Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/f8e1d052-677e-33e2-b8e6-837a12147b95.roa
File:                     f8e1d052-677e-33e2-b8e6-837a12147b95.roa (raw, json)
Hash identifier:          YQZZrmD6KwOE0iKgk9Jz8LCYzR80rMmrB4L7ZBLTpdo=
Subject key identifier:   B7:8A:32:89:A4:32:A8:FE:E8:77:50:96:AC:27:FD:47:D9:7D:69:CF
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DEC79A010264367C5A580
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/f8e1d052-677e-33e2-b8e6-837a12147b95.roa
Signing time:             Tue 12 May 2026 13:06:26 +0000
ROA not before:           Tue 12 May 2026 13:06:26 +0000
ROA not after:            Mon 10 Aug 2026 13:06:26 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:148::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:ec:79:a0:10:26:43:67:c5:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:26 2026 GMT
            Not After : Aug 10 13:06:26 2026 GMT
        Subject: CN=1d522a67-19de-4b52-9984-72f58f55751c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:0c:68:a6:d5:f6:81:95:dc:35:b5:0d:ce:
                    5c:21:96:6b:4a:f5:fc:b4:d4:32:e7:17:1d:40:f2:
                    b1:1c:27:04:0b:f9:59:67:ac:e9:31:23:bb:80:82:
                    ab:11:0a:26:58:4c:c2:eb:ad:98:3e:6a:f1:54:7e:
                    16:5d:16:28:7a:7f:ea:07:f7:01:a0:25:c5:c8:cd:
                    37:f5:9a:bd:ce:12:d1:ed:88:a8:39:b0:0a:3d:5c:
                    36:73:75:b4:ff:5d:80:bd:bf:bf:14:52:f9:53:cc:
                    ad:3c:e7:92:6c:94:ec:58:c9:00:ee:51:aa:3d:b5:
                    c3:84:5a:95:86:10:95:ab:5b:54:a8:97:7f:e8:51:
                    d3:64:56:64:d2:59:b7:4c:92:e6:45:a5:d4:0a:4c:
                    24:99:ad:af:c8:5f:02:87:30:0b:eb:75:f6:d7:26:
                    33:e1:15:3c:43:51:ef:63:b0:a0:c2:d0:c9:e4:e5:
                    9d:72:18:2b:69:e3:2a:cd:1f:39:cd:97:66:9d:7e:
                    50:23:ca:e1:48:7a:e5:0f:df:59:e8:71:3f:7e:b4:
                    df:e7:ad:b6:84:b9:7a:b5:22:14:76:c4:df:ee:78:
                    89:dc:5d:41:4e:24:e8:8f:52:18:5d:21:de:39:4f:
                    6a:37:fd:20:4d:5a:e7:14:4a:c5:d6:88:09:e1:d7:
                    6e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8A:32:89:A4:32:A8:FE:E8:77:50:96:AC:27:FD:47:D9:7D:69:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/f8e1d052-677e-33e2-b8e6-837a12147b95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:148::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:87:47:a3:b7:9b:63:32:f3:74:88:97:f9:91:c6:fc:c3:18:
         2e:52:6b:fe:88:75:68:0f:9e:4c:9c:c9:cd:7c:d7:e7:ba:e0:
         33:0d:65:05:5b:96:50:8e:e8:aa:39:05:2f:e9:5d:d8:8b:f1:
         cd:e2:d4:cf:7d:d1:00:12:21:02:d5:ad:f3:64:71:4b:5f:99:
         cb:f1:0e:7e:2f:42:fc:b2:da:3e:64:7d:67:89:79:c4:d3:ab:
         15:ba:47:23:3c:13:03:b3:54:0a:f9:49:c2:09:6e:3d:2f:d3:
         de:23:a4:32:ab:5d:34:13:f2:37:7f:e5:0a:28:80:df:00:62:
         cf:58:a7:2d:40:42:4d:4f:60:17:b3:c6:9e:1e:13:30:22:fb:
         4b:88:46:f5:83:70:1c:10:cb:e5:03:e8:18:be:8d:2e:f4:84:
         09:e0:04:de:cb:fd:50:3a:4a:b5:c7:94:b4:85:d6:5b:4c:ce:
         a4:a3:fb:55:3f:a8:a7:a2:2d:f4:77:e7:03:f0:2e:d5:f8:2e:
         19:ee:d2:86:32:dc:17:b3:b6:89:3a:d7:96:ae:7e:14:23:b4:
         fb:04:96:1c:05:3b:2e:2b:d6:15:75:5a:ed:4f:bc:93:6d:7d:
         18:30:51:49:43:7a:80:55:ce:75:5c:63:03:94:29:ef:d7:9f:
         7a:d4:a3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:42 2026 by rpki-client