Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/f7125449-5eda-32b1-8427-0307f0b0afa3.roa
File:                     f7125449-5eda-32b1-8427-0307f0b0afa3.roa (raw, json)
Hash identifier:          aC4GvjhfI/dhHfcm+eUnmjY2KwuGkm+d5WdGttMvu+U=
Subject key identifier:   4C:FC:C3:9D:BF:51:30:42:D3:D7:9A:05:41:E5:A9:C8:11:6F:1C:74
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DE8365A9CAB5BE2671340
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/f7125449-5eda-32b1-8427-0307f0b0afa3.roa
Signing time:             Tue 12 May 2026 13:06:24 +0000
ROA not before:           Tue 12 May 2026 13:06:24 +0000
ROA not after:            Mon 10 Aug 2026 13:06:24 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:101::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:e8:36:5a:9c:ab:5b:e2:67:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:24 2026 GMT
            Not After : Aug 10 13:06:24 2026 GMT
        Subject: CN=d4bea2b6-00d8-4093-9c4f-208e7af659d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:23:04:c8:5c:1a:65:92:48:14:61:fd:1a:
                    7f:5f:62:7a:1e:b8:58:2a:d2:c5:b7:8b:65:f0:c6:
                    cd:57:ff:4d:2f:6f:bf:b5:65:c4:1f:cf:8d:7d:a6:
                    83:2a:f7:63:a1:3d:99:eb:05:72:19:92:00:f0:43:
                    70:d5:9c:bf:6f:48:36:2c:77:c1:33:3b:a5:cd:13:
                    57:73:15:91:53:f7:f6:11:2e:c6:e5:ea:e3:40:ba:
                    73:3e:fe:74:31:78:6f:7a:05:8c:2a:85:8b:89:1a:
                    20:9b:de:8d:aa:a9:7f:8d:93:37:b4:86:7e:95:ca:
                    71:78:3d:25:4f:93:aa:48:72:73:0a:05:4c:45:27:
                    0b:d5:da:80:b0:9c:67:bf:8b:88:f1:19:79:41:2e:
                    c3:d9:52:54:f6:9c:2e:12:7e:6d:e6:a7:11:1c:f1:
                    89:c5:34:43:d7:90:9f:82:60:8d:91:36:6e:9e:b5:
                    eb:46:67:ac:fc:93:d8:0d:99:13:e0:88:6a:a5:13:
                    27:a3:b8:2d:75:2c:fe:d0:74:89:c7:0b:aa:5b:87:
                    be:59:f1:45:c2:5f:59:5f:7a:0e:e5:d9:11:25:f2:
                    41:ff:00:b1:7d:92:53:f9:1b:ea:18:cd:ec:fc:80:
                    97:0d:95:41:87:98:91:2c:be:a7:4b:75:94:ff:f0:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FC:C3:9D:BF:51:30:42:D3:D7:9A:05:41:E5:A9:C8:11:6F:1C:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/f7125449-5eda-32b1-8427-0307f0b0afa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:101::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:3b:92:96:f6:13:3d:65:2d:18:da:07:be:e1:0b:2a:36:3f:
         05:fc:23:ee:3d:07:4f:c8:78:40:43:55:33:6d:bb:c6:0d:09:
         64:7b:ed:9e:1b:5d:05:47:70:54:83:99:95:a7:3e:5f:01:4b:
         ce:53:8d:80:fe:ba:d9:f3:7a:c8:2c:02:7e:d8:0f:1b:df:78:
         b9:23:13:3a:86:e1:63:47:7f:9e:2a:b3:28:7c:4b:c2:7e:af:
         0e:ed:80:89:0a:7b:11:be:b4:2c:e8:62:1b:7f:fb:9f:04:a6:
         59:b0:3b:4f:c1:9e:81:10:3f:fb:a2:a7:d9:7d:32:b0:3a:80:
         0f:f3:44:6b:ad:ff:6b:f6:68:dc:c3:0d:07:d9:c4:0e:43:1d:
         c6:0c:86:52:67:76:1a:46:da:53:30:84:5c:3b:3d:f9:77:18:
         a0:35:ed:a9:1b:0e:2c:99:94:b6:a6:9e:de:84:60:e1:63:90:
         fb:7d:04:d2:d7:48:57:23:be:93:09:19:6f:1e:87:f2:91:d0:
         b4:f4:e1:c0:7b:81:0c:8a:32:8a:92:71:7f:bf:00:9e:73:6d:
         ed:b4:13:88:18:62:80:a9:e3:44:64:c6:d5:aa:9d:d9:d1:ef:
         47:c4:6d:d2:88:6e:82:ba:51:f8:d4:50:11:57:62:34:c9:29:
         66:72:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:47 2026 by rpki-client