Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/90709a16-7d81-3448-b2db-d60500c0407a.roa
File:                     90709a16-7d81-3448-b2db-d60500c0407a.roa (raw, json)
Hash identifier:          AaPBd/RWbtbBkv7hTxwJfv7qPBEA9BBl+zCeZl51dDs=
Subject key identifier:   19:DC:E2:86:47:11:C4:38:AF:00:1C:16:AC:AA:D5:81:A8:88:8C:4C
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E01B4B98F8D823D1C8180
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/90709a16-7d81-3448-b2db-d60500c0407a.roa
Signing time:             Tue 12 May 2026 13:06:36 +0000
ROA not before:           Tue 12 May 2026 13:06:36 +0000
ROA not after:            Mon 10 Aug 2026 13:06:36 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:28e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:01:b4:b9:8f:8d:82:3d:1c:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:36 2026 GMT
            Not After : Aug 10 13:06:36 2026 GMT
        Subject: CN=138213f5-5bfe-44cc-bc3c-e8f7d3d4b1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:82:34:9d:12:b8:0a:c3:4f:0f:45:ca:27:9c:
                    42:e2:cd:5c:84:33:48:e1:66:92:f1:21:a9:45:23:
                    79:c0:dd:02:27:02:23:43:88:1a:8c:54:77:93:d7:
                    b5:08:7e:40:c0:f2:59:b6:b4:8b:74:67:2e:83:45:
                    43:46:75:fb:bb:3b:62:a9:14:b9:42:86:97:bb:bd:
                    66:55:79:c6:df:79:0c:28:8d:8e:63:06:44:80:9f:
                    da:0e:88:96:75:8a:82:ea:b7:46:a6:7a:9d:85:36:
                    56:ad:09:9d:fb:5a:a4:65:20:03:c8:29:64:f4:37:
                    75:4f:e4:1c:4b:e7:9b:99:c9:53:c3:11:0a:c8:b5:
                    6a:db:be:f0:96:41:3b:7b:66:cd:68:53:42:d1:85:
                    50:3c:74:ba:5f:1c:bf:8d:db:09:7d:68:eb:6d:7e:
                    cd:96:3d:d5:ef:1c:11:68:02:17:c9:b1:45:c4:a7:
                    be:39:4b:4b:ae:1b:0f:bd:56:37:e1:53:ad:68:6e:
                    c5:ff:82:f1:8a:17:ad:9b:b9:b6:68:6d:18:3a:ee:
                    f4:fc:e7:92:29:79:f2:fc:08:2b:ad:b5:d4:3d:fc:
                    c3:d2:d8:14:88:0a:e2:bd:b0:e0:95:41:2f:47:b7:
                    d2:cd:3b:5b:4c:0a:0a:f3:d5:2d:02:72:ee:69:b9:
                    08:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DC:E2:86:47:11:C4:38:AF:00:1C:16:AC:AA:D5:81:A8:88:8C:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/90709a16-7d81-3448-b2db-d60500c0407a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:28e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:3d:6d:6a:1f:03:0b:2c:3d:40:21:a5:10:05:e5:46:42:47:
         80:5d:f6:fa:4b:8e:15:e6:99:c2:8f:c2:ac:cc:00:12:f6:d1:
         d7:65:bb:55:dd:e1:94:52:a6:2a:c2:f3:93:49:48:4d:87:0c:
         fc:80:19:ff:96:1c:c1:b3:ec:eb:d4:80:a1:d7:3e:59:b9:c0:
         7e:f9:d7:63:8d:9f:d6:33:97:f8:22:df:22:76:32:df:a9:48:
         d8:32:35:da:3c:5b:2c:ed:00:f6:4a:3c:f8:da:7c:47:71:64:
         f7:4e:44:96:6b:bf:d0:59:d4:36:ed:f2:dc:1c:38:9b:69:24:
         da:10:2f:a1:5e:1a:e6:34:50:d4:e5:b1:de:58:43:a2:bb:5c:
         99:81:dc:e4:cd:00:9a:b0:aa:2b:0f:75:e7:2b:d9:b9:19:04:
         b3:86:93:3a:b9:d7:90:9e:1e:67:a4:33:ce:7f:a1:8d:95:e8:
         dd:ac:85:97:27:52:78:4d:85:24:f3:c2:5f:5c:90:a9:b2:d5:
         d8:d4:9d:db:cb:b3:2e:bc:a1:ae:0b:9a:93:20:5d:92:a5:66:
         f1:3b:4f:d6:73:fe:be:a7:11:41:fa:79:40:a3:e0:56:8a:2d:
         df:9b:ce:03:53:6f:a8:5e:70:e5:64:fd:14:f8:95:6a:bc:2b:
         f5:1e:a9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:10 2026 by rpki-client