Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/a8eb8067-94da-3f32-bb67-118dbeab054f.roa
File:                     a8eb8067-94da-3f32-bb67-118dbeab054f.roa (raw, json)
Hash identifier:          cyRSaiafaffEDnB/k9VOBOQXuRcCk/iJs+gQR3oUeuA=
Subject key identifier:   CC:FA:DD:D4:2E:45:AD:B9:88:73:35:F4:83:58:73:B2:DC:EE:B1:C3
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E0D544B7417F366764FE0
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/a8eb8067-94da-3f32-bb67-118dbeab054f.roa
Signing time:             Tue 12 May 2026 13:06:42 +0000
ROA not before:           Tue 12 May 2026 13:06:42 +0000
ROA not after:            Mon 10 Aug 2026 13:06:42 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:331::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:0d:54:4b:74:17:f3:66:76:4f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:42 2026 GMT
            Not After : Aug 10 13:06:42 2026 GMT
        Subject: CN=dd8d75be-f95c-430d-b80d-fc33f91c23a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:57:4d:27:49:bd:a6:10:c5:c1:41:61:ed:b2:
                    8d:a4:c2:7e:fc:c4:7b:5a:ba:72:9a:37:80:8c:bd:
                    bd:76:67:a6:e5:3a:20:5e:2f:27:f7:f2:fc:db:e7:
                    98:70:f1:e0:d1:6e:36:bd:0a:03:50:13:ba:cf:b8:
                    4a:e2:b9:a0:d7:cd:95:16:7e:06:4e:d0:39:3f:5a:
                    7e:1d:1c:26:6b:c9:bd:61:c7:bd:19:a8:3b:fc:dc:
                    34:c6:0f:7f:22:a2:68:d9:49:23:82:36:f2:fb:65:
                    11:06:c8:b5:5d:fc:2e:fe:58:e7:ce:b4:60:fc:25:
                    11:75:b0:ec:81:e2:79:23:96:c0:87:58:ca:61:dc:
                    e5:29:0f:59:c9:3a:a2:67:6e:95:08:d4:7e:07:57:
                    20:6a:c7:d3:a0:94:90:cc:54:25:ac:b2:d6:01:1b:
                    79:6e:90:ef:16:03:1c:c1:41:15:f9:5b:89:fe:31:
                    35:83:ec:53:75:42:43:db:be:05:b4:fb:22:c8:74:
                    b7:bd:cc:7b:f4:f2:90:2c:a6:f6:1b:88:24:dd:24:
                    26:17:1e:4b:08:53:62:9a:ae:b7:d1:29:2b:88:f4:
                    e3:c7:f4:30:00:5e:20:0d:f1:8c:f5:15:58:e9:c0:
                    4d:49:bf:79:5a:d3:93:6c:65:f6:dd:ad:cb:37:02:
                    17:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FA:DD:D4:2E:45:AD:B9:88:73:35:F4:83:58:73:B2:DC:EE:B1:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/a8eb8067-94da-3f32-bb67-118dbeab054f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:331::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:a3:76:09:36:52:7f:e6:b0:b1:0c:27:b0:33:22:d0:54:06:
         6b:85:cd:65:98:52:9d:4a:e5:bc:e8:29:b9:65:3b:55:75:b7:
         0c:90:6a:99:05:c8:f0:8e:2c:b0:b2:8d:3b:7b:bb:73:f6:e4:
         2a:50:3d:ce:cd:02:61:e8:11:00:ad:f0:23:c4:da:99:52:76:
         0c:87:43:84:5e:f6:9a:7b:29:31:ce:b5:ea:d7:43:78:48:af:
         6d:8a:0d:0a:a0:87:fc:c0:19:3b:d5:a4:ca:8e:24:c7:cf:65:
         56:0a:6d:2a:e1:09:ea:5e:79:ae:e8:9d:eb:22:a1:14:31:75:
         27:9a:3d:a1:85:fc:8b:ed:1f:ac:29:ea:66:38:1a:fc:4c:14:
         f8:ec:65:e1:a3:26:00:69:2d:f3:62:0b:c8:b8:44:0a:0f:c2:
         9c:0b:85:8b:ac:b8:70:bb:7c:52:dd:d6:20:e0:7b:49:49:27:
         3d:91:79:aa:14:8f:01:ba:73:0c:19:48:77:1a:c1:1d:04:f0:
         dc:37:5e:ee:ee:1f:5d:61:cb:89:45:23:13:88:56:a0:b4:24:
         c1:ec:47:11:80:73:7e:c2:77:a4:2c:8e:01:08:4f:d2:73:96:
         33:b7:c3:92:a4:2b:2f:de:a6:03:64:30:28:85:27:20:8c:3c:
         ad:4a:00:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:55 2026 by rpki-client