Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/a01f6f78-d95b-35dd-ad16-a0e1456951e3.roa
File:                     a01f6f78-d95b-35dd-ad16-a0e1456951e3.roa (raw, json)
Hash identifier:          sZrPgj5klnYCztOM7HrdUnMOZTJRqfZqnr4mIbeEF7I=
Subject key identifier:   58:B8:12:13:A9:81:E0:82:91:42:8B:17:0D:AE:B1:DD:1C:EA:F8:2B
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DFBC05535572599B46EC0
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/a01f6f78-d95b-35dd-ad16-a0e1456951e3.roa
Signing time:             Tue 12 May 2026 13:06:33 +0000
ROA not before:           Tue 12 May 2026 13:06:33 +0000
ROA not after:            Mon 10 Aug 2026 13:06:33 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:237::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:fb:c0:55:35:57:25:99:b4:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:33 2026 GMT
            Not After : Aug 10 13:06:33 2026 GMT
        Subject: CN=6eb2725b-37af-4be3-9932-49d67888ec3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:55:ca:23:1d:ba:f1:b0:7e:2e:fa:f2:e5:4e:
                    8e:a3:f9:9a:5c:ce:57:99:06:b9:c8:5a:c9:dc:02:
                    d0:2c:86:f0:76:00:9e:23:7e:8d:04:c0:31:d0:a4:
                    48:67:02:c7:ac:a1:61:97:22:98:cf:ef:fa:a3:83:
                    5e:5c:cc:4c:dd:08:c4:b6:04:21:cc:13:35:00:f4:
                    29:76:80:76:80:9c:48:a9:d3:2e:04:c8:f3:44:40:
                    c2:53:1d:32:bb:d2:f6:88:92:e4:2c:f3:cf:c3:20:
                    3b:76:1f:5a:8f:04:b1:79:fb:04:f2:05:3c:ae:00:
                    48:ba:79:2b:58:5a:81:84:2f:3d:ae:6c:92:a9:f2:
                    a2:ac:5d:53:8f:e0:16:a2:71:a6:3a:4a:7b:86:38:
                    00:d2:f5:4d:d4:69:14:45:2b:a6:d3:b5:f3:50:21:
                    f4:5d:e3:ac:62:f2:02:14:d0:7c:49:35:af:83:6e:
                    3f:8f:77:88:31:3f:40:1c:8d:ba:9d:1b:4b:4b:a6:
                    2d:be:d3:b4:1f:47:24:44:58:be:08:5c:07:ac:38:
                    c7:a8:0c:d5:0c:1f:0a:8b:d1:2c:77:c3:0b:4d:f8:
                    a3:66:59:63:20:97:7a:b2:03:24:bf:49:fc:c2:d1:
                    97:19:46:60:14:00:7f:8b:7f:7f:17:96:6e:d4:24:
                    64:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B8:12:13:A9:81:E0:82:91:42:8B:17:0D:AE:B1:DD:1C:EA:F8:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/a01f6f78-d95b-35dd-ad16-a0e1456951e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:237::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:42:22:76:77:4a:a2:65:bc:9d:b0:8f:18:c9:6f:42:87:
         36:01:55:19:6d:d7:d1:99:46:51:20:ac:40:4e:73:28:81:b5:
         1d:3b:cb:ea:93:a0:f4:bc:52:82:a3:b2:1b:28:33:2f:a5:cb:
         eb:1b:46:f4:6f:1d:67:af:44:98:87:df:65:d8:28:7f:54:90:
         5f:d1:64:4d:7e:64:41:14:f1:59:01:e0:09:bd:d4:4b:15:96:
         42:fc:1e:8f:38:80:c1:32:73:38:db:d4:2a:a1:68:b3:45:cd:
         ae:2c:8e:a2:97:11:71:77:05:1c:2b:41:8e:b1:fe:57:cd:2f:
         f4:32:70:e9:d4:2c:7b:ac:6b:bf:a2:16:76:8c:bf:f0:33:be:
         d3:b2:21:ef:de:35:a4:c9:78:3b:65:58:ba:ae:5b:ee:e0:2d:
         48:d1:9a:4e:0c:91:30:72:cd:be:26:55:bd:00:8c:39:73:01:
         8e:99:42:40:4c:0b:de:d3:43:83:48:17:27:d2:c1:05:57:81:
         13:a4:42:f2:0a:ac:b6:cd:a9:77:cb:02:61:9a:6c:bf:e0:19:
         92:31:9c:0f:10:7c:7e:be:ea:dd:b2:ca:63:3e:66:85:31:3d:
         bb:8d:47:a3:59:c2:c9:b1:df:07:0c:0c:c0:e9:b6:95:d7:80:
         d6:ff:7f:55
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLfvAVTVXJZm0bsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYzM1oXDTI2MDgxMDEzMDYzM1owLzEtMCsGA1UEAxMk
NmViMjcyNWItMzdhZi00YmUzLTk5MzItNDlkNjc4ODhlYzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVXKIx268bB+Lvry5U6Oo/maXM5XmQa5yFrJ
3ALQLIbwdgCeI36NBMAx0KRIZwLHrKFhlyKYz+/6o4NeXMxM3QjEtgQhzBM1APQp
doB2gJxIqdMuBMjzREDCUx0yu9L2iJLkLPPPwyA7dh9ajwSxefsE8gU8rgBIunkr
WFqBhC89rmySqfKirF1Tj+AWonGmOkp7hjgA0vVN1GkURSum07XzUCH0XeOsYvIC
FNB8STWvg24/j3eIMT9AHI26nRtLS6YtvtO0H0ckRFi+CFwHrDjHqAzVDB8Ki9Es
d8MLTfijZlljIJd6sgMkv0n8wtGXGUZgFAB/i39/F5Zu1CRkuwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFFi4EhOpgeCCkUKLFw2usd0c6vgrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvYTAxZjZmNzgtZDk1Yi0z
NWRkLWFkMTYtYTBlMTQ1Njk1MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AjcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAYNJCInZ3SqJlvJ2wjxjJb0KHNgFVGW3X0ZlGUSCsQE5zKIG1
HTvL6pOg9LxSgqOyGygzL6XL6xtG9G8dZ69EmIffZdgof1SQX9FkTX5kQRTxWQHg
Cb3USxWWQvwejziAwTJzONvUKqFos0XNriyOopcRcXcFHCtBjrH+V80v9DJw6dQs
e6xrv6IWdoy/8DO+07Ih7941pMl4O2VYuq5b7uAtSNGaTgyRMHLNviZVvQCMOXMB
jplCQEwL3tNDg0gXJ9LBBVeBE6RC8gqsts2pd8sCYZpsv+AZkjGcDxB8fr7q3bLK
Yz5mhTE9u41Ho1nCybHfBwwMwOm2ldeA1v9/VQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:06:25 2026 by rpki-client