Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/ca868e76-7e6e-3c1a-addd-82e56c8b3c5a.roa
File:                     ca868e76-7e6e-3c1a-addd-82e56c8b3c5a.roa (raw, json)
Hash identifier:          QyvKDrJh/PQ7TvMsuL+lzfsHkV2VlYPHHPmdxX42Nig=
Subject key identifier:   BE:43:7B:89:C1:A0:10:23:38:42:2B:31:5B:51:ED:3E:9C:98:E5:0C
Certificate issuer:       /CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
Certificate serial:       010D0C9F4328584D8695556011A8896DDF69C740
Authority key identifier: FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/ca868e76-7e6e-3c1a-addd-82e56c8b3c5a.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     215207
IP address blocks:        2602:fbcf:d0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:55:60:11:a8:89:6d:df:69:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=4d7ff778-546f-4e9b-8fe7-19d69c1aecec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:25:0b:40:f5:b5:73:a6:7a:a2:f1:5d:d3:68:
                    60:0e:02:02:dd:ae:f2:b2:39:da:35:5d:4a:ee:7a:
                    73:e9:33:09:a5:8d:a6:77:94:e6:34:fc:7d:62:50:
                    1d:f4:31:1e:09:1e:2b:ec:45:97:23:30:10:0d:04:
                    07:9f:7e:38:25:d4:8d:b4:b9:62:19:38:09:7c:c2:
                    85:84:c6:8b:c7:32:6a:c5:fc:e9:5f:ac:1f:08:76:
                    ba:2a:75:3a:68:2b:6a:9c:80:6a:15:51:2c:11:dc:
                    b9:8a:11:fe:28:36:4c:b5:60:d8:1d:be:39:cd:ce:
                    35:82:21:2e:c2:0c:13:ab:76:c1:d2:bb:11:9f:44:
                    07:f7:96:4a:f9:79:54:72:64:1a:60:b9:38:12:dd:
                    ea:1b:65:ba:68:6b:19:69:aa:c5:c0:0f:fa:5a:88:
                    92:52:0f:44:40:f1:ac:ed:d3:06:63:cb:48:d6:16:
                    a5:38:52:b4:b5:36:f2:04:16:bd:0f:25:6a:77:b9:
                    8b:c2:2b:76:d3:c0:70:e0:c4:07:52:65:14:9a:25:
                    26:ef:d2:1d:f3:0b:98:8a:61:46:07:3b:eb:08:58:
                    37:a8:39:3b:74:f9:d7:03:6c:d7:4b:1c:a3:1d:aa:
                    6f:fc:2b:04:34:61:d0:97:63:25:46:5e:88:b5:9c:
                    bd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:43:7B:89:C1:A0:10:23:38:42:2B:31:5B:51:ED:3E:9C:98:E5:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/ca868e76-7e6e-3c1a-addd-82e56c8b3c5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl

            X509v3 Authority Key Identifier:
                keyid:FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbcf:d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:28:96:d9:c4:22:19:de:8d:4c:c3:32:23:f7:1c:37:6c:8b:
         5b:44:c1:e8:ad:94:d3:fc:aa:3a:b9:0c:c6:cd:d9:1e:88:3a:
         78:fa:cd:a5:2d:47:c2:67:20:5f:fc:7a:ee:35:fb:70:cb:44:
         16:36:59:41:15:1d:5c:dd:a1:39:e8:ff:ff:a1:f9:39:3c:4d:
         96:82:55:2a:2f:57:8e:4e:d1:c4:1a:61:e6:c1:85:e3:cd:6c:
         b0:6f:11:65:71:3e:3c:b6:11:24:28:c9:5e:a4:fd:b6:49:7c:
         dc:78:c9:6b:6a:70:6a:2e:b7:ab:fc:f4:f3:c4:b5:fb:f9:61:
         c3:4a:1f:33:b1:56:83:23:fd:33:bd:fa:ba:10:8f:90:ab:88:
         a1:29:33:60:59:2b:bd:f2:e2:d2:3f:0c:f0:13:34:e5:bd:c1:
         a4:5e:6a:dd:8b:f9:33:c1:2e:8e:00:4f:e3:92:5f:16:ef:01:
         46:42:75:c4:67:fc:c6:b5:f1:77:cc:4a:15:80:29:a5:ff:75:
         96:ea:04:19:c7:68:80:e7:ce:d4:66:1d:03:1a:2c:db:59:e5:
         5a:f0:ce:b6:8e:77:7a:9d:4d:e6:a3:cf:4d:d5:a0:19:7a:34:
         ca:91:03:52:10:34:cc:a5:41:bc:05:29:d7:9a:6b:d9:1d:0a:
         9e:94:7a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:28 2026 by rpki-client