Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/af9ee584-0b64-3511-b9d3-17fea7396d20.roa
File:                     af9ee584-0b64-3511-b9d3-17fea7396d20.roa (raw, json)
Hash identifier:          x9hBwp3+yUE+1JhtVTYnNOAy1EQOX0q4edQctpWo5fU=
Subject key identifier:   10:AA:8E:FD:8F:89:D1:52:12:8A:44:35:AF:E7:48:00:F1:97:D5:22
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DF5A68B9C682E60E6DF80
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/af9ee584-0b64-3511-b9d3-17fea7396d20.roa
Signing time:             Tue 12 May 2026 13:06:30 +0000
ROA not before:           Tue 12 May 2026 13:06:30 +0000
ROA not after:            Mon 10 Aug 2026 13:06:30 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1d9::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:f5:a6:8b:9c:68:2e:60:e6:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:30 2026 GMT
            Not After : Aug 10 13:06:30 2026 GMT
        Subject: CN=95c6058b-58ce-4e8f-98c0-6b9807ab113c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:27:d0:c9:4b:26:4d:b9:25:f7:dc:9b:be:85:
                    26:74:a1:61:a7:3a:4e:86:ae:e6:b4:03:d1:50:85:
                    4a:11:9b:f4:c1:c5:88:d5:81:28:09:70:c8:49:6e:
                    e4:58:79:2d:aa:46:4c:4f:84:96:1c:56:f6:cc:64:
                    03:75:c0:f4:71:14:8d:70:4f:65:fa:b2:53:a3:1e:
                    51:c1:0c:09:8d:72:25:28:f9:09:ed:46:80:7a:79:
                    6a:01:6d:e4:d0:b9:20:9d:2e:57:fe:94:b6:d5:ba:
                    cb:cd:d8:5d:ec:db:ac:06:3a:be:02:5f:d6:0d:ee:
                    88:fc:75:1c:21:20:d1:a1:b7:60:ad:b8:4e:15:dd:
                    f1:ea:ff:c9:be:bc:f8:5d:82:0a:4b:cb:1b:60:ee:
                    cf:ea:b4:ba:b1:cd:4a:c8:b3:ba:62:34:00:1b:a3:
                    13:a1:0a:b5:99:55:9e:1b:37:7a:a5:9d:db:a2:28:
                    b9:8c:1f:8d:b5:2e:3a:bc:9d:92:57:a8:10:99:ab:
                    1f:cb:08:a6:70:0d:8c:b0:17:ae:49:aa:76:90:59:
                    fc:ac:ca:33:49:8c:71:83:47:65:0a:bb:11:3e:8f:
                    9d:cc:a3:e8:2b:06:1b:d4:91:27:ce:80:b0:02:e4:
                    22:71:06:98:e3:d0:b4:d1:69:81:b3:38:05:bb:0e:
                    3f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AA:8E:FD:8F:89:D1:52:12:8A:44:35:AF:E7:48:00:F1:97:D5:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/af9ee584-0b64-3511-b9d3-17fea7396d20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1d9::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e2:54:aa:e7:f0:90:8a:d1:08:9c:85:ca:94:5e:a1:bc:5a:
         f8:72:2e:bd:fd:3e:b2:f1:40:8c:03:a3:6e:88:4c:ec:b6:22:
         9f:f8:9e:d4:c9:9e:09:8f:51:ef:23:d6:aa:51:c6:f9:4b:64:
         80:61:7b:d2:aa:b3:d5:39:57:9b:57:ff:43:89:93:3f:39:24:
         22:27:54:ee:f1:05:c3:af:f0:45:e7:15:2e:a3:5c:1a:7d:06:
         82:66:a9:50:ca:c8:8f:0e:71:cc:8e:3c:a7:12:2e:b5:fc:6b:
         de:d0:9a:d8:d0:c4:e2:f9:23:68:ab:b0:0c:0a:93:ca:25:f9:
         b5:2a:62:cc:c7:c6:d9:66:d6:f4:38:c8:dd:15:5b:6a:ea:f7:
         22:81:42:73:3f:f3:c3:a4:a1:d0:55:2b:bc:ea:0b:2e:3d:4d:
         ed:1f:fc:83:4a:73:d7:f5:16:13:20:16:44:95:11:ea:c7:c1:
         37:bf:47:a0:14:8b:01:67:69:c2:53:ad:92:58:55:2a:dd:b7:
         6c:87:e0:c0:2e:19:b5:24:de:1c:d8:18:db:b3:0c:6e:cf:81:
         ae:32:e1:13:d2:c7:c3:55:63:64:09:b6:58:72:63:ff:e6:89:
         ac:74:76:2e:9e:c7:4b:20:f6:a5:f5:c2:6f:4f:94:49:ad:d1:
         3f:7e:59:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:05:30 2026 by rpki-client