Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bdda55ef-4497-3d66-a515-348e67b4dac0.roa
File:                     bdda55ef-4497-3d66-a515-348e67b4dac0.roa (raw, json)
Hash identifier:          kgra0M34N4DuVLS6PLclq7j3CrURwQQh0tAnSisLcOg=
Subject key identifier:   31:70:05:23:75:BB:77:DA:B8:19:E1:FE:06:A9:1A:97:C4:71:18:54
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DE056D037282FC7B2A440
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bdda55ef-4497-3d66-a515-348e67b4dac0.roa
Signing time:             Tue 12 May 2026 13:06:20 +0000
ROA not before:           Tue 12 May 2026 13:06:20 +0000
ROA not after:            Mon 10 Aug 2026 13:06:20 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:77::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:e0:56:d0:37:28:2f:c7:b2:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:20 2026 GMT
            Not After : Aug 10 13:06:20 2026 GMT
        Subject: CN=7b751e90-90c9-4d89-9a6e-d071e1603736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:45:6e:68:d5:b1:8a:2a:af:ca:5c:6b:40:9d:
                    cb:e6:49:56:b4:42:13:89:14:54:53:c3:7a:83:65:
                    9d:a6:6d:c2:b5:b0:04:aa:9e:3a:2e:73:11:55:7c:
                    21:10:f2:b0:01:cd:92:49:bc:74:3b:d9:f8:6e:4b:
                    f0:fe:40:f2:15:30:d4:ee:24:7c:26:43:50:65:e3:
                    08:eb:cc:57:dd:02:bc:d4:75:53:13:c4:cc:29:c7:
                    b3:36:53:1f:c9:cb:ed:0a:ac:b7:d6:83:42:ad:a0:
                    63:7e:3a:84:46:bf:ba:c8:ef:fc:94:d5:75:ce:2c:
                    a4:eb:11:52:95:3e:fe:c9:69:10:2f:92:d6:6d:ba:
                    b3:02:eb:a3:b2:0b:5d:7c:ec:58:c0:36:6c:19:a4:
                    c9:6d:c0:63:81:b7:fe:66:65:b9:77:54:4f:26:ad:
                    27:7d:10:81:bb:38:d0:0e:67:7c:60:6d:17:80:b9:
                    38:bf:69:71:81:f2:02:47:1c:ca:1e:3e:25:64:e4:
                    50:ae:cd:8c:4d:2a:b7:36:97:f1:66:7e:50:94:b7:
                    c7:f2:5a:30:55:15:3f:e5:7b:70:4a:e5:46:d7:a8:
                    b6:43:41:13:7f:db:33:c8:9f:1f:b4:84:ae:68:41:
                    98:6f:9e:1a:1b:f5:3b:56:9c:aa:bd:a4:95:8a:fa:
                    8b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:70:05:23:75:BB:77:DA:B8:19:E1:FE:06:A9:1A:97:C4:71:18:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/bdda55ef-4497-3d66-a515-348e67b4dac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:77::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:4c:e5:7c:f6:60:c9:32:d0:d2:1d:41:7e:d8:d9:29:c6:00:
         35:3a:c3:57:7e:cc:76:74:3d:cf:6a:b9:6f:b5:5a:79:2a:42:
         8c:52:29:03:38:99:e8:5e:3b:eb:5c:78:ae:e8:21:96:ae:ca:
         06:05:9b:f4:ad:14:56:db:fe:cc:c6:fa:c1:ad:7f:09:6e:36:
         11:f1:ef:76:1a:c6:13:d6:f6:72:da:fd:78:5a:71:b1:b6:48:
         34:4b:f8:88:cc:c6:a0:31:67:61:96:dc:ff:25:47:11:23:ad:
         1e:7e:6f:93:f9:e8:c2:ed:3c:15:a1:eb:e3:e9:c9:6b:8c:5d:
         c1:30:3d:be:23:31:c0:bc:e0:71:4b:5e:09:38:2a:88:61:77:
         aa:6d:4d:52:21:7b:b4:2f:33:55:d7:a2:9f:2b:a8:6d:f8:f6:
         06:3e:6b:4b:2e:37:f7:a5:3c:1f:f8:f9:4d:21:e6:8c:23:5c:
         29:fc:2e:9e:c4:2d:6f:cc:bb:5f:37:6c:6e:b9:1a:16:43:10:
         89:44:5b:ea:6a:61:d1:64:34:92:18:2b:12:30:01:2b:eb:50:
         e6:f7:26:c1:bc:42:36:39:4d:6b:33:ab:4a:5b:cc:88:f3:ad:
         1a:73:f1:50:b4:99:69:88:44:2b:79:5f:8b:dd:f7:40:59:4e:
         7f:7e:d0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:14:34 2026 by rpki-client