Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/987638c1-2aa2-3611-9cf8-53d02c0913a2.roa
File:                     987638c1-2aa2-3611-9cf8-53d02c0913a2.roa (raw, json)
Hash identifier:          04va90Dx0f231uNOUQ7bVeJYmeOF0hr1GGBmv44+FGY=
Subject key identifier:   78:EA:29:A8:98:16:49:91:FD:24:9F:41:FA:00:CA:52:E7:B5:4B:B4
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E1B2AF4C030BE1C611D80
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/987638c1-2aa2-3611-9cf8-53d02c0913a2.roa
Signing time:             Tue 12 May 2026 13:06:48 +0000
ROA not before:           Tue 12 May 2026 13:06:48 +0000
ROA not after:            Mon 10 Aug 2026 13:06:48 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3e9::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:1b:2a:f4:c0:30:be:1c:61:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:48 2026 GMT
            Not After : Aug 10 13:06:48 2026 GMT
        Subject: CN=6b140fa3-e339-4296-a3ae-6f89be62f758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:53:b5:e7:e3:ec:76:df:e5:42:ff:1b:fb:09:
                    f5:9c:e7:35:0a:24:37:95:35:59:ff:6e:7a:dd:65:
                    fb:86:7e:38:e4:6d:4a:00:cc:32:bf:7e:59:56:23:
                    2a:88:48:76:c0:a0:3f:84:0c:2e:a0:bb:ef:d2:79:
                    70:92:91:e7:06:f6:fb:41:28:22:b7:eb:2c:ef:19:
                    88:66:d9:09:ec:51:2c:a5:25:46:23:0f:d2:a0:36:
                    94:d5:69:36:a7:6b:28:7f:ae:d5:fb:26:17:59:b5:
                    11:dd:d4:c1:68:57:05:bc:e1:01:dd:57:5f:58:25:
                    50:db:97:eb:c7:86:bd:6f:87:df:b8:f0:97:75:0c:
                    e4:48:05:b6:8e:16:6a:01:c5:7b:19:48:f6:e9:8a:
                    34:10:d6:be:a6:fb:af:56:82:3b:0a:a2:86:fc:0a:
                    0f:c4:48:89:17:ce:56:71:7d:f9:76:15:88:35:1b:
                    a4:ff:b2:4e:20:12:ce:22:7f:39:b9:4a:26:3e:fd:
                    da:cb:9f:6d:23:18:5a:0b:3b:f6:5b:8b:dd:94:3f:
                    bb:0a:7b:ee:c4:b3:fb:bd:a1:7f:4f:65:fe:fa:40:
                    46:8c:c8:63:ee:4e:07:cc:9d:df:1b:5e:d1:59:89:
                    a6:c0:40:ea:fa:24:cf:1f:fb:91:c0:97:19:51:05:
                    d1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EA:29:A8:98:16:49:91:FD:24:9F:41:FA:00:CA:52:E7:B5:4B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/987638c1-2aa2-3611-9cf8-53d02c0913a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3e9::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6f:58:6c:39:d5:95:69:2b:43:4e:94:19:f5:6d:d8:f1:32:
         8b:5b:c1:4c:fd:48:8f:d2:71:27:33:83:62:2e:da:21:49:71:
         6c:6a:1c:a6:2d:53:b5:2b:f9:eb:20:00:a6:65:9e:25:6c:b0:
         49:14:bc:8b:45:eb:0d:8b:bb:44:38:02:ec:24:56:83:62:2e:
         dc:40:37:46:70:8c:fa:7b:b0:70:e9:e8:a0:02:12:6f:ce:0f:
         34:92:f1:4f:10:51:32:28:fd:f2:e9:2a:63:e7:90:46:66:08:
         54:49:f0:64:32:2f:f7:ca:04:23:9a:f0:23:f5:04:46:f3:e4:
         97:5a:00:a5:bb:06:ec:ee:b3:25:97:a7:96:04:63:ef:78:b1:
         02:9d:34:93:4a:cd:e4:f6:2b:87:8a:db:0e:58:65:49:d0:85:
         0e:f6:c6:e2:b4:1b:be:28:96:b1:fc:f9:fb:ba:0b:bf:59:9c:
         4d:3e:07:3b:2e:d1:fa:c2:8c:a1:8a:04:94:a2:ce:2e:7b:99:
         39:ea:7c:73:61:fc:4d:95:71:88:14:85:0c:75:13:23:b5:fe:
         54:fc:7b:36:fe:4d:5d:7d:80:96:5e:43:d6:d8:1a:17:b1:27:
         06:c2:10:08:e4:b3:d7:6f:d7:98:81:25:1f:ef:65:1c:be:d4:
         05:c0:d9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:36:50 2026 by rpki-client