Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/dcb7315b-5e0b-3127-acf9-917cd5a3cd37.roa
File:                     dcb7315b-5e0b-3127-acf9-917cd5a3cd37.roa (raw, json)
Hash identifier:          RWSiiWMY+53oOSwNwpRct0EBwgoUQXwnCET2/lOBHjA=
Subject key identifier:   70:46:78:84:F8:64:FA:02:CB:16:64:89:B4:78:1E:87:71:A4:B1:BD
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DEFB227BA7BC27EC3F880
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/dcb7315b-5e0b-3127-acf9-917cd5a3cd37.roa
Signing time:             Tue 12 May 2026 13:06:28 +0000
ROA not before:           Tue 12 May 2026 13:06:28 +0000
ROA not after:            Mon 10 Aug 2026 13:06:28 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:17b::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:ef:b2:27:ba:7b:c2:7e:c3:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:28 2026 GMT
            Not After : Aug 10 13:06:28 2026 GMT
        Subject: CN=4ee70539-d14a-4127-a7bd-7fc13842f24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:22:fa:42:d4:ff:12:7d:ce:d1:d9:6a:73:97:
                    75:98:49:2b:30:33:50:7f:b2:a8:b0:83:95:39:4e:
                    44:07:89:fc:b8:cd:0e:8a:59:02:be:01:d1:74:55:
                    15:c0:ec:7c:9b:e3:61:53:af:6f:2b:90:90:fa:9a:
                    86:20:e9:e3:71:ac:a9:da:43:b2:a9:ea:59:2d:f5:
                    d5:7c:95:47:0b:b8:44:7f:66:97:d4:d0:20:94:fe:
                    11:7e:e3:14:cd:42:69:dc:ae:5e:0c:eb:f3:a9:58:
                    83:3f:1e:ed:4a:5e:7e:fc:e0:40:22:cd:b1:f8:0f:
                    ab:6b:5c:c4:5f:26:61:cd:13:54:b3:14:39:84:e6:
                    73:48:65:20:a8:ae:06:f2:f7:62:84:52:9a:04:45:
                    cf:62:97:3f:62:21:87:c8:e9:96:f0:39:1d:f3:60:
                    72:b9:61:a8:d6:2e:4c:7f:58:e9:b9:99:73:b0:cc:
                    4d:73:e5:41:9a:e5:c4:9c:36:16:94:89:46:7e:92:
                    86:7e:b0:50:27:6d:f7:59:08:63:74:f6:6f:d0:24:
                    a1:fc:b8:0d:69:fc:ac:f1:df:2d:36:3b:0d:3a:6c:
                    b4:fc:d6:5f:fb:bb:29:b1:2d:f9:78:a1:ea:f8:18:
                    50:37:bd:a0:7c:36:a4:6d:81:96:f3:c5:5f:37:39:
                    41:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:46:78:84:F8:64:FA:02:CB:16:64:89:B4:78:1E:87:71:A4:B1:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/dcb7315b-5e0b-3127-acf9-917cd5a3cd37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:17b::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:61:8c:fd:b7:a9:3c:fe:73:59:8b:a5:a2:df:cf:02:bc:0d:
         a6:39:c0:fc:be:d1:98:09:f7:a0:10:f8:c5:79:51:bd:96:25:
         eb:3a:a4:26:52:ef:3d:a9:b7:60:b3:0e:e7:99:5e:d2:fd:35:
         e0:37:c9:51:a7:ae:04:1b:09:b8:1d:25:2c:a0:9e:dc:f1:5c:
         76:39:d4:01:91:60:62:c1:c4:e0:80:f3:09:cf:79:d4:47:ee:
         5b:72:96:b8:9f:cb:55:cd:d8:5f:50:ad:68:42:d2:04:c2:44:
         b5:fb:31:81:ff:15:b2:08:8b:2b:97:3a:29:9f:02:34:3c:7d:
         30:54:2d:45:ce:48:1e:31:65:25:2b:77:17:6e:f6:ac:66:60:
         ab:8a:1d:c8:90:bc:a9:bc:37:b7:3d:a8:8f:16:6f:c4:32:c1:
         f8:62:05:6e:70:35:f1:5d:e5:fe:2c:30:93:c6:2a:65:91:eb:
         cf:6b:53:54:74:80:36:22:b3:f8:8f:a5:71:43:5f:75:34:0c:
         e9:f2:51:e3:84:72:5f:03:e6:c0:76:59:63:e2:34:70:e6:ff:
         d0:18:f9:a8:9d:ed:3e:b4:44:53:5c:3d:a5:c3:b2:4d:04:bb:
         a2:ac:a0:27:36:e6:fc:b0:b7:a3:fe:1c:98:ad:bc:13:a4:82:
         5c:96:f3:1d
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLe+yJ7p7wn7D+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYyOFoXDTI2MDgxMDEzMDYyOFowLzEtMCsGA1UEAxMk
NGVlNzA1MzktZDE0YS00MTI3LWE3YmQtN2ZjMTM4NDJmMjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSL6QtT/En3O0dlqc5d1mEkrMDNQf7KosIOV
OU5EB4n8uM0OilkCvgHRdFUVwOx8m+NhU69vK5CQ+pqGIOnjcayp2kOyqepZLfXV
fJVHC7hEf2aX1NAglP4RfuMUzUJp3K5eDOvzqViDPx7tSl5+/OBAIs2x+A+ra1zE
XyZhzRNUsxQ5hOZzSGUgqK4G8vdihFKaBEXPYpc/YiGHyOmW8Dkd82ByuWGo1i5M
f1jpuZlzsMxNc+VBmuXEnDYWlIlGfpKGfrBQJ233WQhjdPZv0CSh/LgNafys8d8t
NjsNOmy0/NZf+7spsS35eKHq+BhQN72gfDakbYGW88VfNzlBnQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFHBGeIT4ZPoCyxZkibR4HodxpLG9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvZGNiNzMxNWItNWUwYi0z
MTI3LWFjZjktOTE3Y2Q1YTNjZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AXswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAfGGM/bepPP5zWYulot/PArwNpjnA/L7RmAn3oBD4xXlRvZYl
6zqkJlLvPam3YLMO55le0v014DfJUaeuBBsJuB0lLKCe3PFcdjnUAZFgYsHE4IDz
Cc951EfuW3KWuJ/LVc3YX1CtaELSBMJEtfsxgf8VsgiLK5c6KZ8CNDx9MFQtRc5I
HjFlJSt3F272rGZgq4odyJC8qbw3tz2ojxZvxDLB+GIFbnA18V3l/iwwk8YqZZHr
z2tTVHSANiKz+I+lcUNfdTQM6fJR44RyXwPmwHZZY+I0cOb/0Bj5qJ3tPrREU1w9
pcOyTQS7oqygJzbm/LC3o/4cmK28E6SCXJbzHQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:35:37 2026 by rpki-client