Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bb91d209-56e0-3f4a-b9b7-d24250872785.roa
File:                     bb91d209-56e0-3f4a-b9b7-d24250872785.roa (raw, json)
Hash identifier:          vQOvO1cuon2bCXSHt6FrTTR5dIvjkYpj1kC0sYYTKCQ=
Subject key identifier:   BD:D3:C6:C3:5F:47:3E:24:6B:CD:7C:F8:33:9F:34:7A:F2:4D:A8:14
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DFB4A22BD900D9BC36100
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bb91d209-56e0-3f4a-b9b7-d24250872785.roa
Signing time:             Tue 12 May 2026 13:06:33 +0000
ROA not before:           Tue 12 May 2026 13:06:33 +0000
ROA not after:            Mon 10 Aug 2026 13:06:33 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:230::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:fb:4a:22:bd:90:0d:9b:c3:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:33 2026 GMT
            Not After : Aug 10 13:06:33 2026 GMT
        Subject: CN=19aa1293-24bd-43a0-851d-66b9d8a06672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d7:e5:a3:47:9b:e9:42:ee:17:f3:01:a4:9f:
                    d9:68:24:af:49:e1:45:04:3f:7a:8d:67:b3:db:22:
                    1d:b3:ff:2c:f5:56:0b:34:33:c2:92:8a:c6:7c:30:
                    e2:68:2f:1e:ec:9b:1d:c0:68:57:5f:56:23:58:39:
                    13:ad:33:0e:57:b5:07:f7:31:d3:57:76:10:c9:6d:
                    83:26:a0:fb:37:52:d0:5a:62:ae:0c:51:f8:99:a6:
                    99:0b:56:e2:f7:65:15:a4:ef:13:02:63:82:60:12:
                    66:61:70:26:f1:8e:53:ba:ea:a9:49:35:2a:ec:b2:
                    a1:4f:8f:c2:a0:5b:28:bb:f1:7d:54:26:90:a4:f1:
                    7b:ca:a1:aa:c1:15:fc:4f:0c:e9:03:43:13:6c:c1:
                    4f:14:f4:0a:05:d7:2d:31:e3:94:ec:31:bb:e3:66:
                    3a:c9:4c:71:7f:17:3c:e0:3c:7a:09:23:db:5f:8f:
                    58:fd:22:1e:41:24:0e:e1:2a:72:c2:3a:b5:d3:62:
                    cb:e4:a1:be:c6:c4:09:6d:e6:c2:d8:71:31:37:f2:
                    6c:b0:c8:fc:c9:a3:36:61:66:f3:e6:9b:ef:f5:ac:
                    ef:4a:54:f8:30:d9:e1:ae:9f:a5:d1:cf:15:ef:e5:
                    6a:a7:e4:c2:b3:f1:b0:08:7c:45:0a:4d:b8:10:ea:
                    0f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D3:C6:C3:5F:47:3E:24:6B:CD:7C:F8:33:9F:34:7A:F2:4D:A8:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bb91d209-56e0-3f4a-b9b7-d24250872785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:230::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:13:1a:bb:41:76:76:d9:9d:f3:ea:0a:f9:11:d1:61:3d:6a:
         2b:de:6b:1a:86:e3:ad:b7:25:1c:aa:4e:f2:c8:c9:e2:a5:b4:
         37:3a:0c:e6:8f:d1:44:d8:37:6c:cb:ce:2c:48:78:3c:3a:16:
         7a:6d:10:e0:92:72:f1:cd:66:ac:39:27:91:eb:74:c6:9e:17:
         7e:42:55:36:d8:a5:ce:9d:f1:47:80:0e:a1:82:7f:5a:03:c6:
         d7:5a:c7:12:c8:e8:9a:86:0d:11:a6:13:bf:d7:e8:af:63:94:
         05:06:e5:0d:38:e0:00:c9:6e:3f:e5:4a:f0:1c:49:85:43:06:
         2d:ca:c5:8f:df:e1:75:5d:b6:3a:3a:2b:50:e0:08:c7:bc:29:
         45:5b:ee:b1:33:b5:c2:8e:06:3a:4f:53:c3:aa:b2:68:83:3e:
         c4:76:17:0e:6e:78:a6:92:8b:7e:c3:5b:cb:b6:a7:34:1b:67:
         38:41:10:7d:bb:d5:ee:e2:42:fc:d3:27:7e:f2:27:7b:72:be:
         9a:f1:5c:d2:ad:a6:32:96:35:32:26:4d:11:b7:a9:70:e1:58:
         e8:19:a6:b5:f1:df:69:75:e3:c2:fb:e4:c4:b9:d3:34:39:3a:
         51:bb:67:ce:f6:7e:8c:4c:1c:6c:db:f1:bd:cd:9a:30:d5:f1:
         25:55:51:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:21:40 2026 by rpki-client