Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/9f3f47c2-360b-3686-bc49-341b9a578a86.roa
File:                     9f3f47c2-360b-3686-bc49-341b9a578a86.roa (raw, json)
Hash identifier:          awynIs+bIysVVlau8wwuNcB8zxn2wtoXRb+pPFL/6+g=
Subject key identifier:   1B:4C:09:9A:95:36:C6:BC:E9:78:FA:89:15:6B:81:F0:49:C9:05:0C
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DDB7D6AD821663EB80340
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/9f3f47c2-360b-3686-bc49-341b9a578a86.roa
Signing time:             Tue 12 May 2026 13:06:18 +0000
ROA not before:           Tue 12 May 2026 13:06:18 +0000
ROA not after:            Mon 10 Aug 2026 13:06:18 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1f::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:db:7d:6a:d8:21:66:3e:b8:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:18 2026 GMT
            Not After : Aug 10 13:06:18 2026 GMT
        Subject: CN=8c4c28d4-faa0-44b7-9d07-743d12a6bba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b5:9f:fc:83:e0:02:cf:bf:96:dc:39:79:e8:
                    da:8c:f1:62:23:e8:c1:2d:29:d1:11:1f:e9:1b:64:
                    4f:8b:69:11:84:9c:55:b0:6a:ff:cf:60:6f:94:37:
                    b2:f6:0d:85:07:d3:24:1a:05:a3:90:fc:24:1d:b8:
                    e5:d7:74:20:19:a8:4c:0b:cc:a4:1f:26:2a:32:ea:
                    89:6a:c3:98:6c:8b:3a:fb:aa:22:d9:27:37:10:c6:
                    aa:85:d1:03:cb:e3:45:54:e1:2b:6d:db:55:2a:6f:
                    66:9d:96:87:7c:9b:cb:2a:78:db:00:35:1e:a6:a1:
                    3b:e1:e3:e8:5d:6b:7b:c2:b3:17:aa:6d:15:db:44:
                    f4:4b:c4:92:4b:68:ff:68:74:8b:09:32:e3:dc:fc:
                    68:c8:23:24:24:b7:74:5d:6f:cd:d0:31:5e:40:d6:
                    66:41:70:30:ff:3e:ac:4c:fd:fc:89:ae:a1:c2:4d:
                    67:43:1c:c5:43:4c:24:0c:22:e8:6a:aa:57:62:06:
                    8b:3b:6f:74:26:c7:f8:5c:72:5a:f1:a6:2a:a5:57:
                    44:c9:78:69:0b:7c:8c:57:db:60:68:c5:d4:39:5c:
                    e0:ab:64:89:0c:56:5f:ab:7f:cb:ff:de:f8:6e:97:
                    00:26:30:bf:3e:0d:7f:83:85:6e:3e:7b:69:9e:dd:
                    18:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4C:09:9A:95:36:C6:BC:E9:78:FA:89:15:6B:81:F0:49:C9:05:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/9f3f47c2-360b-3686-bc49-341b9a578a86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1f::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:c8:9f:d9:13:fc:7e:ee:d1:aa:5b:7c:fc:6b:74:48:24:4e:
         fb:39:d5:d7:bc:51:5a:32:43:d6:b5:ca:11:bd:7f:59:5b:cc:
         e2:e2:21:f9:21:21:5b:f1:10:fe:b8:e1:3c:b2:ad:7c:08:d9:
         1b:b2:bf:e7:24:6e:f6:8e:b5:2a:04:3e:c0:db:ae:a5:74:16:
         dd:98:d7:3e:00:f4:df:92:7e:dc:ce:43:c8:19:e8:c2:f2:a3:
         7c:69:51:d4:ea:fe:18:e1:04:0d:64:75:fa:4a:97:dc:2f:80:
         25:fe:74:0e:05:64:fd:ab:ea:34:4e:56:43:b1:bc:bb:b6:2c:
         bc:6a:86:b6:3b:a5:b1:e1:0c:5c:63:3a:fa:9a:37:e5:11:17:
         51:54:8c:a6:ce:e9:4c:38:9a:11:8f:fb:5e:1c:3a:83:72:8e:
         2a:38:1e:3a:7d:6c:98:e4:b7:c0:bf:13:13:e6:05:a1:4e:06:
         36:4f:aa:c8:5a:52:87:de:31:6d:48:9a:df:92:03:77:94:41:
         14:52:d1:b9:5e:95:14:70:9b:56:94:37:2b:c2:b6:61:36:61:
         a1:b8:09:3f:50:bf:27:d9:70:0f:8d:30:34:87:2a:3f:ec:d6:
         76:4a:c6:65:ac:75:e3:b6:59:46:70:fc:ec:5c:4e:b6:34:8c:
         a6:0e:8e:ab
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLdt9atghZj64A0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYxOFoXDTI2MDgxMDEzMDYxOFowLzEtMCsGA1UEAxMk
OGM0YzI4ZDQtZmFhMC00NGI3LTlkMDctNzQzZDEyYTZiYmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbWf/IPgAs+/ltw5eejajPFiI+jBLSnRER/p
G2RPi2kRhJxVsGr/z2BvlDey9g2FB9MkGgWjkPwkHbjl13QgGahMC8ykHyYqMuqJ
asOYbIs6+6oi2Sc3EMaqhdEDy+NFVOErbdtVKm9mnZaHfJvLKnjbADUepqE74ePo
XWt7wrMXqm0V20T0S8SSS2j/aHSLCTLj3PxoyCMkJLd0XW/N0DFeQNZmQXAw/z6s
TP38ia6hwk1nQxzFQ0wkDCLoaqpXYgaLO290Jsf4XHJa8aYqpVdEyXhpC3yMV9tg
aMXUOVzgq2SJDFZfq3/L/974bpcAJjC/Pg1/g4VuPntpnt0YgwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFBtMCZqVNsa86Xj6iRVrgfBJyQUMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvOWYzZjQ3YzItMzYwYi0z
Njg2LWJjNDktMzQxYjlhNTc4YTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AB8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAeMif2RP8fu7Rqlt8/Gt0SCRO+znV17xRWjJD1rXKEb1/WVvM
4uIh+SEhW/EQ/rjhPLKtfAjZG7K/5yRu9o61KgQ+wNuupXQW3ZjXPgD035J+3M5D
yBnowvKjfGlR1Or+GOEEDWR1+kqX3C+AJf50DgVk/avqNE5WQ7G8u7YsvGqGtjul
seEMXGM6+po35REXUVSMps7pTDiaEY/7Xhw6g3KOKjgeOn1smOS3wL8TE+YFoU4G
Nk+qyFpSh94xbUia35IDd5RBFFLRuV6VFHCbVpQ3K8K2YTZhobgJP1C/J9lwD40w
NIcqP+zWdkrGZax147ZZRnD87FxOtjSMpg6Oqw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:14:00 2026 by rpki-client