Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/b95d006f-bb0b-314c-8fcf-dca8aaf0b1ab.roa
File:                     b95d006f-bb0b-314c-8fcf-dca8aaf0b1ab.roa (raw, json)
Hash identifier:          6mWH0kBOpAUf9eLJQ/wr9JgSE1sp6RBmoWaNYlfhksM=
Subject key identifier:   4F:49:6B:FF:65:23:B9:5D:3D:79:F6:00:C0:81:B8:0F:29:A6:B8:D3
Certificate issuer:       /CN=fc3e43f1-7036-46e1-946a-c9e7a67efa67
Certificate serial:       010D0C9F4328584CBDB1FF400706C93E17054240
Authority key identifier: D0:62:53:48:F7:DB:E4:10:64:33:BE:C3:2B:02:93:C1:6C:53:B4:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/b95d006f-bb0b-314c-8fcf-dca8aaf0b1ab.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     40119
IP address blocks:        2620:fc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:ff:40:07:06:c9:3e:17:05:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3e43f1-7036-46e1-946a-c9e7a67efa67
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=b61e9cca-4232-4ffe-82af-9f4b62215ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:fc:1e:98:83:39:c7:ea:a0:ec:53:d5:70:
                    78:ad:3b:bc:08:72:d5:14:81:cf:6b:2d:e7:b5:87:
                    b3:1f:ae:7f:34:d0:22:ff:53:f2:b7:39:60:f9:70:
                    09:21:b7:8f:34:f4:c9:34:25:a5:10:96:8c:1c:4f:
                    b1:a4:a6:60:d3:17:6d:66:d2:f8:4e:af:00:5c:e9:
                    49:82:e0:d1:36:30:67:c3:1b:b1:98:9a:c7:3e:be:
                    21:ef:53:b2:67:54:f7:62:58:97:ab:09:07:b5:0f:
                    65:80:f6:b8:a6:21:4b:71:f3:55:ca:bd:70:b8:aa:
                    df:9b:ef:bd:69:80:6f:3c:ee:3c:6c:11:aa:08:cd:
                    9a:83:06:be:6a:fc:e5:eb:ac:83:cf:94:c9:b4:08:
                    a5:ed:40:06:96:3e:55:44:97:11:99:dd:98:cf:51:
                    70:87:63:1c:f8:2d:d4:ff:1a:d3:cb:1c:45:c0:d0:
                    1e:2f:3f:19:13:03:39:89:51:85:c0:13:ba:f5:65:
                    17:3b:f0:96:b7:78:6f:33:6c:24:a9:cf:37:90:04:
                    5a:d1:42:54:ab:6f:10:41:ba:5c:e5:1f:21:66:71:
                    57:b5:2c:97:c6:fc:c5:08:b7:6d:3a:db:b9:b0:86:
                    d3:88:bc:fa:ce:72:90:ca:a3:30:85:71:a4:5a:73:
                    fc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:49:6B:FF:65:23:B9:5D:3D:79:F6:00:C0:81:B8:0F:29:A6:B8:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/b95d006f-bb0b-314c-8fcf-dca8aaf0b1ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.crl

            X509v3 Authority Key Identifier:
                keyid:D0:62:53:48:F7:DB:E4:10:64:33:BE:C3:2B:02:93:C1:6C:53:B4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f8:c8:68:b1:e0:c9:4e:81:9c:af:a2:10:ae:70:87:13:28:
         1c:4e:84:80:3d:9f:44:2c:30:f2:97:02:25:a5:45:40:74:cf:
         a1:aa:c4:49:5c:b6:62:6b:fc:65:b1:cc:ed:02:ec:74:b5:b7:
         e5:fb:f1:6a:9f:0b:87:83:dd:eb:9a:ab:5e:f2:be:80:bb:b1:
         c5:16:86:52:1d:62:b4:38:56:4f:9a:3c:3f:bb:5f:cc:3f:8b:
         9e:86:3e:8f:32:66:1b:c3:fb:a3:09:3f:db:8d:96:72:60:ae:
         73:4b:d4:d6:23:bb:7b:f1:6c:ed:82:71:a1:f1:f4:c0:a2:2b:
         97:6b:d8:e4:b4:7f:0a:b2:11:55:96:7f:1e:a8:d0:32:39:e4:
         1d:c1:c6:4c:77:11:5d:cc:22:69:d6:1a:74:a3:82:b0:18:f3:
         a7:6a:84:47:ed:06:2e:91:c0:e5:b0:d1:88:e5:22:fd:2c:e0:
         94:e2:7a:f6:1a:68:39:b0:8c:e9:9b:04:6c:cb:c5:87:19:f7:
         73:1f:dc:57:ce:c4:33:0b:73:40:77:0b:37:bd:a7:5c:3e:7c:
         a5:e3:45:db:53:a8:04:5e:4a:62:c2:64:91:e5:79:e8:c7:8e:
         e5:39:e8:6a:88:c5:46:04:e2:da:e0:3f:cd:c8:c1:2e:a6:9a:
         e8:b0:30:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:49 2026 by rpki-client