Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/c3c2067d-05d6-3f53-9d8f-281bdc42767a.roa
File:                     c3c2067d-05d6-3f53-9d8f-281bdc42767a.roa (raw, json)
Hash identifier:          J7khD+HbEcTLJUNTjtVlbnxEi4sJs3DrqgeAEh+mCEk=
Subject key identifier:   6C:A6:AD:E9:B6:B7:F7:87:1B:B5:84:D6:C8:2E:8C:33:BB:A3:D0:8C
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E17A79A85D14A430C1400
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/c3c2067d-05d6-3f53-9d8f-281bdc42767a.roa
Signing time:             Tue 12 May 2026 13:06:46 +0000
ROA not before:           Tue 12 May 2026 13:06:46 +0000
ROA not after:            Mon 10 Aug 2026 13:06:46 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3bb::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:17:a7:9a:85:d1:4a:43:0c:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:46 2026 GMT
            Not After : Aug 10 13:06:46 2026 GMT
        Subject: CN=82cb2894-b022-4881-ab84-1f7f430d4a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4b:5b:68:44:59:45:30:b7:ec:ed:ac:90:80:
                    c3:36:6d:b5:71:30:53:1f:bb:9e:67:93:c3:4d:69:
                    72:1f:31:3f:9f:54:ff:09:31:2e:35:be:f5:fd:69:
                    a4:24:7f:27:95:7c:e7:a4:1f:a1:ca:bd:79:1e:35:
                    46:13:09:cf:0a:fc:d6:4c:ec:ef:7f:1c:1c:e2:6f:
                    ca:3c:ed:8e:5b:69:b7:fb:9c:a7:9c:00:f8:08:d8:
                    20:eb:98:77:7c:09:c9:30:b2:4f:7b:15:92:ce:50:
                    d0:ff:01:84:fe:11:f1:f1:bd:47:0c:64:34:10:53:
                    cb:3d:12:17:a3:7a:4a:fb:34:52:d5:ee:52:30:45:
                    b5:f2:13:32:c0:82:08:96:6c:97:50:f6:46:07:fa:
                    ec:72:e8:2a:d5:fb:ba:da:68:05:f2:be:bf:63:51:
                    b4:11:0c:8b:22:3c:e8:66:62:fe:0f:30:df:62:39:
                    8b:f2:aa:16:e2:44:e6:1c:b1:d0:7f:02:92:9f:8b:
                    5c:6d:23:bc:aa:36:ac:f9:eb:0d:04:5a:40:bd:56:
                    c7:05:8a:27:8a:2d:d7:e8:96:4c:51:c9:a8:27:c1:
                    0e:87:7c:ce:c7:22:0b:59:17:d8:75:6e:7d:b4:eb:
                    26:17:c1:8a:02:fc:7a:1e:5b:d1:73:d5:e4:16:19:
                    ef:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A6:AD:E9:B6:B7:F7:87:1B:B5:84:D6:C8:2E:8C:33:BB:A3:D0:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/c3c2067d-05d6-3f53-9d8f-281bdc42767a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3bb::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:5a:8d:27:dd:52:2f:25:2a:93:4b:df:c0:fb:c9:e1:0a:94:
         d9:9d:89:a2:d5:ac:ff:a6:de:0e:d4:35:08:b8:10:83:9a:10:
         8b:c3:cc:d7:5c:32:92:9e:cf:8b:dc:84:dc:4a:ae:37:5c:68:
         f1:86:f7:bd:12:bb:8a:66:0a:92:b2:f5:3b:a5:ee:80:da:c5:
         cc:1f:27:89:39:60:50:43:27:be:29:7a:57:c4:d9:0d:6b:7e:
         8f:ae:ec:a6:e4:71:b0:69:f1:eb:c3:c3:ec:14:14:6f:be:b5:
         55:1e:c2:44:d6:3b:7d:0a:3f:b7:c7:bd:35:31:3e:ca:fe:ae:
         04:eb:db:53:b0:21:5d:c1:4c:13:aa:fb:fe:4c:3f:3c:45:a8:
         ab:a5:21:0d:18:1a:cd:eb:f2:bc:16:95:99:67:bb:b4:00:eb:
         5f:19:d2:fd:5c:d3:1c:1f:2a:de:22:6a:db:2a:5c:1a:11:8e:
         4f:ac:9b:22:83:82:b2:35:2c:07:e9:71:6c:2a:1e:d3:81:ad:
         0b:ef:bb:4b:59:36:95:19:04:ff:b3:be:d6:97:41:96:65:88:
         0d:83:24:b9:dc:d3:b0:34:3b:dc:c8:45:2a:66:4f:b8:42:31:
         e5:59:76:ce:d4:12:4e:7d:1d:4e:82:f7:b5:1f:dd:19:cc:a7:
         f0:30:74:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:16:43 2026 by rpki-client