Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/c0fd1a81-365b-3e3a-853f-8eac727620ab.roa
File:                     c0fd1a81-365b-3e3a-853f-8eac727620ab.roa (raw, json)
Hash identifier:          0xF8ZR+eurIeYP89eJJ8U2mN9Ws+GK16eJjwQWwWHSw=
Subject key identifier:   66:D2:38:BE:01:3D:8E:A9:58:6D:94:14:DA:20:FC:22:52:BD:99:CF
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E039FE1ADAC20DE757280
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/c0fd1a81-365b-3e3a-853f-8eac727620ab.roa
Signing time:             Tue 12 May 2026 13:06:37 +0000
ROA not before:           Tue 12 May 2026 13:06:37 +0000
ROA not after:            Mon 10 Aug 2026 13:06:37 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2aa::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:03:9f:e1:ad:ac:20:de:75:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:37 2026 GMT
            Not After : Aug 10 13:06:37 2026 GMT
        Subject: CN=1b4f4fb3-3cf6-4598-8b5c-e855ea145991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:09:2f:bc:18:80:61:bd:f5:84:ec:1c:f4:9c:
                    5e:4e:05:d0:fa:ce:cd:25:49:d4:f4:4f:50:2b:89:
                    75:c1:f2:5c:65:34:8f:6b:eb:1c:f6:d7:89:3f:e5:
                    ac:d0:aa:ee:3a:e2:ba:f3:d4:58:2f:c0:32:f3:96:
                    32:60:5c:b5:86:c3:9c:5c:63:40:42:c1:7c:88:46:
                    42:94:ae:56:c7:94:15:c3:de:ae:dc:33:fc:9f:31:
                    0f:d6:0b:09:16:5a:a8:16:c3:a8:3d:b6:91:4f:2f:
                    cf:75:32:fe:dc:3e:c8:6c:2e:ce:65:2a:4d:1b:a6:
                    35:e5:fb:52:c6:75:33:e4:65:0f:fc:d5:df:83:ae:
                    6a:24:c2:2b:ef:3a:dc:93:28:f5:d4:2f:0a:78:e1:
                    ac:f8:3e:16:a4:0e:35:74:45:c1:bc:90:7e:ef:2b:
                    89:3f:9a:af:90:a4:58:d6:3a:fc:c3:d2:c2:e1:9f:
                    79:0f:84:cf:6f:16:fc:e3:a2:0f:bf:71:10:7e:c9:
                    27:09:20:77:fc:49:75:b1:d7:3a:7f:a5:ea:bf:29:
                    a1:12:81:df:9a:69:95:38:94:03:e4:3a:8e:21:4e:
                    13:e4:58:60:1f:cb:b4:6d:68:2a:53:8f:0d:60:0e:
                    ff:54:42:35:67:b5:a6:e4:d4:d2:63:99:d9:8a:7d:
                    81:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D2:38:BE:01:3D:8E:A9:58:6D:94:14:DA:20:FC:22:52:BD:99:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/c0fd1a81-365b-3e3a-853f-8eac727620ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2aa::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:f5:64:ad:f4:ca:58:5c:5f:a3:46:3a:3c:a5:e3:cd:21:94:
         61:62:2d:cc:3b:e2:16:93:61:ec:86:31:76:a4:17:61:b9:f7:
         22:9b:7a:7f:42:7f:2f:74:86:07:de:59:bd:41:47:db:05:35:
         1e:95:2c:e8:30:30:76:b1:1d:58:db:91:e8:1b:5b:45:3c:1f:
         78:b3:28:ae:29:81:34:8b:23:fa:c8:6f:a7:a9:ef:82:71:50:
         f0:a3:20:06:0c:c3:d2:ee:98:40:8e:11:63:af:a3:bb:40:0f:
         7b:98:9a:77:9f:c7:77:7f:10:c4:c5:4a:27:b6:e5:94:dd:12:
         5d:29:ae:6a:48:0f:26:b2:dc:f2:3a:c8:ac:2d:07:bb:9d:73:
         e6:33:e3:33:fe:b2:68:04:81:44:13:8f:b7:15:d8:4e:9f:9d:
         d0:08:46:af:c9:46:d3:73:20:6e:64:8b:a6:54:5f:08:64:8f:
         07:f7:28:b3:88:a0:f5:19:b7:3a:2f:5c:f9:a7:d6:71:83:05:
         8d:6a:b6:24:68:09:94:20:97:9b:55:b9:63:c0:ae:14:8f:05:
         03:57:99:15:7c:c0:2d:d4:d2:e4:ba:e6:11:65:8a:13:8e:6e:
         d4:40:bc:90:5b:f3:4b:80:bb:b7:cb:62:38:cc:b1:10:fe:e1:
         48:64:4f:9f
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLgOf4a2sIN51coAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYzN1oXDTI2MDgxMDEzMDYzN1owLzEtMCsGA1UEAxMk
MWI0ZjRmYjMtM2NmNi00NTk4LThiNWMtZTg1NWVhMTQ1OTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwkvvBiAYb31hOwc9JxeTgXQ+s7NJUnU9E9Q
K4l1wfJcZTSPa+sc9teJP+Ws0KruOuK689RYL8Ay85YyYFy1hsOcXGNAQsF8iEZC
lK5Wx5QVw96u3DP8nzEP1gsJFlqoFsOoPbaRTy/PdTL+3D7IbC7OZSpNG6Y15ftS
xnUz5GUP/NXfg65qJMIr7zrckyj11C8KeOGs+D4WpA41dEXBvJB+7yuJP5qvkKRY
1jr8w9LC4Z95D4TPbxb846IPv3EQfsknCSB3/El1sdc6f6XqvymhEoHfmmmVOJQD
5DqOIU4T5FhgH8u0bWgqU48NYA7/VEI1Z7Wm5NTSY5nZin2B2QIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFGbSOL4BPY6pWG2UFNog/CJSvZnPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvYzBmZDFhODEtMzY1Yi0z
ZTNhLTg1M2YtOGVhYzcyNzYyMGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AqowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAxvVkrfTKWFxfo0Y6PKXjzSGUYWItzDviFpNh7IYxdqQXYbn3
Ipt6f0J/L3SGB95ZvUFH2wU1HpUs6DAwdrEdWNuR6BtbRTwfeLMorimBNIsj+shv
p6nvgnFQ8KMgBgzD0u6YQI4RY6+ju0APe5iad5/Hd38QxMVKJ7bllN0SXSmuakgP
JrLc8jrIrC0Hu51z5jPjM/6yaASBRBOPtxXYTp+d0AhGr8lG03MgbmSLplRfCGSP
B/cos4ig9Rm3Oi9c+afWcYMFjWq2JGgJlCCXm1W5Y8CuFI8FA1eZFXzALdTS5Lrm
EWWKE45u1EC8kFvzS4C7t8tiOMyxEP7hSGRPnw==
-----END CERTIFICATE-----
Generated at Wed May 13 13:30:25 2026 by rpki-client