Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bb30c2ba-2ad9-35aa-b780-ac840ba1b3eb.roa
File:                     bb30c2ba-2ad9-35aa-b780-ac840ba1b3eb.roa (raw, json)
Hash identifier:          XebroAuRjxegV1Oi7h3PDsQg6Ei600lNadQq1opN25M=
Subject key identifier:   36:CC:7A:57:1F:B2:6E:59:21:5B:F8:91:5B:2B:53:BC:0C:71:96:BF
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E0DE7C9FD5C384E94CF00
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bb30c2ba-2ad9-35aa-b780-ac840ba1b3eb.roa
Signing time:             Tue 12 May 2026 13:06:42 +0000
ROA not before:           Tue 12 May 2026 13:06:42 +0000
ROA not after:            Mon 10 Aug 2026 13:06:42 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:339::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:0d:e7:c9:fd:5c:38:4e:94:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:42 2026 GMT
            Not After : Aug 10 13:06:42 2026 GMT
        Subject: CN=aabc2186-7b82-41a1-92cb-61169eb00792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:da:91:f3:f4:28:b8:56:ba:5b:06:ee:2f:96:
                    14:10:c8:a8:3b:5b:6a:3b:65:7a:a5:0e:58:77:92:
                    bf:c4:66:93:18:f7:51:3c:2d:d0:50:6d:66:12:0d:
                    c3:f5:01:e0:6e:a7:89:cd:07:6e:01:d7:95:25:20:
                    72:44:a0:36:c6:d5:d9:61:0d:aa:13:fe:d5:6b:70:
                    11:91:11:27:96:d0:32:92:86:c7:0f:1c:1d:6f:42:
                    49:13:fb:8c:69:95:e8:33:4e:ca:76:8c:aa:a4:18:
                    db:43:3f:bc:bc:f5:4b:76:27:b3:e7:69:c8:90:89:
                    1d:15:c6:25:09:94:a2:0c:bd:6b:35:24:3c:f1:3e:
                    7b:7a:87:a1:d0:9c:b4:b0:bc:77:e5:af:fa:8f:23:
                    26:1a:fe:1d:ca:75:d5:1e:9b:a4:be:6e:a3:f0:e0:
                    00:fd:18:88:12:4a:ad:9e:41:6a:7b:b8:5f:18:5a:
                    87:2c:67:b6:06:4c:ff:5e:43:16:f9:51:fb:1f:8e:
                    50:c9:4d:44:c8:db:c0:99:07:1e:dd:28:90:a7:9b:
                    8f:62:08:d4:aa:23:fa:d1:c9:ba:25:48:58:22:65:
                    f9:de:b5:ef:5a:a8:6c:ca:95:3a:62:24:c4:93:93:
                    49:4d:ea:f5:83:de:8e:85:9b:11:cc:32:62:95:8d:
                    d1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CC:7A:57:1F:B2:6E:59:21:5B:F8:91:5B:2B:53:BC:0C:71:96:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bb30c2ba-2ad9-35aa-b780-ac840ba1b3eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:339::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:22:98:5b:b9:73:69:8f:3b:48:19:ee:cc:c3:5b:29:6d:a1:
         68:7b:27:29:61:16:de:9c:2b:81:b9:99:c4:99:d8:44:f4:6f:
         f1:8c:d3:68:40:50:1c:fc:5a:26:a1:5d:0e:73:ec:74:25:a8:
         cc:4f:08:b6:f6:2b:79:9b:51:38:9d:a6:26:83:af:70:e7:a7:
         9d:b5:bc:78:19:d7:32:c0:f4:71:c6:c7:06:ce:85:9a:16:51:
         b1:7a:58:59:93:79:b2:0b:e5:87:0f:1f:42:2f:e7:f6:68:f0:
         39:1c:1e:2c:90:fe:f6:c8:5b:e8:ad:87:4a:b0:80:69:e0:b5:
         3b:95:4c:12:01:ab:a4:65:c9:35:7d:f6:4d:ff:df:33:2e:95:
         18:95:34:f4:59:9a:12:0a:ce:1d:d5:6d:46:35:38:27:86:07:
         a6:ca:f6:ea:c7:59:05:ac:d1:79:35:3e:ea:b8:d2:1c:4f:0d:
         f8:39:ed:0a:4f:b3:95:e2:c8:0e:cc:4b:3d:e6:d3:a4:3a:8f:
         c4:93:43:13:6d:3d:e1:21:3b:be:f6:d5:55:f7:20:a9:0a:1a:
         5e:2e:a4:6f:4e:3e:ee:b8:87:90:83:5e:54:5f:01:2c:dd:3a:
         01:af:ef:ef:a2:cb:a9:dc:cf:c5:e1:df:5f:23:46:cf:ef:44:
         29:85:b4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:43 2026 by rpki-client