Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cb8a9860-0dae-336e-b472-02d62b829e8b.roa
File:                     cb8a9860-0dae-336e-b472-02d62b829e8b.roa (raw, json)
Hash identifier:          PAAEsPB1lWQazvbpJ9rt5kpuZknocm1q8RL8UCFYKDQ=
Subject key identifier:   C8:3B:2B:AD:AA:A7:5D:FA:B0:B7:72:5E:D3:31:33:C9:D8:A0:35:01
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E13A677B97E028F94DA80
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cb8a9860-0dae-336e-b472-02d62b829e8b.roa
Signing time:             Tue 12 May 2026 13:06:45 +0000
ROA not before:           Tue 12 May 2026 13:06:45 +0000
ROA not after:            Mon 10 Aug 2026 13:06:45 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:386::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:13:a6:77:b9:7e:02:8f:94:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:45 2026 GMT
            Not After : Aug 10 13:06:45 2026 GMT
        Subject: CN=39575030-3b1d-4724-8a23-54a4e17356a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:c3:b3:cf:2c:ea:ef:ea:50:e5:97:27:b5:
                    fc:f7:ad:d7:7b:3f:e2:c6:c8:e0:6e:15:ab:fb:6f:
                    92:1c:02:e7:28:c2:b7:69:2c:e7:00:a7:9d:77:23:
                    9b:12:46:b3:02:ab:44:b3:e7:f2:10:1f:05:9d:2f:
                    84:72:98:6d:1f:82:98:1e:76:17:82:78:d9:0a:ca:
                    e0:55:87:b3:f7:e9:29:52:30:1f:4e:d6:0e:75:eb:
                    c5:0b:a3:48:38:99:f7:a4:a3:5b:e6:3e:1d:2c:f4:
                    9c:d6:57:db:0c:ca:b3:ad:b8:df:6f:e4:ad:c2:bf:
                    51:74:49:e3:6e:1b:5d:55:43:97:d9:43:c6:da:96:
                    f7:e3:04:82:1d:75:22:c1:ad:e0:ea:04:42:ee:3d:
                    d3:ff:96:61:94:98:0e:e9:77:ce:09:8f:d7:c9:3b:
                    5f:57:44:9e:40:d1:d4:b3:a6:7c:7a:b7:b1:a2:2a:
                    a5:6e:76:58:2a:46:37:eb:e6:42:02:19:7d:2d:4e:
                    dd:ae:8b:07:06:6b:4d:2f:86:3e:68:de:be:84:f0:
                    ac:76:6f:89:65:fe:2e:dc:ff:e7:dc:8b:30:fb:b5:
                    eb:63:1e:c0:c1:78:61:d2:ab:e2:76:d3:2b:c7:38:
                    c3:b4:69:e3:43:31:ad:f3:1e:e8:15:c2:1c:ec:3f:
                    a8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3B:2B:AD:AA:A7:5D:FA:B0:B7:72:5E:D3:31:33:C9:D8:A0:35:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cb8a9860-0dae-336e-b472-02d62b829e8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:386::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:d0:e9:ae:68:9e:32:f3:9d:0e:c4:ed:af:6d:fd:20:07:84:
         7f:46:7c:9f:31:36:3a:80:29:3e:d3:ed:f4:04:36:8c:35:11:
         59:83:13:e7:c4:42:ef:a2:ae:a9:03:7b:7e:15:bd:96:93:84:
         07:0a:61:fe:62:5c:6e:0e:0b:3c:a9:33:a4:a5:c1:85:35:2e:
         50:a3:03:d9:a2:37:67:86:4b:1f:b3:41:6f:d4:9c:ee:b9:35:
         b8:1d:bd:ca:9a:4a:36:ae:7e:f5:20:9b:fe:9d:38:fc:7d:c4:
         44:77:97:57:47:32:c2:81:4e:f5:48:c6:4f:56:fe:a3:2b:67:
         ce:3c:4e:9b:05:d9:36:7d:f2:3d:72:ed:4e:80:9b:0e:6e:19:
         84:19:43:5d:0a:34:97:53:d0:ce:7d:dd:f5:86:12:8b:ca:7d:
         a7:0e:6d:89:26:a5:01:01:fd:44:56:01:70:43:9d:3d:88:80:
         cf:07:e4:56:39:fb:11:50:eb:7e:7c:40:0f:64:2b:01:96:5f:
         2d:f4:57:17:a8:3e:cd:94:84:61:bb:0a:0e:63:eb:3e:3a:99:
         07:31:1b:f8:cf:b6:56:eb:41:a6:10:0c:20:bd:24:13:7b:7c:
         8e:c0:bb:52:8c:84:3d:f6:4f:b9:d0:2c:79:c7:e8:1c:3c:a7:
         d9:a3:b6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:36:03 2026 by rpki-client