Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cd2b8d0e-69ec-3677-80ee-56275bae4a95.roa
File:                     cd2b8d0e-69ec-3677-80ee-56275bae4a95.roa (raw, json)
Hash identifier:          02NZIM5UnQ2RsrcFQSvrNcimGhgzeYJimyPelR7HzNA=
Subject key identifier:   E2:FC:19:C7:04:D2:FC:E7:6D:AB:88:95:6B:45:00:75:A2:9E:66:ED
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DE60F9689568F3ED57840
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cd2b8d0e-69ec-3677-80ee-56275bae4a95.roa
Signing time:             Tue 12 May 2026 13:06:23 +0000
ROA not before:           Tue 12 May 2026 13:06:23 +0000
ROA not after:            Mon 10 Aug 2026 13:06:23 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:dc::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:e6:0f:96:89:56:8f:3e:d5:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:23 2026 GMT
            Not After : Aug 10 13:06:23 2026 GMT
        Subject: CN=7b72fff5-5774-4db5-a5c2-ded47a191228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:92:32:d0:2c:45:81:f4:a2:c7:7d:16:ec:
                    6f:af:9b:6b:ab:8d:b7:01:38:95:85:ca:8f:cc:24:
                    a9:1d:20:60:98:e0:90:67:53:eb:e3:ed:cb:81:fd:
                    79:33:49:cf:42:92:a0:a8:c5:8b:88:2e:e0:07:a1:
                    bf:ea:8f:65:cb:57:2a:de:1b:5b:a7:fd:35:bf:19:
                    17:93:e6:85:66:67:f7:12:1a:8a:5e:e5:38:af:f0:
                    00:41:2a:d7:5d:de:40:26:c8:f1:2e:f6:54:79:cd:
                    4c:25:15:21:40:f1:84:92:0e:ba:91:28:54:79:89:
                    3a:61:74:00:3b:98:7b:a6:93:77:ee:84:8f:43:03:
                    2e:a4:76:33:6d:24:bb:0f:19:9f:5f:24:39:01:90:
                    3c:31:ba:8a:d3:63:11:2b:30:7d:80:78:b1:5d:a3:
                    ce:c9:31:c4:02:e3:dc:f8:f2:2d:3f:65:ed:dc:38:
                    c9:23:3c:d5:a3:1c:8a:4b:ca:15:97:d2:bb:9d:15:
                    09:8a:51:de:2d:a5:0e:ae:65:25:0a:fb:eb:52:e8:
                    b6:29:05:e9:94:b4:b6:02:b5:75:65:39:24:24:1d:
                    1b:42:ae:7c:8b:a2:98:78:b7:7e:15:77:08:85:a2:
                    fc:34:0a:ca:e4:10:f4:7f:f0:83:74:a0:33:e5:d3:
                    48:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FC:19:C7:04:D2:FC:E7:6D:AB:88:95:6B:45:00:75:A2:9E:66:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cd2b8d0e-69ec-3677-80ee-56275bae4a95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:dc::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:02:56:34:f0:a9:bb:cf:5e:46:21:c7:d9:29:50:51:76:31:
         c7:98:fa:bd:89:68:04:c2:93:1c:80:0b:2f:c7:8e:47:d2:d9:
         70:99:93:78:f7:92:9f:7c:51:cf:6d:e0:91:53:d1:26:ad:47:
         62:60:d4:c6:57:22:cd:e8:1f:19:b2:b9:03:06:6d:76:f1:ed:
         a3:a2:5a:4c:4c:aa:47:1b:22:f7:60:e1:fc:55:3e:62:26:f9:
         aa:55:0f:86:28:24:ce:08:4e:3d:db:7d:4d:66:45:16:66:f0:
         ef:9f:61:1b:bc:e8:cb:23:e7:95:04:74:60:9e:5e:84:b1:8c:
         78:e1:a2:27:06:13:67:b0:6c:2d:20:d5:3a:ff:19:af:84:c0:
         51:34:d9:4e:1c:da:62:6d:0d:23:f6:1c:ed:61:bf:c6:30:bf:
         e3:2b:0b:35:44:e6:45:59:2c:44:3d:59:45:77:3a:d3:49:e9:
         c3:3b:ec:a6:f9:2d:4e:45:ab:0f:ab:67:34:13:8f:92:9c:25:
         55:6a:a9:0a:8c:19:79:aa:a6:f8:c1:e9:32:90:16:b0:be:32:
         40:c4:d2:ed:eb:12:76:44:6a:c4:9d:59:62:7c:eb:07:da:93:
         ac:3c:d5:9b:8e:86:30:6b:40:9f:b6:b2:54:77:c8:f3:5f:3b:
         b0:6b:13:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:37 2026 by rpki-client