Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/ea01e77b-316b-3601-a8ed-6797366a6a92.roa
File:                     ea01e77b-316b-3601-a8ed-6797366a6a92.roa (raw, json)
Hash identifier:          MvBV9qaWy9wPh1I2Rp7/HyS14rwSyipZ/esHthXXFeU=
Subject key identifier:   9D:A3:28:7B:13:12:2B:F9:4A:87:72:09:31:C4:FB:93:DC:FE:11:A2
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E179415C7A0D25BAEE480
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/ea01e77b-316b-3601-a8ed-6797366a6a92.roa
Signing time:             Tue 12 May 2026 13:06:46 +0000
ROA not before:           Tue 12 May 2026 13:06:46 +0000
ROA not after:            Mon 10 Aug 2026 13:06:46 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3ba::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:17:94:15:c7:a0:d2:5b:ae:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:46 2026 GMT
            Not After : Aug 10 13:06:46 2026 GMT
        Subject: CN=7df70c5f-c0f6-4890-92a6-d31db0127589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5a:5e:1c:1c:10:1d:3e:71:db:c3:6d:0e:52:
                    62:9a:d6:fb:8a:35:31:ca:14:be:d8:9b:39:93:0e:
                    2a:3e:02:0c:06:19:1f:56:90:19:14:63:dc:62:5b:
                    4d:61:4e:d9:83:bd:0d:9a:7c:6b:b1:7f:11:59:eb:
                    2e:84:e3:05:7e:33:9a:8b:1e:66:a3:f7:52:94:65:
                    27:f5:05:8c:17:54:b0:a4:5b:27:91:73:97:b5:8c:
                    e7:ab:14:60:36:1f:3e:1d:9a:e0:91:f1:9f:a6:13:
                    4f:f9:03:5e:d9:5a:1f:12:d2:9d:f4:b5:b8:63:40:
                    01:d2:ca:61:27:bd:8b:3f:0e:45:8b:6e:46:42:69:
                    f0:2a:02:e5:56:c7:7c:15:f5:bd:9b:88:9c:80:52:
                    e4:fa:e9:db:d8:b8:6b:68:4d:eb:2d:09:9e:df:eb:
                    37:c0:dc:57:c8:0a:94:68:8b:56:7e:ab:91:0b:4c:
                    c5:af:3b:f5:46:47:41:9a:ce:00:76:97:7c:6e:09:
                    de:b5:22:e1:02:8c:d9:6d:c0:26:aa:82:0d:58:ef:
                    db:b1:43:1c:52:7a:3c:6c:b6:80:b5:18:18:1e:cc:
                    15:26:30:4f:f0:0a:f9:b9:83:08:e2:6e:27:9f:c7:
                    43:a9:65:de:01:41:8e:1f:62:5e:be:9b:56:66:c5:
                    8c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A3:28:7B:13:12:2B:F9:4A:87:72:09:31:C4:FB:93:DC:FE:11:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/ea01e77b-316b-3601-a8ed-6797366a6a92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3ba::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:89:13:70:2e:d0:6a:c5:dd:ba:17:19:3c:53:b9:4c:38:92:
         70:03:00:9c:cb:2c:27:4d:e0:9f:40:f6:e9:2d:81:27:3e:03:
         65:54:09:bb:1f:a3:e0:34:66:bd:f3:e9:2f:07:79:52:56:06:
         5a:c1:67:55:07:c1:9b:29:1e:ba:05:71:c4:3c:3f:f3:de:a4:
         b7:35:58:1a:27:1d:dd:4a:c0:f3:e6:68:b7:3f:9d:ad:54:6c:
         61:08:8b:a5:37:fa:f3:80:45:b6:37:0b:61:63:5b:2b:86:a3:
         a4:9a:06:67:fd:48:95:ec:f5:78:29:2f:a8:77:0d:28:66:2e:
         14:42:99:0c:e9:21:d5:02:bc:7a:08:5d:c2:d8:06:09:2f:fe:
         16:dc:34:25:51:bb:68:a7:de:18:e7:d7:c4:ba:47:9b:fe:7e:
         b3:9a:3e:26:8a:13:6e:0c:c6:1e:77:75:2f:58:74:67:2d:ec:
         bc:b1:72:7c:e3:56:27:69:e0:71:d7:85:1d:20:ae:69:3e:35:
         5d:ff:18:35:46:6d:66:f1:25:9b:1b:cb:9a:01:8e:27:37:97:
         b7:6e:ba:61:79:c9:54:60:d7:a3:95:ed:d1:af:72:7d:4f:03:
         52:79:48:df:fb:9a:a4:ea:a6:70:79:b0:b0:70:1f:1c:a6:7f:
         a7:96:39:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:11 2026 by rpki-client