Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/c49955a5-f886-3977-8864-90c448343644.roa
File:                     c49955a5-f886-3977-8864-90c448343644.roa (raw, json)
Hash identifier:          04ypfdX2adXmzMKyo8dPvN9y6tLh9UsyggVt1ETs3Vk=
Subject key identifier:   7E:3F:ED:34:93:14:52:48:A7:A6:C7:EE:6B:3C:61:64:81:B3:AE:37
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E06D63D7239CB824A1980
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/c49955a5-f886-3977-8864-90c448343644.roa
Signing time:             Tue 12 May 2026 13:06:38 +0000
ROA not before:           Tue 12 May 2026 13:06:38 +0000
ROA not after:            Mon 10 Aug 2026 13:06:38 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2d7::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:06:d6:3d:72:39:cb:82:4a:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:38 2026 GMT
            Not After : Aug 10 13:06:38 2026 GMT
        Subject: CN=3a99dc3a-45b3-41b0-863e-c62a5a0a0464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9c:5e:43:8d:2b:5d:46:a7:68:8d:0b:10:8c:
                    00:21:90:11:a7:20:fb:64:2f:83:83:c6:67:02:37:
                    1c:ce:c3:36:4f:5d:2e:5f:f5:61:42:84:65:96:84:
                    60:15:98:7c:e5:da:fd:9d:8d:e4:40:0b:00:46:a6:
                    40:02:d4:f6:44:56:12:a4:f7:cc:ec:56:ff:fb:ce:
                    48:2d:88:65:71:b9:0a:14:3f:63:f2:f6:b8:30:b5:
                    31:e1:e1:89:de:b7:ee:0e:be:de:3a:b7:46:0e:4a:
                    a7:97:63:4c:32:52:fe:97:21:a8:50:65:38:d7:8f:
                    c0:d3:b8:40:5e:18:c3:67:84:12:57:30:7b:af:d3:
                    fc:ae:8c:34:d4:f5:eb:49:8f:2b:5f:fd:10:fa:6c:
                    d1:e3:48:a2:21:bb:f4:62:14:b1:af:63:65:73:c6:
                    1c:ed:9f:3d:86:c5:a0:db:f5:3b:03:9c:b4:da:d7:
                    e7:7b:6a:79:39:a3:a0:56:52:70:7a:29:e6:44:d2:
                    2e:fa:15:2a:7e:16:7c:0e:52:1e:47:5a:0c:d8:50:
                    91:9b:f6:7e:69:94:4b:2b:a0:94:26:cd:14:b8:32:
                    c2:e8:23:76:1f:8f:d2:06:ba:d8:5b:22:3d:ca:87:
                    18:d2:3c:a0:11:cb:80:9f:fd:36:83:59:1c:02:d5:
                    12:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3F:ED:34:93:14:52:48:A7:A6:C7:EE:6B:3C:61:64:81:B3:AE:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/c49955a5-f886-3977-8864-90c448343644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2d7::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ca:6b:e9:15:ec:09:25:7c:b6:9d:5d:84:fb:89:72:6b:8b:
         bc:f3:c5:db:da:4c:15:2d:3a:9e:4b:24:d6:47:36:08:9f:42:
         9f:15:f1:54:a3:84:95:8e:e0:83:d2:6e:c7:d9:02:99:0b:69:
         c5:7b:bc:90:48:71:24:20:25:3c:6c:c5:26:fc:29:7f:b7:61:
         f6:ca:e1:91:d6:de:09:e3:c8:83:f7:0e:8e:58:cd:84:b7:6a:
         33:8b:a7:03:68:02:6b:9e:56:59:49:a5:b2:2e:1d:c1:41:e8:
         90:f4:6b:6b:65:6f:b6:cd:ab:8c:6f:73:c9:63:73:57:9e:ee:
         73:db:39:0e:f3:49:0c:f7:42:5d:42:96:ed:9d:4d:d3:c4:88:
         85:54:a6:6d:58:d6:29:ba:8a:32:85:dc:dc:74:9d:7a:58:3b:
         4e:6f:08:a6:8b:50:08:b0:f7:82:3f:02:43:f5:dc:e2:12:bd:
         a3:f1:c6:93:5f:32:03:2b:03:2e:49:5e:c2:93:bc:c0:dd:5f:
         09:ef:1d:6f:84:d6:d0:41:d4:f4:2a:db:6b:4d:f1:20:04:78:
         1a:2b:a0:42:2b:91:4e:8c:36:02:42:9b:3d:c5:69:00:aa:d8:
         9b:bc:bc:c0:eb:d5:f1:8b:08:0c:1a:a1:e8:f3:24:91:de:c0:
         82:ab:c9:f9
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLgbWPXI5y4JKGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYzOFoXDTI2MDgxMDEzMDYzOFowLzEtMCsGA1UEAxMk
M2E5OWRjM2EtNDViMy00MWIwLTg2M2UtYzYyYTVhMGEwNDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25xeQ40rXUanaI0LEIwAIZARpyD7ZC+Dg8Zn
AjcczsM2T10uX/VhQoRlloRgFZh85dr9nY3kQAsARqZAAtT2RFYSpPfM7Fb/+85I
LYhlcbkKFD9j8va4MLUx4eGJ3rfuDr7eOrdGDkqnl2NMMlL+lyGoUGU414/A07hA
XhjDZ4QSVzB7r9P8row01PXrSY8rX/0Q+mzR40iiIbv0YhSxr2Nlc8Yc7Z89hsWg
2/U7A5y02tfne2p5OaOgVlJweinmRNIu+hUqfhZ8DlIeR1oM2FCRm/Z+aZRLK6CU
Js0UuDLC6CN2H4/SBrrYWyI9yocY0jygEcuAn/02g1kcAtUShwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFH4/7TSTFFJIp6bH7ms8YWSBs643MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvYzQ5OTU1YTUtZjg4Ni0z
OTc3LTg4NjQtOTBjNDQ4MzQzNjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AtcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAEcpr6RXsCSV8tp1dhPuJcmuLvPPF29pMFS06nksk1kc2CJ9C
nxXxVKOElY7gg9Jux9kCmQtpxXu8kEhxJCAlPGzFJvwpf7dh9srhkdbeCePIg/cO
jljNhLdqM4unA2gCa55WWUmlsi4dwUHokPRra2Vvts2rjG9zyWNzV57uc9s5DvNJ
DPdCXUKW7Z1N08SIhVSmbVjWKbqKMoXc3HSdelg7Tm8IpotQCLD3gj8CQ/Xc4hK9
o/HGk18yAysDLklewpO8wN1fCe8db4TW0EHU9Crba03xIAR4GiugQiuRTow2AkKb
PcVpAKrYm7y8wOvV8YsIDBqh6PMkkd7AgqvJ+Q==
-----END CERTIFICATE-----
Generated at Wed May 13 15:58:33 2026 by rpki-client