Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/d367be08-1b13-36a8-8df6-b569f60d1f49.roa
File:                     d367be08-1b13-36a8-8df6-b569f60d1f49.roa (raw, json)
Hash identifier:          QCK843xvs8k6cjDec+Bx/5nlwSRdUgImL5r+rEqZRH0=
Subject key identifier:   66:09:12:E3:07:3A:42:20:F6:6F:C8:A1:9B:48:F8:65:CE:15:56:1E
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DEFA26F1CB86B595BB200
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/d367be08-1b13-36a8-8df6-b569f60d1f49.roa
Signing time:             Tue 12 May 2026 13:06:28 +0000
ROA not before:           Tue 12 May 2026 13:06:28 +0000
ROA not after:            Mon 10 Aug 2026 13:06:28 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:17a::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:ef:a2:6f:1c:b8:6b:59:5b:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:28 2026 GMT
            Not After : Aug 10 13:06:28 2026 GMT
        Subject: CN=33e2c04f-6f8c-4252-800e-48fb63a6caea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ed:0b:25:5f:ff:1b:51:8d:5d:68:2b:2c:e9:
                    e2:e8:de:b6:e7:9f:66:a7:bc:c8:44:8b:7e:30:00:
                    ea:bc:2f:53:ae:dd:5e:c9:e6:7d:0d:79:c1:94:23:
                    5d:6a:3b:19:cf:7e:5b:0b:59:48:16:15:bd:fb:f3:
                    b9:55:82:f3:f9:01:ee:6c:df:66:9a:e4:52:df:29:
                    73:66:a7:17:0a:89:00:5a:e7:aa:3d:c7:96:12:51:
                    a7:4e:bc:74:7e:a4:a9:29:a8:9b:7d:63:3a:d1:86:
                    30:3c:6d:08:6c:5a:3c:7b:1f:e8:33:32:96:be:b5:
                    bc:0d:22:50:5d:3d:1a:cf:00:09:33:18:57:94:42:
                    d5:64:09:cb:58:82:18:c7:ce:44:11:96:53:f8:df:
                    ea:b8:d0:15:25:c0:94:f4:a6:38:24:21:30:26:70:
                    68:46:71:32:83:5f:a2:d6:49:83:ce:9d:78:5d:71:
                    d8:2c:2e:d9:51:65:52:29:c2:39:a5:e8:9e:df:90:
                    a3:00:7c:0f:0b:2b:c9:ca:b5:f4:ad:12:0e:3a:74:
                    18:58:eb:d6:1b:2e:98:3b:9d:7d:3e:9a:24:34:9e:
                    79:5b:2d:f7:f4:19:21:44:d2:de:8a:50:70:d4:bd:
                    8c:d0:8f:b6:19:61:ce:e0:02:09:5a:65:d2:5d:98:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:09:12:E3:07:3A:42:20:F6:6F:C8:A1:9B:48:F8:65:CE:15:56:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/d367be08-1b13-36a8-8df6-b569f60d1f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:17a::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:07:47:e8:d9:b0:f0:2e:1f:34:8c:61:3f:c9:bb:97:15:35:
         73:03:28:23:58:2d:b0:b3:06:20:a6:ec:02:08:44:a6:4f:a5:
         4e:86:7b:a1:20:a3:97:91:ba:2d:89:88:03:a4:68:c6:19:25:
         0e:95:d3:3e:17:93:93:a9:d1:e3:c9:f5:f1:43:3a:10:e2:2b:
         68:dc:dd:91:2c:47:cd:ac:c3:08:97:a1:ec:29:81:3a:38:08:
         89:fd:bf:5a:25:2c:bf:d4:61:ff:f3:18:d6:38:d0:6c:cb:c9:
         cf:70:bf:ca:b2:f2:1e:da:38:1a:53:9a:bf:5a:7d:c2:8c:1b:
         14:a9:6a:cc:5f:5f:e9:93:ac:dc:9d:e6:2e:58:fe:78:b8:c0:
         37:32:7e:41:37:b0:01:e4:bf:ff:bd:60:5a:3c:5c:fc:15:f4:
         e1:16:78:3e:cc:43:3d:7f:95:a5:e0:9a:73:7e:9f:ff:0c:d5:
         d0:50:60:96:4e:70:03:1f:5c:20:d5:7b:5f:38:20:af:61:e8:
         3c:be:79:c0:a3:c7:5f:76:2b:fc:3f:a6:95:6d:92:e4:50:08:
         76:5c:ac:f8:cd:30:e7:33:56:be:5c:7d:5f:7a:fc:08:bf:e0:
         5e:58:c0:5f:17:fc:7f:c0:68:88:17:be:af:77:11:bf:c8:10:
         0c:f6:b1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:12:27 2026 by rpki-client