Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/938daf71-5f10-30bb-b35d-98ff9e2cfb51.roa
File:                     938daf71-5f10-30bb-b35d-98ff9e2cfb51.roa (raw, json)
Hash identifier:          x5V/PBWMrNTL7AQZp8jAZgNTJeahWt+p9lu15qe52oM=
Subject key identifier:   85:E5:C4:7B:7A:C9:77:38:AE:A9:E9:CD:C0:F3:24:5D:42:6B:94:86
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DDCCFAB30382B0D22FBF0
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/938daf71-5f10-30bb-b35d-98ff9e2cfb51.roa
Signing time:             Tue 12 May 2026 13:06:19 +0000
ROA not before:           Tue 12 May 2026 13:06:19 +0000
ROA not after:            Mon 10 Aug 2026 13:06:19 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:38::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:dc:cf:ab:30:38:2b:0d:22:fb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:19 2026 GMT
            Not After : Aug 10 13:06:19 2026 GMT
        Subject: CN=4f1a3582-c5f6-45f4-bf6d-fc2d90314ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c9:43:00:5a:e2:85:ca:be:21:6b:37:0f:cb:
                    12:c4:dc:70:93:74:4e:bf:36:ff:e5:99:ae:34:ad:
                    92:d4:b3:72:21:a3:e3:98:0e:51:15:91:99:da:57:
                    bf:6a:a2:7f:7e:54:97:21:49:ec:64:9c:13:ba:24:
                    b6:0c:4c:60:a3:20:49:d6:e8:a1:b5:16:05:9c:bf:
                    e5:df:30:b8:bd:4e:89:ac:0d:ec:8d:6e:01:a5:2b:
                    22:66:1d:81:29:ce:1c:a0:c5:db:cd:0d:f6:3f:1c:
                    8d:f0:98:a9:d8:0f:c2:81:31:22:d1:fa:92:c0:23:
                    59:0b:9a:9e:90:c4:87:ef:b4:f1:66:8d:c3:e8:07:
                    c7:82:e7:74:05:1b:4d:c7:34:a0:9b:25:56:ac:e7:
                    9c:47:77:b2:db:07:5e:2d:35:c0:40:d8:70:ec:ea:
                    15:4a:e4:84:e9:35:0c:e3:af:34:36:4b:85:d0:27:
                    0e:6a:74:cf:c9:a4:c9:1e:ec:fa:79:25:69:16:16:
                    66:d2:8c:3d:21:19:ee:b5:d1:2c:ee:ca:f3:2f:53:
                    75:69:54:45:ee:0b:f6:10:4b:d4:6c:9a:1d:71:5d:
                    d6:86:f9:73:f5:07:a5:b5:eb:bb:a0:49:2b:52:e3:
                    6f:26:86:83:d8:f8:f7:84:e9:74:20:25:f4:f3:be:
                    f4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E5:C4:7B:7A:C9:77:38:AE:A9:E9:CD:C0:F3:24:5D:42:6B:94:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/938daf71-5f10-30bb-b35d-98ff9e2cfb51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:38::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:d9:4f:50:21:81:0d:df:da:b6:59:90:90:da:c9:f1:00:54:
         84:4a:9d:c7:c1:48:f9:99:9b:e0:30:e2:29:f3:88:d9:5f:98:
         03:9b:87:55:f5:e3:77:8e:91:26:da:13:e3:06:2b:12:ec:71:
         cc:5c:f4:0a:a0:92:d3:29:1c:03:22:cc:5b:df:87:56:0c:41:
         7b:89:7d:58:6a:66:ce:35:01:3a:1a:8e:f5:a7:e1:9e:24:7c:
         a2:e7:9a:46:47:ac:99:da:15:18:c1:76:bb:e8:90:df:7a:8b:
         19:39:df:6c:ec:41:57:ea:72:c6:e7:5a:ef:8b:41:93:31:f2:
         17:d9:14:b0:18:19:90:8a:87:2d:38:3e:3a:12:0b:5d:be:b2:
         06:fe:90:ba:34:87:db:de:ad:84:eb:d1:55:6b:0c:b2:11:6b:
         9c:22:1d:b1:d4:09:47:c2:2f:de:e9:48:8b:c1:7d:69:98:34:
         65:6e:b5:d1:9b:73:13:79:fd:5b:a6:2e:0e:b6:d6:d5:80:ff:
         0f:fd:7f:de:a5:58:5a:5c:44:fd:ba:e6:4f:b6:dc:b7:28:62:
         4c:63:20:c1:5a:44:07:a1:89:14:ba:08:1a:31:fd:18:55:01:
         e3:7d:d9:93:ce:13:e1:f7:bd:a3:a6:52:35:3d:bc:16:d1:37:
         9d:fc:c0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:23 2026 by rpki-client