Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/a129576d-da98-32ee-9219-37bba6f7617a.roa
File:                     a129576d-da98-32ee-9219-37bba6f7617a.roa (raw, json)
Hash identifier:          pYwuY+6dmKt1YLtxzwU5wnRFBG0KHiv08V8bfOtSxjc=
Subject key identifier:   B1:05:D9:48:B6:9F:D2:85:AB:BB:5B:10:ED:A5:FE:A5:20:04:C4:AB
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E032553398F9DEC80C7A0
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/a129576d-da98-32ee-9219-37bba6f7617a.roa
Signing time:             Tue 12 May 2026 13:06:37 +0000
ROA not before:           Tue 12 May 2026 13:06:37 +0000
ROA not after:            Mon 10 Aug 2026 13:06:37 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2a3::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:03:25:53:39:8f:9d:ec:80:c7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:37 2026 GMT
            Not After : Aug 10 13:06:37 2026 GMT
        Subject: CN=177d89fc-dc1c-4051-abc3-7d48f3ef1924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:83:92:39:6c:14:e5:ad:6c:4e:68:94:7f:
                    66:53:73:ad:9c:39:50:49:ba:56:6b:3f:71:c0:58:
                    6e:17:78:68:db:c9:fb:08:e0:57:93:7d:fa:21:94:
                    8d:6c:e3:c5:6c:f7:ea:63:bb:d0:3f:00:f7:64:1c:
                    7a:ee:6d:15:65:aa:cc:55:0b:1a:a2:60:44:18:9e:
                    3d:8a:4f:75:45:d1:30:3e:14:75:3c:5d:9c:48:68:
                    fd:e8:60:5c:92:1d:b4:c7:44:e6:8c:02:da:73:66:
                    43:18:cb:dd:eb:d5:9a:02:c9:05:ca:58:c2:57:e2:
                    3c:79:1f:cf:6f:2e:46:07:7c:26:57:dc:9b:aa:d7:
                    20:f6:47:a5:24:41:0f:45:fc:e2:5d:2e:ff:78:70:
                    22:0f:7e:bc:e0:66:fd:2a:9b:54:9f:57:0c:a4:f3:
                    37:da:bf:f2:78:f2:f5:9f:60:2f:e5:05:82:4c:22:
                    bb:1c:17:3b:c1:0d:54:8a:63:98:4b:cb:3c:cd:d6:
                    16:0d:da:df:ce:85:c5:45:61:ef:44:84:55:4f:25:
                    7a:6a:fa:bd:6b:bd:c6:2b:ab:34:78:cc:5f:7b:94:
                    f9:e1:f9:ec:3d:b0:fd:56:36:25:20:22:cb:ce:54:
                    5d:ce:7e:bd:de:46:34:bf:82:75:48:49:c0:e6:97:
                    ec:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:05:D9:48:B6:9F:D2:85:AB:BB:5B:10:ED:A5:FE:A5:20:04:C4:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/a129576d-da98-32ee-9219-37bba6f7617a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2a3::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:87:8f:d0:00:85:ce:23:f5:db:3b:1a:37:e7:07:cd:1b:1f:
         cc:e0:d6:01:03:14:66:e9:69:9f:1d:77:76:12:96:d4:ec:cf:
         48:be:34:27:9a:c2:34:45:f8:a9:06:be:1c:bd:e9:e4:6c:ce:
         81:12:80:ca:f7:1c:7c:be:95:e6:1e:99:e7:97:69:e3:5a:80:
         cf:c1:5f:10:e9:3f:e2:e7:0c:ec:32:bb:f0:35:bf:69:e7:a1:
         8f:70:7a:91:54:14:71:e7:9c:cf:bc:42:d7:82:d6:e8:d2:47:
         86:57:0a:ae:05:71:b7:86:fc:bb:05:f7:52:df:9e:8f:95:9b:
         51:c1:f1:62:f0:05:4c:91:25:42:ca:1d:b6:d6:a7:3c:9d:b3:
         c4:31:dd:31:9e:a2:8c:e2:1f:80:2f:cf:d8:d1:f0:af:87:54:
         77:7b:8b:c1:c1:a5:50:34:5e:56:55:03:bb:e4:09:79:24:85:
         e4:fb:d9:16:97:3a:89:ed:9c:a2:02:27:b4:6f:cb:78:4e:2c:
         7e:e1:2e:72:1e:05:db:bf:52:9b:d4:b5:b1:61:9e:47:d3:b9:
         fb:8d:23:41:cc:6f:26:cd:8f:b4:a4:df:c1:e3:18:48:0e:60:
         e4:6c:27:68:b4:83:01:1d:3c:af:a0:3c:53:35:21:f7:a2:93:
         b1:ca:78:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:23 2026 by rpki-client