Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/98509c72-331e-378b-a31e-9ee990908f65.roa
File:                     98509c72-331e-378b-a31e-9ee990908f65.roa (raw, json)
Hash identifier:          LQdcjnfwsCOBKiVC+t8a6naQDT2ikXhPRIHdLbTSt5U=
Subject key identifier:   E9:23:25:A8:38:5A:C3:60:09:4F:99:FE:46:26:F9:70:A3:8C:BD:D7
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E166F562DB9F23F4AD340
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/98509c72-331e-378b-a31e-9ee990908f65.roa
Signing time:             Tue 12 May 2026 13:06:46 +0000
ROA not before:           Tue 12 May 2026 13:06:46 +0000
ROA not after:            Mon 10 Aug 2026 13:06:46 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3ab::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:16:6f:56:2d:b9:f2:3f:4a:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:46 2026 GMT
            Not After : Aug 10 13:06:46 2026 GMT
        Subject: CN=9c71c673-0b05-4d3a-a8c6-7a75829b7753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d5:90:24:46:9c:42:a9:f5:a1:a5:49:55:7c:
                    5a:55:3e:24:6b:22:0e:78:2e:a1:df:0b:a3:33:48:
                    24:e9:54:fd:c4:5a:55:7f:80:c3:de:b6:9c:9d:14:
                    d1:5b:f5:a9:04:c9:e1:63:21:72:11:d2:be:50:2d:
                    3b:7c:65:96:d0:9a:72:00:54:80:a9:a5:f3:1b:7b:
                    f5:f4:d3:79:e2:c2:41:ef:ae:03:22:c6:b4:32:35:
                    a9:46:d3:8e:3d:9f:d5:95:f6:52:d8:0a:b7:58:50:
                    79:bf:6d:22:b1:4d:94:4f:82:b8:b2:28:0a:d1:d0:
                    6b:ef:3e:d3:ec:fd:9a:8a:e2:e7:f7:bc:9d:0b:ba:
                    6b:57:b9:c0:d6:c0:9f:92:cc:68:ed:0a:75:73:e2:
                    eb:bf:ca:cf:24:29:fc:d2:db:10:f9:6e:2a:cb:01:
                    30:6b:14:79:2d:5e:9f:8e:54:86:21:b0:68:63:50:
                    36:05:50:01:83:cb:93:eb:da:12:6f:80:83:18:9d:
                    30:d9:0b:94:88:81:aa:ae:53:f5:ae:44:09:e5:77:
                    89:b6:91:e2:6d:e3:ec:65:8c:dd:48:ae:8c:a1:b7:
                    c1:d6:ed:e3:f0:e8:3a:d2:8c:a1:14:cb:41:3c:17:
                    36:19:ee:7d:66:9b:93:c9:97:4a:73:2a:16:0b:64:
                    13:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:23:25:A8:38:5A:C3:60:09:4F:99:FE:46:26:F9:70:A3:8C:BD:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/98509c72-331e-378b-a31e-9ee990908f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3ab::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:e8:b7:b4:17:03:19:ce:7e:74:2a:87:18:e2:f5:34:3c:9d:
         c9:72:84:c6:2b:cf:48:05:74:42:cf:fd:8d:b2:d1:f3:73:04:
         39:9b:57:50:68:1d:67:ea:e6:dd:5e:ba:d2:4f:c8:b4:51:6b:
         ba:18:b2:fb:de:de:11:14:83:56:b2:84:7f:59:a9:8d:01:1c:
         08:55:3b:cc:2c:be:1d:1b:7a:fa:fe:b4:95:93:0d:b1:43:17:
         3b:e4:0a:60:99:97:ee:03:6f:ef:9e:c7:fb:b3:b0:af:dc:0f:
         e8:ff:f2:18:8a:af:82:78:d3:2d:71:cb:ab:9b:8c:29:35:13:
         d7:24:ee:3b:69:5a:ac:f3:79:0e:07:74:d3:5c:42:19:16:0e:
         47:a7:80:b4:4d:95:ab:d3:ee:b5:04:2a:55:2e:38:9d:82:48:
         6b:e1:56:64:67:35:c7:fc:0d:45:0f:ed:e7:c9:fb:62:0e:78:
         06:8f:b7:6b:f0:e3:7e:91:0b:d2:0f:4f:ac:d6:ec:44:3f:33:
         a6:3e:32:72:0d:4f:ae:f0:55:e3:d5:b9:e1:24:46:6f:ba:89:
         ee:53:0a:f9:fb:c3:56:97:a7:0f:66:9c:77:53:f3:34:78:a1:
         ac:47:03:ea:59:89:ec:57:7a:c9:b9:60:01:c8:d3:b3:c2:01:
         db:5d:bf:09
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLhZvVi258j9K00AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDY0NloXDTI2MDgxMDEzMDY0NlowLzEtMCsGA1UEAxMk
OWM3MWM2NzMtMGIwNS00ZDNhLWE4YzYtN2E3NTgyOWI3NzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9WQJEacQqn1oaVJVXxaVT4kayIOeC6h3wuj
M0gk6VT9xFpVf4DD3racnRTRW/WpBMnhYyFyEdK+UC07fGWW0JpyAFSAqaXzG3v1
9NN54sJB764DIsa0MjWpRtOOPZ/VlfZS2Aq3WFB5v20isU2UT4K4sigK0dBr7z7T
7P2aiuLn97ydC7prV7nA1sCfksxo7Qp1c+Lrv8rPJCn80tsQ+W4qywEwaxR5LV6f
jlSGIbBoY1A2BVABg8uT69oSb4CDGJ0w2QuUiIGqrlP1rkQJ5XeJtpHibePsZYzd
SK6MobfB1u3j8Og60oyhFMtBPBc2Ge59ZpuTyZdKcyoWC2QT2wIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFOkjJag4WsNgCU+Z/kYm+XCjjL3XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvOTg1MDljNzItMzMxZS0z
NzhiLWEzMWUtOWVlOTkwOTA4ZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
A6swVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAz+i3tBcDGc5+dCqHGOL1NDydyXKExivPSAV0Qs/9jbLR83ME
OZtXUGgdZ+rm3V660k/ItFFruhiy+97eERSDVrKEf1mpjQEcCFU7zCy+HRt6+v60
lZMNsUMXO+QKYJmX7gNv757H+7Owr9wP6P/yGIqvgnjTLXHLq5uMKTUT1yTuO2la
rPN5Dgd001xCGRYOR6eAtE2Vq9PutQQqVS44nYJIa+FWZGc1x/wNRQ/t58n7Yg54
Bo+3a/DjfpEL0g9PrNbsRD8zpj4ycg1PrvBV49W54SRGb7qJ7lMK+fvDVpenD2ac
d1PzNHihrEcD6lmJ7Fd6yblgAcjTs8IB212/CQ==
-----END CERTIFICATE-----
Generated at Wed May 13 10:39:48 2026 by rpki-client