Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/f011f75f-8922-3cc7-8e48-bc9dde919db8.roa
File:                     f011f75f-8922-3cc7-8e48-bc9dde919db8.roa (raw, json)
Hash identifier:          u67NKd85F2TEx4+CFnsuo9FEzOtBeNXEiJ9fn92omh4=
Subject key identifier:   28:C5:80:01:0A:93:07:BF:C0:02:4D:63:75:72:81:E7:37:F4:63:A3
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DED35273045E618FDC664
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/f011f75f-8922-3cc7-8e48-bc9dde919db8.roa
Signing time:             Tue 12 May 2026 13:06:26 +0000
ROA not before:           Tue 12 May 2026 13:06:26 +0000
ROA not after:            Mon 10 Aug 2026 13:06:26 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:154::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:ed:35:27:30:45:e6:18:fd:c6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:26 2026 GMT
            Not After : Aug 10 13:06:26 2026 GMT
        Subject: CN=426c528f-a777-4453-a6b7-d350e77a2a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:1d:0c:ae:f2:05:b9:98:7e:46:c0:99:69:
                    d5:00:c8:4f:6c:d3:f9:4c:c6:93:7d:1b:e3:45:2d:
                    4e:ec:a2:90:fd:54:40:1a:a3:f5:31:0a:e9:ee:cb:
                    cb:4f:ee:47:59:a6:06:27:ea:38:f1:38:35:c3:10:
                    9b:54:7f:db:7b:30:a1:91:37:00:04:d9:b2:7e:96:
                    5f:20:6e:a6:9d:4e:a2:9d:fc:1d:e6:28:7a:2b:22:
                    e4:fb:43:eb:64:cb:a8:86:cb:45:ed:b1:22:2a:40:
                    da:14:50:d5:c1:35:46:bb:74:ce:ff:d0:c0:b9:07:
                    8c:90:ec:2e:99:9c:fe:01:4a:6d:f8:42:46:12:60:
                    bf:37:56:3b:55:ad:cb:14:41:ba:b4:ea:07:54:82:
                    be:50:b9:18:2b:20:10:5e:b4:cf:8f:e5:43:36:1f:
                    5a:41:f7:9b:2e:a1:d5:6b:83:d9:71:ec:d5:4f:d9:
                    fb:05:2c:5a:71:49:0d:6d:0c:f3:7f:f6:85:18:48:
                    bf:3d:59:c3:e1:04:fa:61:f8:2d:d6:a8:f3:bb:27:
                    db:14:57:2a:bc:ba:ec:5c:ef:da:d2:b7:c4:8e:be:
                    59:16:1d:2b:7a:1e:f5:c5:d6:e2:ca:35:c3:74:a6:
                    aa:5b:29:20:db:1a:86:d2:e1:d3:21:98:78:27:47:
                    a4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C5:80:01:0A:93:07:BF:C0:02:4D:63:75:72:81:E7:37:F4:63:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/f011f75f-8922-3cc7-8e48-bc9dde919db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:154::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:86:e2:7f:39:d4:f9:b8:5b:77:55:df:86:d6:1f:ec:e7:11:
         95:c6:24:b7:4f:62:1d:84:14:86:b9:4a:53:2e:27:33:dd:25:
         2c:97:8c:9e:3a:75:47:83:75:d3:cf:a8:08:5f:fa:20:2d:8b:
         5f:e7:fc:a2:b9:d9:8b:1d:40:fd:f7:54:1f:98:6e:65:83:11:
         f5:11:67:01:f2:2b:3d:2e:9a:0f:a0:03:14:5a:3c:4b:91:db:
         d1:72:57:4c:39:4b:7f:9c:b6:be:22:22:a3:2b:64:98:c0:37:
         db:7a:88:88:8c:19:99:15:5c:ce:12:5e:fc:a7:ed:d9:a8:07:
         67:c9:49:f5:e8:2f:43:90:a3:61:05:a9:0b:36:ab:f2:66:86:
         5f:27:0e:a7:61:37:b0:71:ef:94:93:e1:98:2f:16:f9:96:47:
         b8:18:11:c7:27:c5:b4:ae:f4:4c:77:39:b0:e2:e7:8d:94:73:
         06:e2:a4:13:69:36:89:28:a5:83:86:91:54:3a:7b:42:43:e1:
         6e:6d:a9:7c:01:f6:0f:e5:26:5e:28:89:1e:6e:06:14:32:8d:
         55:ee:b1:05:87:fa:ed:2f:f6:bd:83:7c:b0:0e:65:d7:31:e4:
         1f:4c:fa:82:a0:eb:97:f7:f6:d5:4e:99:fb:56:57:0a:3a:30:
         6b:a3:cd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:52 2026 by rpki-client