Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/936e30f7-2585-3f20-9ba2-7f36e40db2c6.roa
File:                     936e30f7-2585-3f20-9ba2-7f36e40db2c6.roa (raw, json)
Hash identifier:          PWggyuqBIc8BZqBkXNKhpuSlaeSn78sxZoV7pUZWcZs=
Subject key identifier:   BE:D3:58:1B:3B:CD:7C:FB:89:F5:30:E6:E5:94:10:C5:B1:7A:D5:C1
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DF37570DA232AF9144270
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/936e30f7-2585-3f20-9ba2-7f36e40db2c6.roa
Signing time:             Tue 12 May 2026 13:06:29 +0000
ROA not before:           Tue 12 May 2026 13:06:29 +0000
ROA not after:            Mon 10 Aug 2026 13:06:29 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1b7::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:f3:75:70:da:23:2a:f9:14:42:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:29 2026 GMT
            Not After : Aug 10 13:06:29 2026 GMT
        Subject: CN=0864264e-5f09-4b5d-bd60-142d80f974b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2e:71:32:62:56:f2:7b:45:be:0d:06:08:cb:
                    5f:46:73:94:67:75:55:1b:6b:df:a6:14:bc:e2:a5:
                    ab:6a:59:e1:45:d8:0d:e5:34:8d:e0:eb:bb:f3:2d:
                    dc:2e:42:fd:c4:e8:cd:ea:84:30:b7:cc:8f:81:25:
                    d2:0a:5d:52:26:b3:1e:0d:03:da:09:54:e8:a2:fc:
                    73:49:74:0e:2a:ae:f7:69:4b:3a:28:7f:41:8c:24:
                    a3:df:ec:f2:ca:28:fc:30:46:69:49:26:07:92:9d:
                    40:78:fe:d4:b2:e8:2b:be:90:f5:b1:c0:b8:66:d1:
                    83:e1:80:7c:b1:cc:3e:a0:27:2c:dc:1f:24:0b:32:
                    7f:da:b2:49:f7:fb:5a:0e:7d:e0:8c:96:fb:81:b3:
                    32:66:ab:31:e6:f7:8c:51:a9:6d:6d:c9:7f:ad:6a:
                    28:b9:cb:41:78:25:12:6c:49:01:7a:7f:ad:08:d6:
                    91:1f:d7:a2:0d:54:25:b8:7f:47:10:ff:35:f6:55:
                    0f:96:8c:aa:5e:99:c7:86:45:fb:42:e3:3e:67:a6:
                    94:3f:e1:5a:0c:89:39:8e:df:d3:23:88:aa:ac:57:
                    33:0b:42:af:cb:16:f2:af:2f:16:50:c9:65:de:a0:
                    f3:47:06:06:2b:c3:f8:55:c9:f4:fa:c8:20:39:4d:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D3:58:1B:3B:CD:7C:FB:89:F5:30:E6:E5:94:10:C5:B1:7A:D5:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/936e30f7-2585-3f20-9ba2-7f36e40db2c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1b7::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:7c:b6:44:14:c2:91:a9:5d:b5:eb:79:66:bf:59:0d:e8:3d:
         00:5e:55:a6:36:0f:cf:41:ed:9f:04:73:fd:19:a1:5c:02:04:
         f2:6f:08:88:26:94:7a:2f:fb:72:1e:2b:4f:52:8b:39:12:7a:
         27:f4:93:1f:09:25:29:c6:be:23:22:e9:3f:d3:61:1d:21:b2:
         66:b9:e3:87:bf:5f:30:0b:57:d3:c9:c7:93:75:95:4f:73:e0:
         c9:5f:d5:48:1d:57:5e:c9:52:13:15:a5:4d:4b:f6:05:c0:eb:
         7f:51:18:94:be:b7:3c:7e:8a:60:c0:aa:57:66:2c:e7:20:96:
         c7:36:1c:7a:a2:92:b6:b2:55:40:c9:0a:cb:16:47:03:76:fb:
         c6:dd:40:7e:4f:f0:b7:1a:f2:2b:88:0e:07:96:e4:4e:93:ea:
         75:47:24:41:65:16:83:80:16:4e:cd:0b:08:00:5c:7a:7a:f7:
         05:77:b8:cc:ac:b2:6c:eb:4b:05:45:a5:39:9f:bf:36:d4:d7:
         35:b7:73:a5:3b:7d:aa:00:4e:8e:fc:51:47:c2:52:49:8d:f9:
         02:8c:6d:22:e5:43:c5:ae:cf:cb:1a:9a:83:49:91:03:44:be:
         26:44:fd:2a:16:16:53:91:93:d6:5e:c8:84:32:2e:33:24:dd:
         0c:2d:c2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:17:56 2026 by rpki-client