Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/936cfaf7-9e63-3743-b139-d7ac8c50d23b.roa
File:                     936cfaf7-9e63-3743-b139-d7ac8c50d23b.roa (raw, json)
Hash identifier:          duUUt48Q+tasJcFvPJw5FF7rnkFtqhZ4OdglLQ7D3ss=
Subject key identifier:   4F:1D:F3:F2:60:C9:0B:AB:0A:98:B7:38:75:82:93:AC:63:9B:92:F5
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DDDA7FC51F83A5C08C200
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/936cfaf7-9e63-3743-b139-d7ac8c50d23b.roa
Signing time:             Tue 12 May 2026 13:06:19 +0000
ROA not before:           Tue 12 May 2026 13:06:19 +0000
ROA not after:            Mon 10 Aug 2026 13:06:19 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:47::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:dd:a7:fc:51:f8:3a:5c:08:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:19 2026 GMT
            Not After : Aug 10 13:06:19 2026 GMT
        Subject: CN=3692723f-aa61-4a50-9861-2d4b6cbef977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ca:ed:99:5e:5a:5f:97:a6:df:29:3e:69:ea:
                    8a:69:73:fa:48:d0:c3:53:30:01:04:2d:94:e4:dc:
                    7a:97:f5:7c:cd:a2:02:c3:5e:05:9b:30:56:16:45:
                    c9:78:58:3d:f7:03:a0:93:ca:53:54:22:0e:43:50:
                    b5:06:14:43:f4:db:98:54:de:33:cd:2b:2e:6c:5f:
                    86:e6:c0:98:ff:10:58:f4:c9:07:58:0f:11:8e:9f:
                    2a:16:10:20:60:71:c5:5a:ed:33:98:29:d4:d7:4d:
                    8d:7c:eb:16:ac:47:a8:e2:c4:8e:81:9e:96:9c:fc:
                    cf:87:b4:1c:a7:04:3a:45:b2:73:2f:99:88:77:60:
                    6d:f3:3c:94:ce:94:55:83:62:20:2c:ae:20:62:5d:
                    52:e1:f4:ba:59:b5:ff:af:1d:42:0e:31:d9:4f:cf:
                    a9:d0:87:1a:e5:1f:0b:f4:c0:70:e0:90:12:58:66:
                    63:1d:65:2d:42:8d:53:39:05:4b:85:37:1d:61:8f:
                    3d:d4:80:c6:63:da:a7:c3:c6:35:38:87:1b:11:6d:
                    5e:a3:d8:57:98:3c:a8:3d:54:91:c1:c7:91:51:d0:
                    a3:34:a5:7e:a3:a1:ce:6d:51:43:a1:ac:0a:3c:50:
                    cf:7c:e7:da:5f:7e:a4:90:bc:ec:9c:c6:87:da:54:
                    3e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1D:F3:F2:60:C9:0B:AB:0A:98:B7:38:75:82:93:AC:63:9B:92:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/936cfaf7-9e63-3743-b139-d7ac8c50d23b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:47::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:6b:d0:c9:44:e9:c8:44:02:b0:e3:85:ba:30:a1:76:71:f9:
         4f:f6:60:f0:33:a6:aa:a2:7b:1c:a2:ca:bf:b1:4e:89:5f:08:
         11:b8:54:81:55:ff:63:fc:85:09:19:39:0c:82:1f:ea:d2:ba:
         03:d6:45:1f:90:ae:1c:09:68:6c:71:17:35:fb:d7:ce:32:c2:
         76:7d:8c:f0:5a:80:ca:46:bf:2f:51:04:56:88:cf:e3:ab:8d:
         8e:68:01:eb:be:a4:3c:8a:f7:c1:47:34:28:d6:4c:cc:81:7f:
         ad:4c:1d:56:01:91:a4:e1:16:8d:c2:5c:3e:10:0f:c5:eb:a8:
         95:ec:fe:e4:e3:09:a0:c4:90:85:64:02:92:57:ec:44:0a:34:
         42:ad:d3:c6:02:53:30:de:96:3e:77:77:79:68:c1:c7:a3:82:
         4d:99:5c:6c:4f:17:7c:4a:ab:59:63:80:34:02:a7:cd:49:79:
         bb:7c:21:c7:4c:4a:34:85:f3:ba:b6:d6:ec:bf:37:15:8e:46:
         91:84:63:c0:42:05:b9:88:ed:f0:36:1c:ed:82:c7:db:3e:22:
         83:e3:bf:9a:4b:eb:1e:e6:1f:ab:ab:34:c9:86:af:bc:d9:26:
         4f:e7:b1:06:52:d4:0e:b9:85:12:bb:75:75:fa:57:bd:32:f9:
         80:d6:a6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:54:25 2026 by rpki-client