Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bd2609c3-af6c-33e2-beaa-d40aa4688f0a.roa
File:                     bd2609c3-af6c-33e2-beaa-d40aa4688f0a.roa (raw, json)
Hash identifier:          4BeScog0WCiMc0h+7qjOjW9OIh86cyjo24LCChp8IUY=
Subject key identifier:   A0:5A:2D:26:F4:9A:64:03:A2:0B:A0:96:45:AA:03:E4:25:E6:91:0E
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E05B3A5BFA4D8C2E8CA20
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bd2609c3-af6c-33e2-beaa-d40aa4688f0a.roa
Signing time:             Tue 12 May 2026 13:06:38 +0000
ROA not before:           Tue 12 May 2026 13:06:38 +0000
ROA not after:            Mon 10 Aug 2026 13:06:38 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2c7::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:05:b3:a5:bf:a4:d8:c2:e8:ca:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:38 2026 GMT
            Not After : Aug 10 13:06:38 2026 GMT
        Subject: CN=4b472062-670e-450f-9f34-87e1b7f373aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3e:9b:36:45:ad:1c:65:d3:81:f6:84:45:61:
                    04:f6:ab:65:b4:b5:93:2b:58:4b:66:5a:61:64:27:
                    28:2f:b4:c0:4c:46:b8:40:48:15:72:3a:a9:9f:5e:
                    e7:40:4b:d8:6e:76:ef:be:1e:78:48:39:b4:a2:29:
                    e9:4f:af:99:9b:9e:24:5a:4f:01:44:83:c8:34:f7:
                    59:83:91:1e:a5:41:92:fb:ef:7a:a6:a5:a5:87:b1:
                    67:45:1a:d8:97:52:ab:0f:2d:80:5a:48:5b:ab:18:
                    2e:49:a2:6c:30:c6:65:88:5f:39:2b:d5:7c:38:07:
                    49:84:cf:51:a1:79:bc:bb:ac:8d:2d:4e:05:07:31:
                    e4:66:38:e7:42:6f:cd:80:02:20:0f:9e:3c:f5:80:
                    57:ba:cc:4e:58:d8:52:df:65:49:4d:e7:8f:33:75:
                    5d:3b:12:c9:40:ce:d2:47:12:f8:27:7e:1a:6a:b7:
                    a0:56:8c:a7:b7:a4:65:d2:03:69:97:6b:2a:a3:01:
                    57:9b:42:e6:60:ec:07:90:b1:83:31:60:c8:48:b1:
                    54:3d:2b:1d:79:61:d2:d3:03:d0:a1:48:54:88:7d:
                    af:92:b6:bc:e4:94:db:80:9c:52:c2:d8:fc:a1:8b:
                    80:33:68:e0:33:d2:7d:e7:bf:da:02:d6:49:ed:f1:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5A:2D:26:F4:9A:64:03:A2:0B:A0:96:45:AA:03:E4:25:E6:91:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bd2609c3-af6c-33e2-beaa-d40aa4688f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2c7::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:6a:79:bd:aa:49:4d:ba:29:60:63:9d:94:8e:23:7f:68:23:
         f4:49:dc:42:4f:e6:65:bb:ac:32:35:ac:d2:a7:5d:f5:40:82:
         39:49:c5:5f:ab:39:56:35:f5:6f:8c:f9:ba:b3:d2:2d:14:04:
         d2:e1:b8:cd:85:78:bd:ae:ac:08:89:75:17:65:47:ba:a0:cf:
         69:b4:9d:a0:7f:8e:f4:f4:48:fb:3a:e6:e0:51:35:cf:f8:4a:
         17:f3:50:ed:ec:27:99:8a:eb:3c:96:a5:66:93:9c:18:93:50:
         94:37:6c:63:44:c0:e1:08:d9:7d:fa:19:44:9b:68:26:04:c3:
         c1:a2:9c:9c:d0:71:64:36:97:7d:fe:74:82:7a:03:f8:9c:94:
         8d:15:93:96:cd:ec:74:a2:46:b9:3d:04:c3:fa:80:29:60:3b:
         1a:76:3c:de:fd:30:cd:de:5b:91:85:dc:85:c8:2e:36:d9:be:
         1c:35:8a:c7:09:04:f5:94:3c:21:34:7f:c3:2e:3d:52:1a:a2:
         bb:25:d9:e2:6e:e5:80:89:20:86:78:41:33:41:5f:a6:b4:63:
         53:72:f2:e0:3b:55:44:45:bb:b4:36:29:80:0f:83:ff:1b:58:
         72:80:6a:3c:9e:58:c9:47:c7:f3:dc:12:b2:8b:5a:91:51:73:
         79:3b:62:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:42 2026 by rpki-client