Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/9b1d6ce9-a8ee-31f4-ab75-21f119a7dcde.roa
File:                     9b1d6ce9-a8ee-31f4-ab75-21f119a7dcde.roa (raw, json)
Hash identifier:          UPTBeUX2kSS1vAxpYyJej1plCQ2SAMczAxE5C8tM+EE=
Subject key identifier:   BF:52:79:89:7A:05:32:8C:9A:68:30:3A:D9:41:8F:EF:12:71:56:72
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DEA0C5D3F1CEDEFCCFEC0
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/9b1d6ce9-a8ee-31f4-ab75-21f119a7dcde.roa
Signing time:             Tue 12 May 2026 13:06:25 +0000
ROA not before:           Tue 12 May 2026 13:06:25 +0000
ROA not after:            Mon 10 Aug 2026 13:06:25 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:120::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:ea:0c:5d:3f:1c:ed:ef:cc:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:25 2026 GMT
            Not After : Aug 10 13:06:25 2026 GMT
        Subject: CN=34a7b080-f446-4fa1-b3da-6259b75ef850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:95:3a:1e:57:92:ae:b3:46:17:07:2d:5a:3c:
                    61:b8:dc:df:64:71:a0:d3:09:19:97:36:78:1e:d8:
                    19:01:a5:98:e2:e5:bc:5c:9c:7f:dc:1c:a3:0f:e1:
                    5c:3b:bf:06:b8:23:1e:7b:05:f7:df:ab:51:54:e5:
                    40:27:34:be:d2:f4:ec:82:2c:1a:39:c6:4e:b3:a9:
                    35:97:26:29:0e:ba:b0:c9:e1:8f:58:6e:9a:b9:f9:
                    01:1d:92:2d:44:44:a4:5d:af:2c:f2:b5:ce:a2:98:
                    2c:b2:60:45:61:c2:a9:7e:27:5d:fb:46:65:2c:e7:
                    39:87:ed:39:de:cb:4c:ab:5b:7c:09:54:54:63:53:
                    ae:68:80:c1:94:a0:2a:c8:1d:93:c6:9b:31:ee:57:
                    08:ad:14:d7:77:b7:2b:dc:0f:d9:d7:78:f5:3f:0b:
                    49:e9:fd:54:c9:75:cd:11:51:41:c4:20:3b:c0:7c:
                    5c:6c:5d:3c:f0:9f:80:ea:57:c0:ca:00:b5:17:6e:
                    01:f9:ce:f1:56:6b:2f:23:31:2e:4d:ce:98:db:67:
                    8a:66:bd:ae:35:78:35:49:09:9c:4e:c5:6e:02:96:
                    c2:5b:76:0d:e0:ea:05:95:9c:04:9f:56:d6:2f:f4:
                    7f:03:9d:aa:79:1d:f1:51:a0:21:51:2b:cd:aa:8f:
                    9f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:52:79:89:7A:05:32:8C:9A:68:30:3A:D9:41:8F:EF:12:71:56:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/9b1d6ce9-a8ee-31f4-ab75-21f119a7dcde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:120::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:62:00:7d:17:8b:d7:7a:31:b2:1c:ab:05:53:9e:6c:ae:12:
         d4:e9:fc:8f:5d:7f:a9:fc:3f:49:6c:23:94:a5:de:3c:c0:ce:
         34:eb:da:50:ac:ac:39:47:09:2e:09:ca:67:25:e0:52:f9:be:
         38:9b:b1:7a:22:ad:a3:0d:86:83:f0:c8:5e:61:e3:8f:c1:96:
         7a:ae:9d:1d:16:4f:d8:86:1a:cd:8d:a8:ec:9f:f9:88:d6:7f:
         ab:1b:58:ee:82:0c:28:da:e5:39:40:fd:70:01:6d:29:52:30:
         2a:22:8a:eb:e0:a0:43:6b:db:03:5b:10:cc:37:c1:10:79:b9:
         05:da:ed:00:0f:b8:07:ea:a4:ff:99:6e:17:4d:5e:62:46:5f:
         4d:86:27:16:c8:19:f1:cc:7c:04:9b:5f:e3:83:13:ae:1d:c8:
         cf:f4:d9:c7:b7:f6:3c:ee:8e:48:fd:3c:1e:76:84:c8:7b:65:
         2d:ec:5a:a5:84:3c:35:31:fe:92:58:bc:5e:fc:88:2e:2f:d6:
         02:fc:14:01:8b:3d:82:f4:b0:53:83:da:0e:f9:36:83:02:1e:
         0a:55:82:9b:47:39:af:66:37:94:b7:4c:56:47:4e:c5:de:4e:
         af:a5:6a:4b:30:07:a7:54:63:25:5d:e7:bd:30:89:bc:37:db:
         bc:f2:a0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:28 2026 by rpki-client