Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/9a897131-aaca-3f13-ad02-8e4175931b11.roa
File:                     9a897131-aaca-3f13-ad02-8e4175931b11.roa (raw, json)
Hash identifier:          D76K4rmvaclziFm67ZIq29GGBgxbbTXhh/In8FaUUbg=
Subject key identifier:   F2:1C:63:52:18:BF:5B:73:CC:1E:4B:07:86:A6:F5:C2:95:63:AD:97
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DFC45ADAD851755F5D1C0
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/9a897131-aaca-3f13-ad02-8e4175931b11.roa
Signing time:             Tue 12 May 2026 13:06:33 +0000
ROA not before:           Tue 12 May 2026 13:06:33 +0000
ROA not after:            Mon 10 Aug 2026 13:06:33 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:23f::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:fc:45:ad:ad:85:17:55:f5:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:33 2026 GMT
            Not After : Aug 10 13:06:33 2026 GMT
        Subject: CN=182d06ee-08e2-43ba-aab4-0853d1e625c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:18:a7:74:1a:7a:09:31:3e:08:70:99:ad:
                    aa:0e:62:24:31:7c:b2:a0:f1:ba:34:4a:44:47:eb:
                    ce:23:15:0d:9d:01:0a:3d:bb:7b:7a:be:1f:e9:03:
                    4b:19:1a:50:98:37:13:24:c7:bf:ee:a4:3b:b1:a6:
                    e4:42:62:30:56:00:f7:a0:79:44:7d:06:81:11:f7:
                    53:7d:29:ec:7d:7c:ea:5c:15:7a:34:27:21:a7:f2:
                    93:5c:84:a3:61:1e:1f:ce:29:26:13:78:7b:88:3f:
                    c9:59:ff:13:48:01:ca:bc:d5:f1:d4:17:72:46:0d:
                    5c:74:fc:96:b2:9f:05:03:aa:a0:36:b8:b0:75:aa:
                    d5:c1:7b:1e:bd:d3:0d:a4:a6:ae:48:56:c3:c9:2a:
                    f9:59:0e:3d:aa:1d:8f:2d:4a:35:67:6d:0e:7b:ef:
                    41:e9:e7:31:7c:39:11:11:f8:23:df:dd:dc:35:8a:
                    f2:05:32:ea:a1:ce:4c:80:48:09:15:d9:9c:83:23:
                    d8:48:26:8e:31:47:ee:86:37:d1:f5:f4:1e:ae:19:
                    7c:af:3a:ff:26:5b:cb:5d:5d:fa:0b:35:4b:00:97:
                    30:e3:75:73:46:04:5d:e8:e3:14:c5:c6:db:97:77:
                    cd:07:8b:30:dd:37:51:3e:05:2d:35:b2:85:05:58:
                    34:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1C:63:52:18:BF:5B:73:CC:1E:4B:07:86:A6:F5:C2:95:63:AD:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/9a897131-aaca-3f13-ad02-8e4175931b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:23f::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:07:40:45:1b:c3:30:63:27:db:88:5e:e0:71:bb:a3:22:41:
         2f:fe:86:c8:bb:75:6e:1c:00:8b:52:fa:37:4c:2a:6f:7b:9f:
         9d:78:a8:ee:3d:16:75:4d:63:df:dc:c5:5a:07:8d:46:6d:8f:
         da:13:23:8e:93:3a:0d:e6:4a:55:a7:ee:7d:a9:d1:88:b3:a5:
         c7:59:33:36:bf:ff:00:61:ff:9a:b1:56:84:53:37:77:f1:7c:
         f4:68:dd:f6:ab:91:77:b7:bb:78:d0:ac:bd:3e:72:95:b5:52:
         18:11:41:18:d1:fe:b2:67:f7:ff:5a:f0:6e:5f:40:81:85:61:
         60:90:7b:02:85:70:f0:15:e3:09:f4:79:ca:68:c6:cd:24:fa:
         20:e4:fd:ee:f4:57:e8:77:99:34:a7:4e:42:13:1b:50:17:0f:
         fa:d1:05:d2:55:79:89:c0:32:47:0b:87:53:ef:91:fe:9c:a7:
         e4:28:ab:d4:30:f2:9b:95:0a:e5:28:37:ff:21:2b:94:4c:cc:
         94:88:e9:d4:90:68:9d:b8:70:5a:db:05:c5:d0:60:89:90:2b:
         b4:55:da:ea:1d:e3:8a:62:68:63:3d:43:ba:78:81:bd:07:90:
         9d:78:ec:5b:3d:25:33:ef:00:fd:dd:06:0e:13:05:7b:07:c4:
         97:b3:f6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:06:14 2026 by rpki-client