Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/d4ca2228-9e23-39cd-a2c2-245e3eb7ddce.roa
File:                     d4ca2228-9e23-39cd-a2c2-245e3eb7ddce.roa (raw, json)
Hash identifier:          JsQlaYyyccA6vgDj/Vn/1zh7zH3LGn8yJWyM2mgudjg=
Subject key identifier:   D3:27:72:C7:7F:4F:B8:BA:1A:63:8E:F6:55:38:59:B4:B9:17:FA:98
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DDEE8637C80AAF0243C00
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/d4ca2228-9e23-39cd-a2c2-245e3eb7ddce.roa
Signing time:             Tue 12 May 2026 13:06:20 +0000
ROA not before:           Tue 12 May 2026 13:06:20 +0000
ROA not after:            Mon 10 Aug 2026 13:06:20 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:5d::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:de:e8:63:7c:80:aa:f0:24:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:20 2026 GMT
            Not After : Aug 10 13:06:20 2026 GMT
        Subject: CN=bdd136d5-7f57-49ef-8c9c-b27832ed37c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:66:a4:79:8b:de:f7:83:71:1a:9c:fe:37:04:
                    66:b8:b3:4f:e0:b0:da:3f:15:d6:41:98:88:21:5c:
                    00:57:f3:73:e8:dc:0f:16:e1:33:74:32:65:ce:c4:
                    b9:84:f2:ed:06:34:13:90:b5:36:9f:5e:1c:6d:0b:
                    54:a8:3e:a0:ef:29:92:87:1c:6d:d6:79:dd:89:19:
                    c8:5d:84:ff:2b:ce:7c:48:b6:2a:63:88:5c:1d:88:
                    0e:cd:41:5e:6d:5c:8d:83:d4:2b:c2:94:e3:41:21:
                    5c:f4:21:3a:ba:08:de:b8:40:86:17:69:77:fe:32:
                    c2:32:b2:40:72:4c:66:28:76:e6:94:f8:a0:0f:bd:
                    cd:3d:11:46:d1:a9:ef:a5:44:6f:68:ae:5f:65:be:
                    e3:87:47:23:01:a9:b9:9d:6a:8a:00:db:a8:6a:a4:
                    5a:25:15:34:b2:82:8e:cc:fb:5b:09:e1:95:8e:fc:
                    a8:d1:51:49:43:09:02:ab:6f:be:90:31:15:4b:e0:
                    c4:d0:70:40:5a:df:a0:d7:e1:23:06:8b:4c:c7:d5:
                    84:b6:ea:fa:22:21:d4:8b:76:fb:80:88:26:f6:f0:
                    58:b6:f0:49:06:53:c1:00:57:00:ae:b5:7b:f1:0f:
                    e0:1a:0c:90:c9:6c:58:05:1c:92:71:04:45:bd:3d:
                    73:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:27:72:C7:7F:4F:B8:BA:1A:63:8E:F6:55:38:59:B4:B9:17:FA:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/d4ca2228-9e23-39cd-a2c2-245e3eb7ddce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:5d::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:5d:2e:51:42:94:17:e0:73:86:2f:26:d5:3f:6c:0f:d7:ec:
         cc:77:f5:f4:0e:9d:7d:41:07:16:e1:d3:0d:df:45:70:1f:d8:
         0e:2a:94:e0:8e:97:e8:7d:e0:8f:29:35:8a:de:2f:76:1c:63:
         bb:79:a7:cc:33:f3:af:cb:4c:bb:e5:b3:67:e3:9c:2a:e2:b7:
         77:73:50:7c:af:35:b8:b1:e1:e3:04:d3:b4:ac:cd:57:3f:2d:
         f5:b3:95:92:2b:b6:96:e3:24:4e:38:a6:66:50:4a:9f:01:85:
         20:46:0f:4e:40:96:32:48:c9:55:8b:4c:f7:95:0a:27:f2:95:
         3b:2b:23:c7:b2:7d:20:91:f4:61:f9:55:db:b3:5f:95:63:d4:
         fd:62:82:8e:83:11:44:47:ff:30:9b:55:73:88:23:63:7f:92:
         f1:40:aa:bf:f0:ce:2e:b0:17:66:23:1c:cd:3c:57:fc:b0:16:
         11:96:f7:8d:d3:38:e3:7b:91:69:0f:8c:7a:62:d5:cb:b5:0a:
         e3:90:63:37:bc:a5:b4:ff:a4:e7:5d:f3:6a:ff:0b:c7:82:78:
         82:a2:8a:f2:60:93:52:28:66:4d:72:ee:f5:5e:6f:99:fa:17:
         15:2d:10:a6:a6:54:9f:05:8b:de:9b:d6:c4:fe:e4:0d:8b:07:
         28:ed:63:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:52 2026 by rpki-client