Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cf3f7f4f-d84b-3fdd-871d-7dfff9c90b8c.roa
File:                     cf3f7f4f-d84b-3fdd-871d-7dfff9c90b8c.roa (raw, json)
Hash identifier:          Sl9qTARuhmXiOrxhvTfHSXw21McRTOPe1LYa4E/nIjM=
Subject key identifier:   42:EE:35:B1:79:FB:73:D7:E5:3C:31:FF:F8:B2:78:DE:09:44:57:25
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E10AE6E88EAA969CAA104
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cf3f7f4f-d84b-3fdd-871d-7dfff9c90b8c.roa
Signing time:             Tue 12 May 2026 13:06:43 +0000
ROA not before:           Tue 12 May 2026 13:06:43 +0000
ROA not after:            Mon 10 Aug 2026 13:06:43 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:35f::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:10:ae:6e:88:ea:a9:69:ca:a1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:43 2026 GMT
            Not After : Aug 10 13:06:43 2026 GMT
        Subject: CN=cee8afb3-fb13-487c-9ee0-3c48a66a2526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:41:01:4b:1b:9c:13:69:bc:c7:be:74:1c:1a:
                    0d:7a:1d:84:c6:08:4d:ee:ca:22:e2:fb:3e:e8:b5:
                    cf:79:ba:34:6f:c1:0e:4b:67:92:7f:d4:d9:90:e6:
                    dd:3f:27:56:87:47:1c:44:57:48:6b:6d:53:1d:77:
                    7f:6f:5a:6e:a0:b8:b4:3c:13:e6:b8:c4:45:88:4b:
                    9c:2c:5b:16:35:d5:c1:6f:f1:da:e6:68:82:b5:f2:
                    1e:f3:d7:17:71:d9:95:ea:20:ec:20:fe:0d:82:92:
                    66:cf:35:f5:b9:a4:ef:6d:dc:ab:71:94:c1:89:c7:
                    59:b2:10:1b:ef:f8:f9:ea:f5:1e:8e:21:66:ec:10:
                    ca:16:4e:1e:b9:6c:0e:2e:fc:b9:c4:18:e2:3c:7c:
                    f4:eb:0e:da:94:83:4c:5f:4c:54:85:aa:8f:c0:a2:
                    92:5d:4d:3d:39:e9:45:21:c1:c9:2b:2d:f0:91:43:
                    8e:ed:22:e3:1d:ae:7b:f6:ea:b5:a6:ab:53:72:41:
                    58:1d:ec:56:76:5d:80:ba:ed:ff:f3:4d:38:07:d9:
                    7a:7f:0d:98:f6:cb:66:04:50:b8:4d:21:af:11:72:
                    c5:93:25:ba:2b:12:e2:e6:0e:6f:2b:1d:b1:85:5f:
                    0e:d0:d8:5e:25:87:85:7f:cf:a2:d3:09:84:37:43:
                    fe:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EE:35:B1:79:FB:73:D7:E5:3C:31:FF:F8:B2:78:DE:09:44:57:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/cf3f7f4f-d84b-3fdd-871d-7dfff9c90b8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:35f::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:06:6a:a8:ec:44:7b:0e:20:d7:62:bb:9e:e4:30:76:6d:d5:
         79:57:c4:2d:fd:b3:9f:0f:05:4f:65:4c:f1:bc:be:9e:8d:df:
         90:19:c5:16:a1:8f:82:55:f9:d7:73:ab:62:38:67:e1:ee:95:
         93:8d:e9:fa:5a:2c:e5:ef:7f:ad:13:d5:b9:6a:8b:2b:ac:92:
         ae:6c:26:64:be:ff:95:10:c4:ca:ee:61:fe:7c:76:26:64:aa:
         03:cd:64:98:61:60:19:c0:43:f7:64:27:15:cd:0c:c4:78:4d:
         38:02:af:96:bb:1b:95:ae:80:76:f5:c2:3d:dd:e6:7c:52:f7:
         3d:f3:20:f2:c2:f8:a4:69:f2:b4:ee:8e:d9:f7:df:ed:fd:e3:
         b9:85:62:b8:32:19:7e:e3:97:1b:24:b4:73:bc:37:68:e1:c7:
         a8:fc:16:24:01:e4:64:89:88:d5:cb:31:f1:5d:ba:7e:53:ea:
         d1:33:13:81:10:4a:cc:8d:5c:86:85:08:c5:24:d5:0a:68:4e:
         a8:05:4b:77:62:84:b1:42:8b:6f:bf:5f:15:63:4b:86:d0:4c:
         6b:43:52:2e:89:17:25:f3:f0:99:33:48:c9:2c:17:63:31:0d:
         8a:2e:23:5c:04:35:d6:75:11:4e:d1:b5:02:c7:2d:49:b6:aa:
         2c:b6:dd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:12 2026 by rpki-client