Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/c6f9e1ec-685d-34c8-91c8-e8abd6111c09.roa
File:                     c6f9e1ec-685d-34c8-91c8-e8abd6111c09.roa (raw, json)
Hash identifier:          Qt+7cyNFQQt1kwf5ZLCl241A3zN0LHZir4Q31h1jKRQ=
Subject key identifier:   3F:9B:12:33:B6:FB:A8:63:9D:31:01:81:9F:4F:83:EE:67:65:3A:71
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DF4BC5BF125482FBEB780
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/c6f9e1ec-685d-34c8-91c8-e8abd6111c09.roa
Signing time:             Tue 12 May 2026 13:06:30 +0000
ROA not before:           Tue 12 May 2026 13:06:30 +0000
ROA not after:            Mon 10 Aug 2026 13:06:30 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1cb::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:f4:bc:5b:f1:25:48:2f:be:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:30 2026 GMT
            Not After : Aug 10 13:06:30 2026 GMT
        Subject: CN=0f95b3fb-b659-43f1-a857-6dfeda1ca5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:20:ad:00:4c:77:ac:c2:b0:f6:71:54:08:fa:
                    3f:a0:d2:e0:d4:8b:20:23:93:e9:fd:d9:35:a4:4e:
                    c4:8d:3b:df:55:7c:4c:88:72:d1:11:1e:91:78:39:
                    dd:05:f1:98:50:2f:c6:a7:f0:fa:97:82:4b:06:50:
                    ae:87:7c:3b:a1:29:40:37:10:a5:a9:50:42:ac:ee:
                    dd:be:b4:7f:d4:41:47:c5:fa:f4:1b:f0:a7:fa:c8:
                    30:89:90:59:f0:aa:0d:ee:9d:e1:fe:ab:62:55:ac:
                    55:c9:23:b6:ac:6c:fe:db:06:41:11:05:45:7e:05:
                    51:85:dc:4f:77:62:ce:7b:29:e8:c5:b4:d8:67:bd:
                    d9:d2:70:7a:a1:f6:73:33:22:b5:f4:1f:ca:f3:d1:
                    63:cb:69:79:23:2a:97:f2:59:9f:4d:2a:41:cd:e9:
                    a8:20:0b:fe:bd:f8:3e:33:54:51:b6:c9:b6:dc:4c:
                    45:19:70:dc:65:e5:b6:ef:e6:4c:e1:66:b9:22:9a:
                    2f:7a:45:54:81:de:2f:74:15:fc:5c:10:1f:ba:af:
                    61:ae:b9:47:4f:f5:cf:5f:8a:78:cc:d4:60:b2:4a:
                    3c:b8:0b:1b:a9:d1:f8:e5:9e:73:86:52:c1:e8:04:
                    1b:8d:bb:f3:b2:ab:37:aa:cb:e7:4e:39:5f:54:20:
                    3f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9B:12:33:B6:FB:A8:63:9D:31:01:81:9F:4F:83:EE:67:65:3A:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/c6f9e1ec-685d-34c8-91c8-e8abd6111c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1cb::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:a5:d1:bb:b4:bc:08:3f:96:26:a7:f3:0b:24:7c:9d:2b:3c:
         13:7d:60:47:69:9b:40:86:14:08:e3:41:54:db:63:96:a9:08:
         bc:f8:ef:39:9f:1c:8d:13:3f:3f:6b:cc:aa:84:b5:51:3e:7e:
         0c:d0:f9:a8:ff:92:fe:1f:e4:56:74:f1:0d:bf:82:1e:55:b2:
         93:98:3f:55:e6:f6:ba:4e:d9:66:ea:f1:04:47:19:9e:69:8b:
         33:cf:8d:94:2b:3d:7d:2d:e0:b3:ab:ee:58:09:28:3e:85:46:
         b6:f8:03:19:6b:c2:3e:a2:13:40:c2:a8:15:27:12:81:c3:27:
         65:20:e1:e9:44:c9:83:57:2a:8c:9b:73:08:84:73:a8:a4:4a:
         2d:7c:f5:fd:fe:c6:12:19:f3:e8:d6:19:c8:a6:25:f5:f9:a7:
         8b:60:a5:2d:f2:49:51:d4:0a:66:fd:e3:d9:2e:30:46:ac:00:
         7e:c1:ae:67:b7:c7:2b:83:5a:f8:6c:61:d5:ba:9c:96:00:bb:
         11:e5:f4:ac:fd:43:5b:bb:3c:7e:c6:9c:54:41:ec:2f:ff:17:
         ea:a5:d4:ad:73:32:98:25:77:ff:98:e6:02:17:df:da:dd:71:
         de:8f:b7:75:c9:8f:96:3f:99:ca:cf:8f:44:c9:21:dd:09:8a:
         0b:e3:e5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:44 2026 by rpki-client