:D1:F4:8F:79:89:FD:EC:98:B8
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E1C022E471348EE1F8200
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/9019cb67-9cad-3786-b315-37c143f52994.roa
Signing time:             Tue 12 May 2026 13:06:48 +0000
ROA not before:           Tue 12 May 2026 13:06:48 +0000
ROA not after:            Mon 10 Aug 2026 13:06:48 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3f4::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:1c:02:2e:47:13:48:ee:1f:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:48 2026 GMT
            Not After : Aug 10 13:06:48 2026 GMT
        Subject: CN=098e947a-c757-4458-a62d-a5bff71b495b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:84:b8:fb:f1:60:bb:ed:2d:48:7e:cb:38:
                    cb:56:ff:a8:24:b5:27:19:ca:08:32:3a:6a:e1:68:
                    62:37:8a:d7:89:37:1a:c8:29:17:8d:69:d5:85:43:
                    97:9f:49:ab:25:43:b9:75:99:5c:08:49:a7:75:7a:
                    47:5c:3d:51:04:e1:88:ff:a6:81:f1:34:15:b2:3e:
                    51:a6:83:f1:83:06:f9:c7:28:0a:d9:e2:85:df:2c:
                    fc:a0:bd:4c:ba:2d:68:52:55:5b:f3:19:6e:20:5e:
                    dc:b3:53:ea:58:e0:24:43:32:76:6a:3c:59:9c:d0:
                    e3:4d:47:e8:be:3f:e4:60:bd:e5:c3:35:22:e7:6d:
                    d2:15:c7:ec:b6:5f:18:1a:29:3b:d2:67:5e:72:9a:
                    6a:43:99:fd:61:c5:ae:40:e8:83:b2:a0:ff:7d:1a:
                    5e:76:e2:7e:41:1d:e4:ab:44:bd:22:60:ed:1f:07:
                    0d:fb:ef:f3:7c:f3:49:63:8a:1a:20:22:56:9e:56:
                    51:86:50:28:5f:bd:58:a4:3a:41:1b:bc:a0:37:7b:
                    3e:ff:39:fb:19:e4:00:5d:64:1c:9d:6d:cd:1e:27:
                    a3:5b:78:14:23:35:91:5e:62:51:1b:09:43:29:b2:
                    65:b3:58:5c:6a:d4:0a:f1:73:b6:bb:e7:c5:f0:74:
                    38:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:15:34:29:DE:AC:9C:13:BB:7F:C5:D1:F4:8F:79:89:FD:EC:98:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/9019cb67-9cad-3786-b315-37c143f52994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3f4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:1d:cd:44:6b:a5:61:1d:8d:87:cc:9c:23:07:3f:e6:16:ce:
         8b:0a:2f:d8:41:09:19:c6:a1:a4:25:f5:38:7a:12:e6:ae:a7:
         ef:7b:88:ae:6e:b5:c7:32:67:9d:eb:3a:c9:32:f3:ee:d9:f6:
         3a:97:f0:91:c2:9a:82:c6:68:f6:a6:61:bd:f7:f3:5c:72:7f:
         f8:a2:64:62:07:29:74:0f:e4:85:df:fd:9d:4e:75:ca:48:eb:
         a8:ae:c2:b0:f6:d2:64:a7:33:54:9b:9d:f9:4c:ed:4a:0a:b8:
         46:24:d0:16:ea:aa:0a:26:48:a0:42:7b:31:75:23:16:75:cb:
         6e:5b:a4:4b:3c:fe:7d:61:eb:8e:dc:94:4e:44:cf:ae:85:dd:
         ee:5f:62:84:b4:b2:d4:6f:66:a5:ee:fd:9d:3b:83:3a:cf:b3:
         8c:23:9d:13:a7:d1:64:bb:6d:1c:3a:81:50:5a:8d:e0:89:8e:
         7c:10:f9:e8:ea:00:0c:5f:d7:e7:c8:41:5f:5e:e3:b0:96:13:
         2e:38:37:0c:7f:f1:bc:2f:c9:1e:b9:f2:28:e9:bb:13:48:50:
         66:87:9b:b6:31:fb:5f:00:3d:b2:7b:cb:93:a8:4a:2f:e8:b1:
         a2:f8:8d:93:0d:a5:43:42:d1:27:ad:dc:8f:13:a4:96:48:d2:
         89:d4:31:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:48:30 2026 by rpki-client