Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/df00a90c-e22f-35b4-b92f-040c00a88549.roa
File:                     df00a90c-e22f-35b4-b92f-040c00a88549.roa (raw, json)
Hash identifier:          X8yBoDHQrAwJDe6TloQQytcMuCMDGmJogagafYRlbfE=
Subject key identifier:   82:CE:31:57:F7:2A:09:DD:F1:02:F5:21:F1:3B:0A:95:8F:89:3C:2A
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E04DF2EEC871CD4032C00
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/df00a90c-e22f-35b4-b92f-040c00a88549.roa
Signing time:             Tue 12 May 2026 13:06:38 +0000
ROA not before:           Tue 12 May 2026 13:06:38 +0000
ROA not after:            Mon 10 Aug 2026 13:06:38 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2bb::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:04:df:2e:ec:87:1c:d4:03:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:38 2026 GMT
            Not After : Aug 10 13:06:38 2026 GMT
        Subject: CN=0273863e-a35f-4f50-b539-69ae2e1c47a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:22:b4:25:12:f5:62:0c:fe:03:8e:09:82:cc:
                    85:bc:93:6e:2f:01:8a:ec:ca:4f:9e:6c:c7:39:dc:
                    3a:87:36:25:85:6b:b6:6a:22:ff:82:75:95:bc:f3:
                    16:87:0d:0d:0f:1a:91:b1:58:3c:d6:e5:89:69:a7:
                    cc:b1:b4:a0:39:bf:55:ef:69:25:b1:72:ab:7b:b4:
                    45:ea:b4:79:93:f0:e1:b9:fe:ec:92:3b:9c:9d:f3:
                    eb:c5:fd:a8:85:bb:c0:ce:59:b9:13:9d:64:bb:4b:
                    97:00:65:4c:3c:0b:20:cd:d3:27:47:bb:22:85:be:
                    42:19:c0:87:61:6d:7f:6b:14:f7:e0:39:d8:23:58:
                    28:38:5d:23:9c:b8:d2:bd:52:57:3b:d0:97:7d:b8:
                    1c:f0:7a:03:e8:9a:57:16:6e:b2:b9:7b:de:1d:8a:
                    72:ee:b3:e5:a3:6a:c7:0c:be:c2:86:5c:49:bb:46:
                    1b:a5:fa:88:d7:99:dd:77:52:62:fd:0f:1e:11:c6:
                    05:af:be:76:96:41:d3:50:75:10:ff:db:aa:26:ca:
                    c3:37:53:f6:02:6a:a2:ac:42:18:fe:84:dc:7d:7d:
                    eb:ce:69:b8:ec:4d:a6:e5:84:ba:14:7c:19:ec:e3:
                    16:dd:7a:a2:48:0a:56:15:fb:d4:39:e7:55:bd:41:
                    9a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CE:31:57:F7:2A:09:DD:F1:02:F5:21:F1:3B:0A:95:8F:89:3C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/df00a90c-e22f-35b4-b92f-040c00a88549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2bb::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:e3:be:b2:62:38:a1:8f:1f:d6:28:17:9f:39:d3:89:d4:cf:
         f3:fd:86:75:2e:50:1f:a0:93:11:a4:65:de:bf:ab:34:2f:ca:
         bf:ac:9a:34:21:fb:a2:9d:a4:e8:98:8c:0d:bf:e1:96:44:0e:
         f1:d2:1e:9b:fe:9a:93:83:17:53:0d:de:31:1f:ba:75:5a:7f:
         00:c8:b7:58:fa:50:76:8d:0a:e6:d3:be:ff:61:9d:8a:11:15:
         ef:5f:af:52:82:3d:c8:cb:4f:f6:e2:19:5a:ab:e0:e8:6b:30:
         28:83:e5:69:e9:47:86:7a:bc:03:78:09:91:82:bd:12:6f:c9:
         9f:29:61:48:72:10:60:87:e4:b3:65:4e:35:87:eb:03:63:9f:
         2f:d5:6a:dd:2c:32:24:cf:d7:d8:19:e5:81:a6:b5:b4:c5:ee:
         2e:27:df:06:47:7e:c2:a6:32:5a:9c:ce:eb:01:2c:ad:cf:bc:
         75:19:49:f9:d6:46:24:23:a1:2d:62:58:7e:85:87:3c:4e:93:
         fd:7b:6f:fd:1e:a8:a6:3e:a6:d5:8b:23:0d:4b:c3:2a:4c:9c:
         15:a8:ac:dd:f9:21:9f:70:24:aa:c9:70:83:5a:80:29:28:ad:
         53:b5:57:49:63:db:67:fb:ac:3e:37:14:b8:1f:b1:ca:e0:b2:
         a7:22:4d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:25 2026 by rpki-client