Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/fd6bc7d1-16af-3db9-a980-3dd53700ac39.roa
File:                     fd6bc7d1-16af-3db9-a980-3dd53700ac39.roa (raw, json)
Hash identifier:          l+ONO+j/oqDK/K0bYQXRdON8cspIKKphcMVR9KItCA8=
Subject key identifier:   DF:6B:DC:A2:4F:A1:25:A9:D6:18:44:9F:BF:35:B2:72:F3:3A:4B:58
Certificate issuer:       /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
Certificate serial:       010D0C9F4328584D037CFA648477E9C815FA5080
Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/fd6bc7d1-16af-3db9-a980-3dd53700ac39.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     398891
IP address blocks:        2602:807:e000::/48 maxlen: 48
                          2602:807:e001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7c:fa:64:84:77:e9:c8:15:fa:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=d77d8efa-d6c8-4ed5-a97a-fec5294d0a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3d:fe:43:3e:74:fc:3b:02:0d:da:2e:78:28:
                    4d:b2:f2:6a:60:d3:59:d5:dd:32:15:1d:e2:81:f7:
                    bc:1d:78:ac:e2:00:ab:b9:77:9d:0d:9c:b0:5f:b9:
                    94:ee:f7:c0:c0:86:1e:36:62:bf:a8:c6:7a:a7:e3:
                    bc:e3:5c:86:58:b7:da:4d:45:47:4a:56:13:8a:e6:
                    7a:2f:f2:fe:6c:4c:c4:b6:fc:c0:6f:da:11:56:e7:
                    4a:83:46:9a:37:b3:70:20:c3:1a:f0:96:36:52:cd:
                    1b:f8:de:f5:3b:ea:c2:c9:4b:5c:14:dc:ff:b3:7c:
                    fd:7f:d2:1f:0f:af:e7:2d:2b:d8:7b:7e:9c:fe:02:
                    5e:ed:9b:3c:c2:9f:11:84:d2:9d:54:74:0e:75:f8:
                    2d:8f:bf:53:24:a3:2c:54:d4:81:80:f4:92:6c:47:
                    2e:b1:2b:eb:a6:63:22:bc:d8:bd:a4:64:4b:96:df:
                    c9:2d:fc:23:af:1c:c0:15:1a:77:5c:d0:2e:18:83:
                    1b:47:63:d2:57:55:36:dd:44:af:53:69:2f:9c:20:
                    df:54:49:43:92:1d:ca:5b:17:4e:23:64:aa:3c:94:
                    72:07:7e:03:83:64:cd:3d:f9:1e:78:89:a2:17:f1:
                    c7:d7:c9:27:1c:b8:c7:12:88:f9:ef:7c:bf:db:36:
                    28:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6B:DC:A2:4F:A1:25:A9:D6:18:44:9F:BF:35:B2:72:F3:3A:4B:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/fd6bc7d1-16af-3db9-a980-3dd53700ac39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl

            X509v3 Authority Key Identifier:
                keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:e000::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ea:39:a2:12:77:33:81:a7:f4:5c:8a:e7:64:3e:c6:19:98:
         e5:5f:b1:5d:de:b9:0c:01:00:5d:e4:14:fd:ad:09:a1:74:87:
         a4:6a:11:1c:ac:55:31:8d:34:ae:d9:34:e7:4e:11:81:0b:8e:
         c2:69:cb:30:b0:0b:8f:08:bb:43:f4:df:17:3c:8d:36:c2:28:
         76:ae:bb:ec:80:05:0d:01:7e:e8:34:a5:e5:cc:2b:ec:e8:55:
         e2:c8:ff:36:1f:a8:de:65:75:d9:20:79:ed:b1:28:a3:62:24:
         e6:4e:2c:1b:69:29:20:0e:81:07:3b:d1:04:6e:1b:88:6c:b9:
         b0:f9:ba:80:d0:f8:74:18:52:3e:4c:f5:04:e0:f1:c6:27:3a:
         a5:3a:b8:e8:7e:a8:d2:bf:c2:f2:c8:ae:d1:c3:35:fb:86:2c:
         28:e5:ed:79:11:12:93:46:e7:5f:1b:69:05:b5:24:b7:76:25:
         f7:22:a8:7a:f9:05:b8:4a:49:20:79:4d:bc:e5:c8:e6:7e:4e:
         98:84:de:44:53:3b:e9:22:52:84:c2:d0:2d:0d:8b:49:9e:8a:
         80:a5:40:8c:43:e3:30:55:e9:a5:e7:43:49:48:9f:2c:03:f2:
         e3:d7:07:72:21:8f:39:f4:f3:c0:fb:08:17:4c:c5:ea:58:54:
         0b:02:f4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:09:59 2026 by rpki-client