Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cd5aeb46-c27d-342d-8274-d51076eb89df.roa
File:                     cd5aeb46-c27d-342d-8274-d51076eb89df.roa (raw, json)
Hash identifier:          3L5kS3rRU7Q/MFXnYOMTtXJzu054C7q0QWWSqDz2MWM=
Subject key identifier:   42:28:64:E5:A4:F4:42:02:D6:D4:19:0F:AB:22:0C:E9:50:35:5F:BD
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E13CCF232268689552660
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cd5aeb46-c27d-342d-8274-d51076eb89df.roa
Signing time:             Tue 12 May 2026 13:06:45 +0000
ROA not before:           Tue 12 May 2026 13:06:45 +0000
ROA not after:            Mon 10 Aug 2026 13:06:45 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:388::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:13:cc:f2:32:26:86:89:55:26:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:45 2026 GMT
            Not After : Aug 10 13:06:45 2026 GMT
        Subject: CN=5ce0d950-9951-4415-a879-59960f3599b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d4:03:45:eb:90:27:7b:de:d0:20:11:04:3d:
                    0e:8e:39:98:95:18:3e:ec:2c:b9:00:de:98:fc:bc:
                    11:be:d2:c9:08:59:58:f3:11:4a:bd:b7:57:35:67:
                    fd:d4:f4:fe:68:bf:32:cf:c4:6c:58:9b:48:2a:d7:
                    bb:93:d8:62:66:4a:4f:a5:0d:a5:8c:25:1d:6c:37:
                    e7:b6:e3:cc:31:ac:b3:a0:b8:1d:f6:5e:58:e6:dd:
                    e6:54:2a:ce:5d:61:d2:76:57:2b:60:46:2e:e4:d9:
                    7e:64:31:7d:ac:98:e4:57:ea:41:ba:6f:07:c7:e8:
                    81:de:b6:b2:3c:71:c8:77:04:65:ae:96:bf:4c:a5:
                    2e:6f:3d:14:dc:cd:0b:e6:e0:f6:91:88:0f:86:47:
                    dd:ad:7b:27:4c:c2:5e:f0:c3:8f:31:7c:ba:eb:52:
                    9b:93:7f:32:42:86:d5:41:20:31:1b:4b:73:39:c1:
                    a2:5b:cb:e8:3d:00:cc:14:24:cf:87:87:76:5b:fe:
                    60:26:42:34:87:74:e8:06:35:c7:26:9e:bc:a0:fa:
                    1f:1b:f4:8e:69:63:7f:d2:a1:24:88:8b:55:d4:d5:
                    c5:18:2c:35:7d:1a:03:05:e5:8d:38:86:a1:5f:96:
                    b0:91:35:9e:4a:c7:11:6b:c2:7c:9c:5b:7f:68:33:
                    ac:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:28:64:E5:A4:F4:42:02:D6:D4:19:0F:AB:22:0C:E9:50:35:5F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cd5aeb46-c27d-342d-8274-d51076eb89df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:388::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:b3:0c:0c:b4:8c:00:6f:57:47:44:6f:6e:31:7e:ba:0b:4e:
         08:70:3a:09:bd:cd:61:bc:24:93:9f:e5:99:7f:94:30:ad:b1:
         b2:b7:51:90:92:19:44:04:a5:3e:fd:4b:c5:89:83:58:6a:c5:
         49:4d:24:15:a8:5d:02:04:aa:ce:7c:82:38:c3:fa:6e:a1:37:
         59:3b:be:ba:92:e9:6c:49:50:65:b9:bc:89:7c:93:f2:2b:42:
         df:be:42:36:05:b5:75:dc:0d:1b:7e:9b:c2:a5:59:06:15:f8:
         f2:5a:17:3a:b4:48:4e:3f:8b:3e:94:f1:49:fc:29:83:4c:a0:
         cd:98:f0:a6:4f:af:48:8a:87:37:0b:e2:db:79:22:70:bd:47:
         a9:61:89:9b:91:98:d8:a9:44:f2:c6:07:d9:2e:1e:b8:a8:22:
         f9:84:70:49:b1:7c:a2:0c:a8:7b:2e:50:1d:d8:85:9a:5f:18:
         b0:af:87:ae:70:44:b9:39:34:ca:e7:4f:ba:a5:d3:54:dd:ff:
         b1:25:6e:81:1f:8e:fa:43:f2:69:94:25:50:b3:e7:ce:f3:a8:
         b0:8a:b0:d1:de:9f:b9:16:30:6a:36:cd:e0:1c:37:66:41:05:
         75:1e:93:34:e1:95:1c:71:33:5e:7a:2c:41:33:e9:be:98:e1:
         13:78:c6:bd
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLhPM8jImholVJmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDY0NVoXDTI2MDgxMDEzMDY0NVowLzEtMCsGA1UEAxMk
NWNlMGQ5NTAtOTk1MS00NDE1LWE4NzktNTk5NjBmMzU5OWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39QDReuQJ3ve0CARBD0OjjmYlRg+7Cy5AN6Y
/LwRvtLJCFlY8xFKvbdXNWf91PT+aL8yz8RsWJtIKte7k9hiZkpPpQ2ljCUdbDfn
tuPMMayzoLgd9l5Y5t3mVCrOXWHSdlcrYEYu5Nl+ZDF9rJjkV+pBum8Hx+iB3ray
PHHIdwRlrpa/TKUubz0U3M0L5uD2kYgPhkfdrXsnTMJe8MOPMXy661Kbk38yQobV
QSAxG0tzOcGiW8voPQDMFCTPh4d2W/5gJkI0h3ToBjXHJp68oPofG/SOaWN/0qEk
iItV1NXFGCw1fRoDBeWNOIahX5awkTWeSscRa8J8nFt/aDOslwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFEIoZOWk9EIC1tQZD6siDOlQNV+9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvY2Q1YWViNDYtYzI3ZC0z
NDJkLTgyNzQtZDUxMDc2ZWI4OWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
A4gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEA4LMMDLSMAG9XR0RvbjF+ugtOCHA6Cb3NYbwkk5/lmX+UMK2x
srdRkJIZRASlPv1LxYmDWGrFSU0kFahdAgSqznyCOMP6bqE3WTu+upLpbElQZbm8
iXyT8itC375CNgW1ddwNG36bwqVZBhX48loXOrRITj+LPpTxSfwpg0ygzZjwpk+v
SIqHNwvi23kicL1HqWGJm5GY2KlE8sYH2S4euKgi+YRwSbF8ogyoey5QHdiFml8Y
sK+HrnBEuTk0yudPuqXTVN3/sSVugR+O+kPyaZQlULPnzvOosIqw0d6fuRYwajbN
4Bw3ZkEFdR6TNOGVHHEzXnosQTPpvpjhE3jGvQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:34:47 2026 by rpki-client