Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/e805a4a6-0795-3d63-96e2-c5f7925bf1f8.roa
File:                     e805a4a6-0795-3d63-96e2-c5f7925bf1f8.roa (raw, json)
Hash identifier:          OZBy1NgRepCsH4d3bpdw9eFeK8pDPJxkS5WSMFrV0qo=
Subject key identifier:   22:7A:FA:B4:C1:07:BF:5A:C6:29:4F:E2:26:98:04:87:00:0A:BA:C1
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E1BC7A1C595635FE4B800
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/e805a4a6-0795-3d63-96e2-c5f7925bf1f8.roa
Signing time:             Tue 12 May 2026 13:06:48 +0000
ROA not before:           Tue 12 May 2026 13:06:48 +0000
ROA not after:            Mon 10 Aug 2026 13:06:48 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3f1::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:1b:c7:a1:c5:95:63:5f:e4:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:48 2026 GMT
            Not After : Aug 10 13:06:48 2026 GMT
        Subject: CN=a217e884-f01f-447b-9330-c1b90cff263e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:95:7a:56:af:d1:48:96:5d:eb:e1:05:9d:
                    76:a8:f7:2f:90:6c:7b:f5:28:6d:25:94:94:ab:57:
                    41:e2:93:3d:7c:8e:24:f0:58:ad:4f:0d:bf:63:82:
                    56:65:00:d9:3b:19:93:07:5d:cc:63:8e:6a:78:ba:
                    58:59:84:55:84:b1:fe:cb:64:ee:d3:d4:26:2f:39:
                    83:f5:f0:ae:5f:51:6c:b0:7e:54:9f:3b:ac:95:75:
                    38:bf:e1:4a:fd:83:94:05:ca:b9:dd:d1:a2:01:32:
                    82:33:77:7c:d1:2d:41:90:34:db:09:2a:d5:f0:4a:
                    b5:ea:f0:9c:7d:17:07:42:dc:4e:9b:37:c3:30:82:
                    b2:ba:a0:85:38:53:90:73:61:af:50:5b:f3:69:96:
                    ff:e9:7f:cc:51:8d:72:af:af:00:e9:ea:6b:45:9e:
                    2a:fa:3e:66:01:3a:2f:40:32:3f:a0:2c:a5:57:4a:
                    2a:35:2d:59:5e:ba:69:c5:b2:30:af:01:44:5d:3c:
                    8c:28:3a:ac:33:57:b8:be:62:b8:7a:f1:60:1f:4c:
                    e2:d9:67:64:09:f5:f9:58:e0:8b:36:c4:85:39:bd:
                    91:a7:39:50:57:fc:24:c5:70:dd:ee:6d:f2:30:ca:
                    ce:11:5e:b1:ce:f6:c2:5d:a1:99:a8:58:69:07:fd:
                    3b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7A:FA:B4:C1:07:BF:5A:C6:29:4F:E2:26:98:04:87:00:0A:BA:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/e805a4a6-0795-3d63-96e2-c5f7925bf1f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3f1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:bf:02:28:bd:6c:72:66:b2:68:76:5c:aa:88:8a:e0:89:b0:
         49:85:24:3d:bf:a7:a6:f6:8c:80:a9:0e:a8:d3:dd:e4:6a:3c:
         81:0b:e6:85:0d:6c:84:4c:9d:5f:6b:68:ea:20:9f:b1:24:74:
         c0:ca:1e:15:62:e8:d8:13:49:eb:33:54:7f:9b:3f:3c:ff:bf:
         a2:6e:15:50:e2:26:20:cc:91:e6:56:35:23:bf:0f:62:16:66:
         1b:4f:25:b3:7a:0c:b8:18:96:0a:00:58:d2:03:bf:65:a4:aa:
         15:31:53:64:69:b0:fd:bd:2f:ef:52:c3:51:a6:4d:b4:1e:f2:
         6a:a3:ce:f8:35:95:99:e9:69:95:fe:a6:d0:79:00:bd:ba:7b:
         35:aa:d0:80:2b:a1:d7:66:ef:af:49:bd:39:6c:48:a6:5d:09:
         cd:f9:80:8f:eb:c0:88:54:16:b6:e3:c3:40:1b:cf:7b:fc:1e:
         b4:9e:9d:dd:1c:68:38:e9:83:60:3f:81:17:88:f5:ba:7e:da:
         48:3f:0a:5e:c1:c8:b2:54:8a:78:ec:78:03:43:91:f9:15:86:
         a6:7b:ed:26:c3:5f:6e:79:d6:4f:01:7a:93:99:ec:8b:b7:f3:
         43:4b:ed:0b:48:90:ba:0b:2b:14:0a:02:32:35:b1:a1:5a:01:
         6c:89:02:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:12:51 2026 by rpki-client