Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/c40e9b14-7242-31f6-b782-252e6dec5756.roa
File:                     c40e9b14-7242-31f6-b782-252e6dec5756.roa (raw, json)
Hash identifier:          ZP/JSo8j+M53eKifI0TRDrteZ6KzmxehOZqMSXBZ3AA=
Subject key identifier:   E1:95:FA:07:F0:86:8E:2B:48:E6:BA:67:19:EA:42:56:3A:E6:6E:CE
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DE844FF0CCAFC72491C40
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/c40e9b14-7242-31f6-b782-252e6dec5756.roa
Signing time:             Tue 12 May 2026 13:06:24 +0000
ROA not before:           Tue 12 May 2026 13:06:24 +0000
ROA not after:            Mon 10 Aug 2026 13:06:24 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:102::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:e8:44:ff:0c:ca:fc:72:49:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:24 2026 GMT
            Not After : Aug 10 13:06:24 2026 GMT
        Subject: CN=b343b1fc-3879-402e-bd36-83454fe1fdb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:45:e4:04:34:69:30:99:d6:23:3d:0d:a8:00:
                    9f:b6:19:60:04:dd:33:84:29:f0:63:60:1a:0b:a5:
                    4e:0d:77:91:f8:38:1b:9c:7f:17:a4:db:bc:98:7d:
                    e9:9d:ae:bb:8e:e1:0c:9f:d7:1f:cf:4a:9b:49:1c:
                    47:ff:2d:e6:70:19:a0:79:cb:c9:eb:c1:cd:af:9f:
                    64:4a:7f:b4:c5:2b:0a:e9:28:c9:c0:be:6d:65:c7:
                    cf:08:52:6b:12:6d:5b:bc:9a:d7:f1:05:14:04:11:
                    d0:78:0d:23:51:46:76:34:34:31:61:b5:35:94:71:
                    dc:b0:3b:95:70:94:5d:8c:5c:2b:7e:75:97:d8:08:
                    27:de:e5:de:b3:6a:35:ad:40:fd:2e:93:07:80:c6:
                    b1:bf:71:55:81:20:e1:1b:9a:0f:69:ca:c8:cb:c8:
                    82:cc:bc:9f:c6:b8:97:07:04:f9:ec:76:db:c3:23:
                    ce:7c:af:f5:d1:fc:85:aa:d7:88:a5:4a:88:b8:ec:
                    d2:ae:b9:5a:39:cb:4b:d8:3b:9b:73:bf:e5:80:62:
                    b4:4b:45:9c:85:29:a1:6e:96:f6:84:5f:30:3e:d5:
                    39:ca:a7:50:a0:43:f8:5f:aa:d3:a0:6d:b1:85:83:
                    79:3b:9c:d6:29:13:9e:a8:5a:88:2a:d8:1c:e8:a7:
                    b2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:95:FA:07:F0:86:8E:2B:48:E6:BA:67:19:EA:42:56:3A:E6:6E:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/c40e9b14-7242-31f6-b782-252e6dec5756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:102::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:fe:9f:d8:e7:32:da:bf:a9:c4:43:37:77:35:5b:21:1b:f8:
         45:9d:ae:fa:c5:e4:ce:d3:5c:b5:b6:82:68:d2:31:48:39:2f:
         02:0b:d5:bc:c4:c0:d0:13:43:91:79:e1:23:d9:53:d9:b4:19:
         b2:00:3c:2c:03:ce:37:9e:3a:29:c0:cf:22:8d:c1:64:16:22:
         cf:dd:1e:05:8b:52:0b:48:1a:90:ad:9c:83:d8:11:66:56:ba:
         b2:75:5e:90:0e:6c:24:26:ff:db:37:2d:a0:ef:42:d8:f3:e7:
         a7:4e:cc:9c:a3:6d:ef:f6:3c:02:b8:0d:51:c5:5c:1a:bd:c5:
         b9:3f:ce:ad:c0:eb:49:83:f8:61:41:48:63:6e:55:cc:d1:7e:
         60:1d:bf:a7:00:b4:68:b6:d8:ac:59:b1:03:02:5b:d6:58:6f:
         0d:7e:96:d0:c8:dc:86:72:11:a3:99:1f:58:65:b2:72:16:85:
         4c:6a:f3:a8:e8:2d:7b:da:d0:58:ff:a4:2b:84:86:d8:98:8b:
         26:75:bf:11:b3:16:bd:e7:af:25:38:62:9c:68:72:70:e2:a8:
         71:79:e6:f8:57:14:b4:18:60:9b:af:d0:5c:6b:c7:92:75:46:
         20:78:76:5d:72:24:86:1e:eb:ba:08:b6:9f:67:fc:ef:c6:ec:
         75:74:06:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:38 2026 by rpki-client