Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/df34e552-16ff-35b9-a88f-5934467da499.roa
File:                     df34e552-16ff-35b9-a88f-5934467da499.roa (raw, json)
Hash identifier:          CJOzGvoRX3YSuY+i+dXWp5JmzBX02/efzdFAwlSrEkA=
Subject key identifier:   FA:12:5B:4E:07:2C:38:09:1D:5F:C8:A0:16:3F:26:48:D5:91:6F:FF
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DEF93408668E509BFD2C0
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/df34e552-16ff-35b9-a88f-5934467da499.roa
Signing time:             Tue 12 May 2026 13:06:27 +0000
ROA not before:           Tue 12 May 2026 13:06:27 +0000
ROA not after:            Mon 10 Aug 2026 13:06:27 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:179::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:ef:93:40:86:68:e5:09:bf:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:27 2026 GMT
            Not After : Aug 10 13:06:27 2026 GMT
        Subject: CN=42088b92-3c22-4daa-b1bc-f046d362ac33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:da:df:55:0b:ad:b3:23:0d:cd:94:11:bc:
                    73:96:2e:46:7b:76:10:ca:77:42:bc:5b:e5:d3:88:
                    fc:4a:8e:23:85:3b:40:99:b4:9d:5f:50:8c:b4:69:
                    6a:55:6e:61:37:06:5a:c1:59:5a:1c:21:91:ae:03:
                    6e:be:1a:ef:55:2b:f3:53:42:0f:1b:04:9a:68:11:
                    3c:8d:e0:ef:32:de:ef:f1:c5:9e:72:c0:14:16:ff:
                    5c:de:02:c7:c9:e3:d0:5d:11:05:c4:83:77:46:cb:
                    33:62:4f:df:26:28:6f:38:40:c8:81:89:4a:68:f8:
                    f1:0c:03:f5:b8:8a:05:56:21:b7:6d:12:fe:f9:0b:
                    d1:88:5d:5f:ed:69:1e:db:c6:cd:06:c4:d3:0a:4f:
                    f5:f8:0c:f7:34:87:6e:27:ca:b2:ae:26:26:75:d3:
                    9c:c3:bb:01:66:07:7d:58:59:e6:ef:b7:8f:56:ec:
                    2e:aa:64:08:32:ee:dd:ba:62:77:d2:f0:ac:d0:35:
                    95:bf:fa:0e:11:c5:ab:0f:b2:22:95:20:38:91:f3:
                    7f:b4:3d:16:7e:dd:8d:d8:76:18:a9:78:bb:4d:3d:
                    02:31:1b:0a:ea:c9:6f:c4:35:36:0b:9c:ae:9f:b6:
                    ce:33:2a:ba:3d:0b:6a:86:31:22:dd:4f:db:15:14:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:12:5B:4E:07:2C:38:09:1D:5F:C8:A0:16:3F:26:48:D5:91:6F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/df34e552-16ff-35b9-a88f-5934467da499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:179::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:bf:46:89:cf:a9:8b:c5:b6:05:02:1c:76:0e:65:6e:71:44:
         36:02:0a:68:3c:17:e9:0e:a9:90:db:20:08:0b:5e:67:1e:3e:
         73:79:25:a4:58:99:ca:62:28:b1:07:7f:95:ae:06:6f:ea:70:
         d8:26:3e:f6:39:12:35:14:30:3b:a1:e1:80:36:ed:cb:59:31:
         e6:75:82:59:c0:04:a9:07:10:84:4a:6d:c4:2d:72:d5:50:71:
         22:f3:96:bc:ec:c8:d7:7b:ef:95:15:a7:5c:55:20:48:04:db:
         e2:da:95:d8:8a:52:9f:f7:03:5c:b7:70:0c:c4:1f:cf:7d:f0:
         34:d5:74:44:6a:65:2d:8b:d7:82:c5:37:9b:f4:d1:58:b5:87:
         38:42:27:b1:22:21:d2:09:09:55:ba:7d:e6:80:69:b0:7c:8b:
         f5:82:95:c1:c0:fa:5b:10:4a:ad:3f:f7:74:d4:d1:78:f6:b6:
         f7:76:6a:03:32:57:e2:c2:47:ba:07:f2:6c:f4:12:68:cc:39:
         3e:5a:77:80:73:bf:b3:34:2d:af:b5:47:a3:af:d1:53:6e:22:
         89:11:9f:f9:51:44:fc:4d:b3:7d:93:93:6c:e4:60:8e:d7:04:
         ff:ad:86:3d:45:74:68:ab:18:4f:d9:01:ef:b9:84:4e:14:a2:
         f9:f7:ad:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:32:46 2026 by rpki-client