Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa
File:                     5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa (raw, json)
Hash identifier:          kk13M7VOpVWutt/05vGkh8RCsM9n9GxScaeW0PKJKfs=
Subject key identifier:   FA:D8:F7:8E:73:34:69:B9:94:E3:E4:96:E7:46:EA:52:84:AF:D0:D7
Certificate issuer:       /CN=fdb3fee9-0b00-4a8d-b320-e293b627bb04
Certificate serial:       010D0C9F4328584E104EEF837B2DFA4D5C0E4058
Authority key identifier: CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     13737
IP address blocks:        2602:f9ad::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:ef:83:7b:2d:fa:4d:5c:0e:40:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdb3fee9-0b00-4a8d-b320-e293b627bb04
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=5a93704c-1221-493d-9201-de0a8f35ed78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a4:76:a4:1c:52:60:df:5f:b9:1a:fd:bb:fe:
                    ef:f7:79:cb:ab:b5:d0:82:d3:1b:1e:54:25:96:7e:
                    95:62:a9:83:51:37:93:dd:12:a2:4a:cf:12:02:61:
                    45:96:62:e0:db:ea:fe:7f:9d:df:1a:49:10:e8:24:
                    34:86:48:36:63:36:4b:d5:d4:4f:d2:5d:be:83:9d:
                    0c:62:f6:7c:ad:e0:a2:9b:26:31:b0:ee:f6:d3:a5:
                    c1:b2:ff:1c:25:96:a6:d8:56:d0:a0:37:e7:ee:d8:
                    e2:44:fd:8c:1b:e2:2f:22:9e:a6:3c:0a:85:8c:0d:
                    2d:4c:dd:fd:5b:e5:51:2d:e3:ac:54:53:31:5d:95:
                    b5:6e:f6:83:8e:fe:d6:1b:80:4e:4a:8f:ac:25:9b:
                    af:02:e8:d6:1e:58:a8:c6:b7:bd:d0:4d:d9:7d:31:
                    8d:63:58:80:e2:cd:ec:83:11:cd:30:a0:b8:93:fe:
                    03:15:94:d2:56:d2:b6:1c:2b:c9:b6:b6:0c:9f:75:
                    47:cc:0a:05:49:b1:2c:91:d9:c5:64:fa:22:99:5a:
                    da:2e:b3:90:55:4f:27:d7:40:ef:24:48:fd:31:2b:
                    94:e3:84:23:a6:f6:42:89:9c:3d:8a:a2:12:6f:58:
                    79:66:22:d4:3a:33:71:af:11:64:9c:0f:39:d4:be:
                    86:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D8:F7:8E:73:34:69:B9:94:E3:E4:96:E7:46:EA:52:84:AF:D0:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.crl

            X509v3 Authority Key Identifier:
                keyid:CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ad::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:0b:5a:6f:4d:6b:74:04:8f:48:ff:86:c1:ef:65:4e:cd:32:
         45:d7:cb:e5:03:9b:6c:c4:e0:48:d1:25:e4:fb:41:37:b9:78:
         ad:13:3e:46:34:a1:6c:c5:72:37:ed:6c:cc:33:11:73:4f:1a:
         31:97:11:cc:0c:50:c6:c5:84:22:90:e8:d3:25:35:fe:b1:b8:
         be:f1:40:3e:9f:11:45:cd:99:04:54:d7:e2:25:7a:12:03:c9:
         d5:1b:23:3b:e8:45:ff:b2:cf:c4:f7:ba:ae:5e:33:fc:cb:39:
         a9:f6:2b:ca:79:9c:39:e4:20:a7:df:11:f5:b6:df:85:b6:22:
         fe:0d:a2:30:ca:1e:9a:e5:a8:15:f4:96:83:e2:1a:d5:80:3f:
         bb:6f:21:43:89:c8:82:e6:0c:88:32:cd:94:34:aa:18:6c:e3:
         eb:65:4e:b5:58:0d:7e:12:24:7b:ed:4c:60:a1:21:a9:32:54:
         62:2f:0a:58:73:70:af:e6:15:f7:da:4b:1b:ad:a5:fb:13:2b:
         48:32:7d:90:7b:2c:a2:4b:e5:cd:0c:ae:cc:71:d6:f6:d0:9c:
         15:38:cd:d3:bf:6a:cd:58:97:58:34:ba:68:79:1c:d3:92:74:
         31:5a:d4:e9:4e:d9:13:cb:9b:87:b4:ca:e0:42:5e:7c:cf:d4:
         f7:6d:8d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:32:11 2026 by rpki-client