Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/7ee09d50-9766-3739-bf54-024888d96b72.roa
File:                     7ee09d50-9766-3739-bf54-024888d96b72.roa (raw, json)
Hash identifier:          FgsLhLBAsSMhOdC0kF6v4d93m+b3s5lduYimrO7LfXU=
Subject key identifier:   76:51:4E:43:F3:78:3D:B1:CA:67:C8:15:D5:3D:A9:9F:62:EC:F1:BB
Certificate issuer:       /CN=fca4862e-7314-4415-a264-4e5dc31b73d8
Certificate serial:       010D0C9F4328584D80FFF2047E9FC3D6AE03F700
Authority key identifier: F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/7ee09d50-9766-3739-bf54-024888d96b72.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     4185
IP address blocks:        2620:0:610::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:f2:04:7e:9f:c3:d6:ae:03:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca4862e-7314-4415-a264-4e5dc31b73d8
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=ff42df93-9bc9-426b-b409-e1c636495b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:13:0a:64:4b:de:0c:05:ac:97:1f:e9:9c:e0:
                    b6:23:1f:d4:9f:98:b8:c3:7c:d9:ac:de:cb:6c:43:
                    4f:67:81:d5:49:ac:af:fd:18:ed:cd:3a:69:67:db:
                    50:f3:eb:8f:e1:c9:1c:8e:16:1c:49:00:de:8d:25:
                    9b:67:db:10:23:e4:d2:4e:88:ce:1d:08:e1:d2:35:
                    bf:aa:69:aa:d7:0c:50:4d:3d:9e:dc:47:97:3c:59:
                    e1:62:a2:5c:a4:69:40:56:2a:61:ad:01:88:de:91:
                    00:67:42:a9:6d:0f:c0:98:ad:8e:97:76:ba:10:d2:
                    0b:af:f1:60:2e:21:84:f8:cf:31:32:b3:91:8b:50:
                    43:c5:81:51:a3:c5:c4:dd:4f:bb:c5:7c:4f:ee:f2:
                    3a:03:08:76:05:6c:fa:08:97:64:43:5d:96:4e:a0:
                    4c:7f:0e:b0:96:16:ae:85:e0:f4:61:e9:c9:97:d5:
                    cd:34:eb:8a:52:a7:e5:8f:e2:21:f1:79:b7:39:71:
                    4b:15:8b:d5:c5:f7:fe:25:37:02:82:3f:d1:35:ff:
                    d4:63:91:61:55:5d:c9:9b:09:20:3a:bc:05:2b:3b:
                    86:b6:57:3e:70:17:3b:47:27:34:eb:ff:6e:19:67:
                    db:24:6f:a0:22:94:ed:d0:aa:e5:e1:58:63:8f:f3:
                    eb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:51:4E:43:F3:78:3D:B1:CA:67:C8:15:D5:3D:A9:9F:62:EC:F1:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/7ee09d50-9766-3739-bf54-024888d96b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl

            X509v3 Authority Key Identifier:
                keyid:F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:610::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ea:d6:e8:aa:0f:03:bd:31:8f:db:37:50:a7:2f:9c:2e:6d:
         83:5b:1c:c5:83:a5:15:58:25:60:12:b9:06:ba:4b:60:62:51:
         e2:ec:c9:a0:e6:17:a8:78:14:7b:5c:6f:57:28:10:91:91:8c:
         55:d7:59:5f:98:4f:19:c0:f5:80:79:d8:56:5f:c6:ba:2d:fe:
         4c:b0:ad:49:08:43:b8:ca:06:31:51:6b:06:1a:c1:ec:06:be:
         d6:c5:bd:78:e2:ad:b4:38:09:36:ba:46:ac:b4:c6:72:1b:f0:
         4c:41:43:9d:1b:66:29:4a:0c:79:46:9d:67:88:2b:83:e7:4f:
         d4:61:75:5c:4a:f0:b8:a8:1f:f5:63:cf:ce:8f:50:16:e8:ee:
         48:0a:43:1d:04:f5:1c:84:66:ae:c6:50:e3:b7:aa:f7:81:01:
         2a:1a:ca:08:9d:29:61:1f:42:a8:bf:f1:56:5a:66:79:73:da:
         a0:f7:3a:79:9e:e7:e3:8c:fa:66:74:4e:05:b6:7a:16:84:f4:
         df:42:3e:66:05:0e:cd:49:be:64:a1:6d:57:fe:81:a1:39:f3:
         a2:c1:69:09:22:33:16:94:9a:63:7e:4d:0a:4d:f2:85:ff:ff:
         ce:11:1a:4a:62:47:e0:55:30:b5:85:e8:a1:8d:66:f0:f0:63:
         5b:ea:e4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:38 2026 by rpki-client