Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/a0538747-06f8-3398-b9ae-3207fcea150f.roa
File:                     a0538747-06f8-3398-b9ae-3207fcea150f.roa (raw, json)
Hash identifier:          216bWNFOcBt/FW2Em6mC6uvhsDL8LF1CDaT0Jli+KMs=
Subject key identifier:   51:09:16:2D:52:5C:71:FB:15:02:0D:01:2D:2E:2B:54:21:0B:22:D9
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E0FF1487BA15897386700
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/a0538747-06f8-3398-b9ae-3207fcea150f.roa
Signing time:             Tue 12 May 2026 13:06:43 +0000
ROA not before:           Tue 12 May 2026 13:06:43 +0000
ROA not after:            Mon 10 Aug 2026 13:06:43 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:355::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:0f:f1:48:7b:a1:58:97:38:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:43 2026 GMT
            Not After : Aug 10 13:06:43 2026 GMT
        Subject: CN=306a3f67-1cb4-48fd-a9f3-2e4d91b5fde9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:87:a7:d7:87:e3:cf:63:fc:5a:00:98:4f:f5:
                    89:a2:05:00:ba:b4:ed:03:87:ba:08:da:e3:73:b2:
                    ec:b0:e9:fb:12:bd:f7:f7:64:ac:44:86:98:4d:74:
                    64:d8:b4:c9:d0:f6:e2:3f:fc:85:7e:ee:29:ce:b1:
                    1f:da:db:f8:06:2b:40:a0:8a:d9:c5:0d:78:dc:94:
                    51:80:3d:89:5a:25:90:40:17:b5:d1:a8:d6:68:c7:
                    03:bc:35:6b:8b:ed:e6:00:97:54:5b:9e:8a:30:24:
                    7f:e4:64:dd:ca:72:d7:a5:17:c5:7e:28:06:d0:d0:
                    29:d7:a5:26:bf:e7:85:79:0f:76:ac:cf:16:3e:86:
                    3e:37:2a:be:1f:5f:3d:af:6c:4a:4c:22:c6:25:d2:
                    16:76:77:fb:15:78:0a:c1:07:76:04:51:ef:20:7a:
                    99:0f:8a:61:73:b7:9c:99:ba:d6:0c:99:bb:55:ec:
                    3c:0e:d1:c9:12:89:8c:d5:b6:ac:f0:0b:e9:1a:04:
                    30:03:8b:db:8f:f6:1c:7f:2e:20:89:b9:7b:78:a8:
                    54:50:fe:5b:0d:a7:fa:dd:31:cd:31:b5:17:40:34:
                    a0:ca:7f:bf:82:d9:dd:14:a6:2e:b4:ab:49:fd:81:
                    6c:84:8e:24:f9:b4:b2:0f:c3:79:75:b5:60:38:66:
                    d3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:09:16:2D:52:5C:71:FB:15:02:0D:01:2D:2E:2B:54:21:0B:22:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/a0538747-06f8-3398-b9ae-3207fcea150f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:355::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c1:58:89:e1:6c:34:7b:9b:76:4d:a1:96:c8:90:1e:1d:8b:
         5e:78:1d:75:91:15:38:6e:b6:b8:6b:7b:28:24:c9:90:30:d2:
         6b:c0:68:96:d7:d4:ec:ff:2f:5c:48:ad:dc:7d:17:a3:e1:21:
         ac:fe:07:3e:3e:2e:6b:0a:6e:93:f3:e0:f9:5e:d0:8c:f3:ea:
         82:0c:fb:2b:d8:7a:b1:7d:54:92:fd:8d:a1:18:c5:92:bd:95:
         b0:65:6c:af:80:58:73:4a:05:d6:ef:ee:72:82:f6:aa:f5:20:
         0f:7b:9c:77:3d:a1:18:4b:f9:7d:9e:d3:79:10:7b:23:a9:99:
         33:58:1e:6f:77:f2:bb:64:7d:51:39:49:c9:61:ff:7c:4f:44:
         2c:37:4c:10:aa:6b:a8:6b:aa:92:03:e9:53:1d:10:98:d0:d5:
         59:b6:11:ba:88:a1:36:41:de:c7:db:25:56:0f:e3:9b:b6:ca:
         3c:89:2b:5a:0d:09:58:d2:4a:9d:a0:13:d3:24:30:02:2a:07:
         f2:e7:fd:67:85:94:e8:93:07:eb:31:0f:10:33:4d:62:9c:b8:
         f7:17:55:d6:c6:75:b0:e3:4b:d7:b9:83:67:94:53:45:79:3d:
         ea:03:f2:72:b4:3a:dd:b1:b7:b7:fe:ca:a7:80:6e:cb:33:a5:
         54:5f:35:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:51 2026 by rpki-client