Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/f3f0859b-fdc0-3024-b0e5-f7b0def4aacc.roa
File:                     f3f0859b-fdc0-3024-b0e5-f7b0def4aacc.roa (raw, json)
Hash identifier:          G2beqcpX+jG3Bp6srqUES8aLYo9tFAiM/Q78KsEEKNE=
Subject key identifier:   EA:CF:7D:F2:FE:03:8D:76:42:92:79:7D:C3:13:36:25:C3:23:4B:50
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2E0A5BC3C52D0E141FE700
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/f3f0859b-fdc0-3024-b0e5-f7b0def4aacc.roa
Signing time:             Tue 12 May 2026 13:06:40 +0000
ROA not before:           Tue 12 May 2026 13:06:40 +0000
ROA not after:            Mon 10 Aug 2026 13:06:40 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:309::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2e:0a:5b:c3:c5:2d:0e:14:1f:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:40 2026 GMT
            Not After : Aug 10 13:06:40 2026 GMT
        Subject: CN=6e889506-4b02-4f93-81f9-4cd1f23f4a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:44:9b:ba:e0:42:67:ca:73:a2:b3:8e:e1:75:
                    9a:c4:9c:bd:15:0c:a8:7f:64:4c:23:16:5a:b4:b4:
                    f9:6f:b5:52:2f:59:0a:5f:7e:1a:06:5a:95:2c:64:
                    ac:d6:4b:43:76:cc:5a:db:25:5e:e5:b0:36:f0:f1:
                    89:96:2f:fa:2a:62:db:08:b5:01:9e:07:74:67:7b:
                    4b:4a:a0:aa:f0:bd:37:87:b7:71:dc:7e:4e:9b:e7:
                    db:f0:85:b6:a6:66:bb:59:70:38:20:13:12:92:07:
                    cb:32:60:3d:89:41:d0:9c:e9:64:12:d4:db:20:ff:
                    86:ce:28:46:86:38:de:2a:6e:89:f3:29:66:e9:fb:
                    c0:57:ac:d6:e6:3c:a3:e1:c9:db:fc:ae:56:2d:ae:
                    7f:32:76:19:12:31:bc:84:8c:57:9e:e2:c1:88:f4:
                    5d:fc:97:7c:e7:1b:cd:54:dc:85:45:08:27:8e:70:
                    3d:a0:07:62:04:0a:2e:0f:c4:99:af:bf:6e:59:2a:
                    90:cc:62:a5:93:8c:7b:6f:1a:96:b4:ef:18:3f:83:
                    69:9c:7b:57:69:ed:b6:fa:00:28:c3:d4:02:18:17:
                    a1:67:3d:f6:37:3e:66:14:21:dc:4e:e8:af:d1:21:
                    5a:b3:2a:05:2e:eb:60:14:19:4d:6c:cd:e2:41:aa:
                    48:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CF:7D:F2:FE:03:8D:76:42:92:79:7D:C3:13:36:25:C3:23:4B:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/f3f0859b-fdc0-3024-b0e5-f7b0def4aacc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:309::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:56:cf:4e:ee:62:52:62:76:47:60:6c:ca:a2:09:1c:64:08:
         d4:28:c0:24:52:e7:d9:3b:02:31:cb:62:80:a5:87:57:e8:e1:
         4c:63:2f:f0:c3:b4:e5:70:11:12:b3:1f:ca:f2:09:dc:0c:d3:
         00:9b:06:36:cf:55:19:d1:6f:9d:d1:56:fc:4a:d7:44:8a:15:
         7a:f0:08:e0:f6:0e:59:4e:c9:81:6f:62:6e:39:85:a3:23:07:
         64:63:33:9c:a1:e7:3a:c2:6c:54:92:76:2f:be:91:8f:bf:e6:
         b2:88:28:76:97:91:97:1a:b2:90:ad:d3:00:10:7e:e9:93:f0:
         14:e7:0e:9c:b1:ee:10:c2:5a:35:d8:c5:0a:11:69:5a:e0:64:
         e5:71:17:12:c0:40:8f:3a:b0:87:0b:7f:39:a1:1e:83:f8:8a:
         85:cb:15:99:5b:54:af:4f:26:bb:d7:f5:8f:1c:fe:db:f3:0f:
         68:3d:7f:3b:f9:7f:82:e7:db:ea:73:d3:fa:50:bd:32:53:62:
         98:14:f3:0f:32:cb:84:9f:80:11:f8:9c:10:92:bb:4d:03:3b:
         58:1d:d4:44:90:6f:59:95:98:2e:c8:b1:cc:6d:69:3b:3d:58:
         74:39:08:fa:2d:79:af:53:3e:b7:85:fe:14:e0:83:60:3f:f2:
         db:4a:52:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:42:40 2026 by rpki-client