Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/dfda63b0-f40c-3618-bc8e-4c2a8bbe8256.roa
File:                     dfda63b0-f40c-3618-bc8e-4c2a8bbe8256.roa (raw, json)
Hash identifier:          QAgEhu3AaKS6mAJZ9H+y/tuv1vA9NrqBtTpB46kndt8=
Subject key identifier:   A7:8A:AC:60:CB:3F:D6:B3:77:F6:BF:9D:98:CE:20:7E:F1:BC:9F:14
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DE395E1A6F4EC8B28CC80
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/dfda63b0-f40c-3618-bc8e-4c2a8bbe8256.roa
Signing time:             Tue 12 May 2026 13:06:22 +0000
ROA not before:           Tue 12 May 2026 13:06:22 +0000
ROA not after:            Mon 10 Aug 2026 13:06:22 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:b1::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:e3:95:e1:a6:f4:ec:8b:28:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:22 2026 GMT
            Not After : Aug 10 13:06:22 2026 GMT
        Subject: CN=b2d07aa7-8b4a-47cd-84ee-b46fd32a5017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:16:e5:32:58:80:f2:a4:5b:ab:b8:6a:a0:05:
                    12:c4:ce:e5:4e:31:ff:22:ec:e7:20:04:3b:74:9f:
                    89:86:a8:58:a2:52:a3:4c:10:db:d2:92:06:ed:5b:
                    e9:f8:d2:cc:15:fc:f0:34:c5:b6:aa:31:24:a5:23:
                    5e:ed:9c:81:07:e7:7f:85:f4:46:c3:ed:10:4e:93:
                    11:e3:ec:77:e2:d5:cc:69:fd:d9:ad:4f:df:67:02:
                    3e:a1:3a:8a:8b:76:5f:c5:b9:59:14:21:51:94:a9:
                    32:68:56:f7:bd:42:5f:5a:b4:d0:71:de:36:70:5a:
                    c7:c4:fb:80:12:a1:aa:c3:ff:f7:4c:fe:f9:6c:bd:
                    3e:31:36:67:4a:73:ff:8f:98:90:a5:73:5c:92:87:
                    e7:ff:0b:89:f2:40:e6:56:eb:66:a7:52:15:8b:96:
                    f1:7d:e7:ad:9f:08:9c:b8:5a:7b:ef:da:6e:7e:bd:
                    94:2a:73:82:39:63:7b:93:36:4d:69:cb:dc:9a:fb:
                    ac:74:96:2a:dd:fa:39:58:ef:c7:6a:f6:49:87:d5:
                    88:34:31:5c:03:ef:b2:ac:d5:65:d4:c3:c8:44:4a:
                    92:98:37:95:8e:5f:1f:06:ec:22:10:ad:28:55:0e:
                    07:e4:4d:72:d2:92:af:89:b1:8c:8f:3a:d9:f1:dc:
                    f6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8A:AC:60:CB:3F:D6:B3:77:F6:BF:9D:98:CE:20:7E:F1:BC:9F:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/dfda63b0-f40c-3618-bc8e-4c2a8bbe8256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:b1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:38:fa:9d:4c:96:98:39:7a:87:13:12:7f:d4:5e:c8:15:ef:
         45:99:48:97:3e:d7:ae:cd:6d:16:85:59:cf:d8:a2:6b:7a:1a:
         44:50:e0:6d:6e:ab:65:7e:34:fd:28:89:11:dd:c1:24:e9:67:
         8f:0d:fa:56:a7:f6:81:e3:8a:b9:17:2f:ac:58:de:ab:c3:12:
         21:2a:62:0f:3f:ca:ca:69:d8:b4:67:73:78:64:bb:e4:74:ca:
         23:ac:f4:0d:26:20:e7:12:e9:0e:86:cb:ec:e1:bd:3f:b0:68:
         b2:fc:b7:27:75:f6:7b:3f:51:d1:c2:69:e3:a2:5c:b3:6d:92:
         96:a3:c8:41:dc:9d:61:c6:61:d7:1d:07:86:8b:71:a0:2c:a8:
         16:2b:80:a4:8a:f1:d7:51:e5:d4:9c:64:c8:8d:a7:d6:ea:40:
         a8:62:49:a4:60:94:03:e1:71:1f:b9:f8:45:7f:76:29:f3:34:
         16:5b:34:03:33:b4:d0:35:7c:7d:81:a4:15:8e:e3:cc:cd:5d:
         6a:32:f9:b4:ff:9b:98:d1:eb:9c:10:5c:8f:a7:60:56:d5:eb:
         93:c0:ef:32:a3:bb:3d:81:b4:2c:3d:64:43:b0:64:f3:8d:93:
         36:02:19:20:63:4f:89:8c:09:81:5c:ac:8d:3c:0b:b7:a3:61:
         42:e3:ac:33
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLeOV4ab07IsozIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYyMloXDTI2MDgxMDEzMDYyMlowLzEtMCsGA1UEAxMk
YjJkMDdhYTctOGI0YS00N2NkLTg0ZWUtYjQ2ZmQzMmE1MDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRblMliA8qRbq7hqoAUSxM7lTjH/IuznIAQ7
dJ+JhqhYolKjTBDb0pIG7Vvp+NLMFfzwNMW2qjEkpSNe7ZyBB+d/hfRGw+0QTpMR
4+x34tXMaf3ZrU/fZwI+oTqKi3ZfxblZFCFRlKkyaFb3vUJfWrTQcd42cFrHxPuA
EqGqw//3TP75bL0+MTZnSnP/j5iQpXNckofn/wuJ8kDmVutmp1IVi5bxfeetnwic
uFp779pufr2UKnOCOWN7kzZNacvcmvusdJYq3fo5WO/HavZJh9WINDFcA++yrNVl
1MPIREqSmDeVjl8fBuwiEK0oVQ4H5E1y0pKvibGMjzrZ8dz2fQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFKeKrGDLP9azd/a/nZjOIH7xvJ8UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvZGZkYTYzYjAtZjQwYy0z
NjE4LWJjOGUtNGMyYThiYmU4MjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
ALEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAETj6nUyWmDl6hxMSf9ReyBXvRZlIlz7Xrs1tFoVZz9iia3oa
RFDgbW6rZX40/SiJEd3BJOlnjw36Vqf2geOKuRcvrFjeq8MSISpiDz/KymnYtGdz
eGS75HTKI6z0DSYg5xLpDobL7OG9P7Bosvy3J3X2ez9R0cJp46Jcs22SlqPIQdyd
YcZh1x0HhotxoCyoFiuApIrx11Hl1JxkyI2n1upAqGJJpGCUA+FxH7n4RX92KfM0
Fls0AzO00DV8fYGkFY7jzM1dajL5tP+bmNHrnBBcj6dgVtXrk8DvMqO7PYG0LD1k
Q7Bk842TNgIZIGNPiYwJgVysjTwLt6NhQuOsMw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:40:54 2026 by rpki-client