Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/ef1b1b4b-2319-302f-b47f-5b50dc379a5a.roa
File:                     ef1b1b4b-2319-302f-b47f-5b50dc379a5a.roa (raw, json)
Hash identifier:          oqga/HjMjDOqkEsElHNXHda33Yz/0RMpHQ1mwWrPxL0=
Subject key identifier:   1A:DD:CA:4F:8B:E2:AB:54:99:50:4E:74:75:A6:6D:07:B5:7C:8D:B9
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E135049D4683223652900
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/ef1b1b4b-2319-302f-b47f-5b50dc379a5a.roa
Signing time:             Tue 12 May 2026 13:06:44 +0000
ROA not before:           Tue 12 May 2026 13:06:44 +0000
ROA not after:            Mon 10 Aug 2026 13:06:44 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:382::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:13:50:49:d4:68:32:23:65:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:44 2026 GMT
            Not After : Aug 10 13:06:44 2026 GMT
        Subject: CN=0dcadd5d-2c86-4045-82f1-7923e9d8789c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:32:d6:a6:39:f8:37:71:c3:fc:df:ef:ec:
                    a0:6a:8b:de:fc:ea:34:6d:72:10:e7:82:a6:b6:fb:
                    69:e3:c5:ca:31:6b:d1:57:4f:39:94:7d:70:36:31:
                    c7:30:6c:16:aa:93:f7:a8:d6:4b:55:f8:8d:ba:5e:
                    0e:5f:9b:ca:b8:e8:0b:ec:a7:40:d0:1a:7a:7d:32:
                    eb:78:76:11:32:b4:c3:d7:9b:6c:d3:af:45:a4:41:
                    07:90:b0:72:91:d9:bc:14:bb:54:4e:d4:24:5d:59:
                    1e:ca:a2:53:89:2f:ca:34:31:53:4c:86:ab:1a:9a:
                    8e:fc:73:e7:db:09:c0:6f:3e:91:ab:59:e9:eb:df:
                    79:23:d9:83:f1:c7:94:0b:81:e4:6d:6a:de:01:ca:
                    a0:ec:10:35:6a:b3:85:b7:1c:d1:f2:80:88:64:06:
                    83:3d:04:bc:70:ad:4d:48:d9:e3:30:fb:fb:3a:76:
                    0a:af:e8:dd:84:a2:d5:a0:48:5e:92:4d:2b:20:96:
                    1e:28:44:6b:b1:14:53:fe:99:18:be:72:60:1d:19:
                    f5:32:5a:63:b1:0e:c1:39:c8:14:8c:8c:02:f5:aa:
                    6c:de:b0:6f:ea:1a:77:25:60:c6:d6:c1:2c:42:bd:
                    c6:8f:b5:07:2a:fd:48:88:7b:92:d9:ac:ca:8d:02:
                    59:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DD:CA:4F:8B:E2:AB:54:99:50:4E:74:75:A6:6D:07:B5:7C:8D:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/ef1b1b4b-2319-302f-b47f-5b50dc379a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:382::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ad:dc:11:c9:b8:eb:08:e1:e7:ee:f6:2e:d3:f4:4c:00:12:
         a0:1e:c0:c5:2f:b7:1e:32:a6:dc:ee:1f:27:7b:54:f2:4f:2e:
         f4:c7:ed:56:a0:14:f9:44:c1:93:68:ce:7e:ae:16:1e:f1:c0:
         a1:a1:63:4b:66:21:d6:10:a1:a8:8c:c6:73:e0:5b:a7:92:95:
         36:0b:29:84:40:c5:d1:b9:47:a5:75:6f:a9:78:64:eb:0e:23:
         82:f9:dc:5e:5f:7e:21:c0:23:43:5c:3a:27:08:88:36:85:38:
         4b:c7:65:b3:98:67:cc:c4:c9:b4:8c:cc:62:f1:17:9c:80:a3:
         7f:3e:39:29:be:96:4a:6b:9f:93:34:25:81:60:90:cb:97:48:
         c8:9b:44:5a:8b:07:e8:87:09:50:7f:03:7e:a0:12:94:ce:ab:
         0c:66:a8:53:9f:3d:27:f6:9c:dd:8f:bc:ee:2e:90:7f:65:4c:
         91:42:41:13:0b:91:0e:77:3f:ac:a6:7e:74:e8:16:0d:68:7c:
         39:74:30:9f:62:ed:bc:c8:18:1c:f2:4c:de:74:81:16:5a:2a:
         2d:c4:e0:9b:fc:37:f4:c0:92:b2:8e:7b:15:b2:8e:44:22:70:
         f4:39:63:95:c2:52:5e:62:91:dc:4e:06:a6:aa:e0:b3:4f:26:
         8e:37:30:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:56 2026 by rpki-client