Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/fec5afec-9364-3a2b-9b3f-e531347b7623.roa
File:                     fec5afec-9364-3a2b-9b3f-e531347b7623.roa (raw, json)
Hash identifier:          fZg7hfBrJcieZNPDIn5lGEszLcCAl61io/wXfL/tDAM=
Subject key identifier:   66:7A:27:8B:70:D4:B1:86:4C:1F:18:5C:4E:00:29:10:F1:69:FC:56
Certificate issuer:       /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial:       010D0C9F4328584DCF2DF08E3DBB2F1EEF5BB400
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/fec5afec-9364-3a2b-9b3f-e531347b7623.roa
Signing time:             Tue 12 May 2026 13:06:28 +0000
ROA not before:           Tue 12 May 2026 13:06:28 +0000
ROA not after:            Mon 10 Aug 2026 13:06:28 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:189::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2d:f0:8e:3d:bb:2f:1e:ef:5b:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
        Validity
            Not Before: May 12 13:06:28 2026 GMT
            Not After : Aug 10 13:06:28 2026 GMT
        Subject: CN=31a1aea1-66a4-4c0c-b1f3-053b93eae2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c3:3a:0c:1a:98:9b:6a:51:84:07:70:c9:5a:
                    91:2c:a1:e6:8b:81:b3:cc:74:d2:ac:02:94:49:74:
                    82:8a:47:7a:31:88:66:be:83:20:67:c8:b8:c0:a0:
                    3a:1c:d7:7d:8c:84:22:fb:3a:4d:e1:04:62:7d:90:
                    a1:41:d3:41:36:30:af:be:06:20:52:b8:29:a6:81:
                    d4:9e:09:2d:40:0d:0d:f2:ad:07:3e:c7:9a:c3:89:
                    f9:35:c8:27:d0:e9:aa:f7:7b:a2:64:2c:ff:89:0f:
                    cd:14:9b:93:40:a1:cd:01:41:01:b2:73:6c:ef:03:
                    0d:be:e3:d8:4c:78:bb:ed:53:ea:0c:96:c1:64:57:
                    5f:74:3b:e7:4f:39:d5:ce:c9:9e:12:21:fb:35:c3:
                    5c:64:e1:ad:9b:14:c6:75:82:68:c4:26:cb:25:0b:
                    67:1f:58:f5:23:be:c4:01:c0:88:32:04:09:c3:1f:
                    3f:33:df:d8:fe:6f:3f:53:66:0c:b0:9c:f5:d6:23:
                    09:72:83:25:8d:76:5e:4c:7b:78:ba:cc:77:8b:fe:
                    71:b8:aa:5a:8c:f5:3f:e1:01:dd:e1:db:e1:58:4d:
                    d8:74:f5:50:33:4f:28:c1:96:6f:f3:53:ee:53:f3:
                    f9:1c:4c:b0:ed:14:47:a8:64:8e:7a:e2:ca:18:cc:
                    30:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7A:27:8B:70:D4:B1:86:4C:1F:18:5C:4E:00:29:10:F1:69:FC:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/fec5afec-9364-3a2b-9b3f-e531347b7623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl

            X509v3 Authority Key Identifier:
                keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:189::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c1:dc:b1:1b:1f:88:30:3b:fb:b1:45:93:b5:9e:24:cc:4f:
         d9:79:5c:98:56:cb:ae:f1:03:24:50:de:e3:e4:1c:8d:c3:b5:
         a8:06:8c:91:ba:43:5b:fa:ac:da:40:10:c5:a5:e9:ff:fc:59:
         15:16:c3:c8:1b:ad:93:6e:7b:5b:08:17:f6:78:88:25:a9:05:
         14:9e:a1:fb:85:4e:77:17:20:e9:00:36:d8:0c:2c:db:67:03:
         46:cf:22:d3:8b:85:21:0f:94:b8:7a:1f:12:a6:05:26:ad:99:
         65:03:69:87:11:3c:ff:bc:c2:42:fa:06:64:0d:e1:8d:3c:67:
         eb:2f:e9:66:b1:4d:57:14:a3:27:63:82:30:18:42:7e:61:6d:
         bd:36:18:8a:98:f4:6b:3f:b0:bb:1e:39:61:1e:c6:0f:be:d5:
         25:89:9e:7f:3f:2a:94:62:e1:9e:d1:0c:dd:4e:56:a4:42:d6:
         3a:8d:f6:44:f1:bd:9a:05:3f:ef:f7:05:07:87:f5:ff:ad:72:
         44:1a:74:3b:79:3e:dc:ef:b3:63:ee:48:e1:6b:e5:d5:62:2a:
         73:92:ec:e4:66:54:e1:07:62:63:96:63:01:37:be:0a:1f:0c:
         75:a5:8b:34:af:22:8c:5a:74:ca:e6:5e:a0:36:00:f0:f8:ec:
         aa:f3:0c:68
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLfCOPbsvHu9btAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYyOFoXDTI2MDgxMDEzMDYyOFowLzEtMCsGA1UEAxMk
MzFhMWFlYTEtNjZhNC00YzBjLWIxZjMtMDUzYjkzZWFlMmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8M6DBqYm2pRhAdwyVqRLKHmi4GzzHTSrAKU
SXSCikd6MYhmvoMgZ8i4wKA6HNd9jIQi+zpN4QRifZChQdNBNjCvvgYgUrgppoHU
ngktQA0N8q0HPseaw4n5Ncgn0Omq93uiZCz/iQ/NFJuTQKHNAUEBsnNs7wMNvuPY
THi77VPqDJbBZFdfdDvnTznVzsmeEiH7NcNcZOGtmxTGdYJoxCbLJQtnH1j1I77E
AcCIMgQJwx8/M9/Y/m8/U2YMsJz11iMJcoMljXZeTHt4usx3i/5xuKpajPU/4QHd
4dvhWE3YdPVQM08owZZv81PuU/P5HEyw7RRHqGSOeuLKGMwwfQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFGZ6J4tw1LGGTB8YXE4AKRDxafxWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvZmVjNWFmZWMtOTM2NC0z
YTJiLTliM2YtZTUzMTM0N2I3NjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AYkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAEMHcsRsfiDA7+7FFk7WeJMxP2XlcmFbLrvEDJFDe4+QcjcO1
qAaMkbpDW/qs2kAQxaXp//xZFRbDyButk257WwgX9niIJakFFJ6h+4VOdxcg6QA2
2Aws22cDRs8i04uFIQ+UuHofEqYFJq2ZZQNphxE8/7zCQvoGZA3hjTxn6y/pZrFN
VxSjJ2OCMBhCfmFtvTYYipj0az+wux45YR7GD77VJYmefz8qlGLhntEM3U5WpELW
Oo32RPG9mgU/7/cFB4f1/61yRBp0O3k+3O+zY+5I4Wvl1WIqc5Ls5GZU4QdiY5Zj
ATe+Ch8MdaWLNK8ijFp0yuZeoDYA8PjsqvMMaA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:47:57 2026 by rpki-client