Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/14ccf9e3-3501-3d49-b394-7e1405d6383d.roa
File:                     14ccf9e3-3501-3d49-b394-7e1405d6383d.roa (raw, json)
Hash identifier:          zapgFshXUONXbvP8YzZ1gPZ2bz81ltLEOhil2pgq5SE=
Subject key identifier:   A0:9E:42:E2:D2:16:C3:C2:B4:B6:7B:71:4A:13:6B:CE:BE:D4:02:73
Certificate issuer:       /CN=38e671ad-3e19-48ff-801c-f18f3c194278
Certificate serial:       010D0C9F4328584CED278DE460FF6AEA6006A300
Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/14ccf9e3-3501-3d49-b394-7e1405d6383d.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     62563
IP address blocks:        2602:fec3:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:8d:e4:60:ff:6a:ea:60:06:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=cadc705d-b323-4284-a995-b3d7d7438782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:63:3e:74:67:f9:49:c2:6a:c8:4f:a0:cb:03:
                    ae:b7:24:9d:62:b3:ae:4f:a1:b1:e7:da:1c:99:67:
                    34:16:28:2e:68:6e:dc:84:64:6a:92:47:59:d8:1d:
                    60:97:96:d4:6b:c2:cb:8b:cb:3d:57:8e:b7:7d:5f:
                    e9:f8:95:f8:7d:16:93:db:0c:cc:71:f5:a6:7d:46:
                    49:2e:57:a5:ba:77:f8:f9:1c:12:15:62:e9:4a:54:
                    a6:72:4b:b6:59:63:df:4b:7f:3a:58:73:7a:37:b3:
                    d7:f2:74:11:ff:16:6b:f4:d2:81:8b:cb:0d:3d:45:
                    00:4b:6a:bd:1b:a4:18:48:21:cf:c1:0c:88:a4:2d:
                    d2:ab:99:e4:43:02:de:4f:c9:10:50:b7:51:72:cf:
                    36:09:bf:70:4f:27:e1:0b:ec:e9:db:39:57:67:69:
                    fd:f0:7d:88:d5:1d:25:4a:28:78:91:17:50:ad:c6:
                    54:7f:81:33:f7:4a:ed:d4:c2:93:e2:58:be:60:bc:
                    96:f6:f6:65:9c:7b:29:86:e4:c3:0f:10:19:20:6f:
                    c1:1d:b5:70:98:e7:c7:58:71:a6:5a:5d:0d:81:a7:
                    8d:7a:c8:ef:e0:53:58:f9:ed:a3:ea:a7:0d:c8:0c:
                    13:ed:bd:4a:53:45:59:b7:43:6e:b3:72:ea:5b:5d:
                    87:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9E:42:E2:D2:16:C3:C2:B4:B6:7B:71:4A:13:6B:CE:BE:D4:02:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/14ccf9e3-3501-3d49-b394-7e1405d6383d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl

            X509v3 Authority Key Identifier:
                keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fec3:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:00:36:1a:65:04:62:0d:d5:70:2a:85:17:45:e0:df:e1:d4:
         8a:f6:41:83:74:dc:e3:37:17:87:a0:db:82:b0:78:c8:03:7a:
         c2:24:17:83:82:6f:78:56:41:be:ea:16:bf:14:44:32:3d:85:
         49:74:9c:04:e7:c2:6a:7e:ce:98:6a:db:ee:a9:d9:23:6a:70:
         8f:ce:59:0a:62:4b:e9:73:d2:e4:74:c9:79:18:db:e2:46:37:
         1b:1b:e0:3b:c9:60:39:b4:32:54:8f:d8:65:fc:da:d1:92:9f:
         8a:49:3e:db:d0:eb:0c:b3:07:d4:02:ae:9c:d2:95:6f:95:5f:
         5e:d8:2c:5a:37:c8:75:04:6e:c6:05:36:a1:35:70:2f:71:ce:
         14:30:a7:35:98:ef:dc:db:13:72:fd:87:29:98:bb:4a:d1:f1:
         58:3d:9e:e2:af:29:d7:0b:93:ba:d0:8c:16:77:94:4e:ef:36:
         9d:68:e3:f8:72:db:6a:7a:de:6e:64:12:ef:77:71:b9:dd:66:
         12:7a:83:91:f3:80:b5:93:c1:22:a1:e1:a8:72:4d:6e:ce:4e:
         24:81:65:66:04:3e:bf:7b:ea:5f:b4:50:27:cc:67:a8:5e:40:
         0f:85:86:00:fd:51:0b:8c:f4:5a:7d:ed:9f:a8:ff:9f:7d:4c:
         0e:91:62:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:56 2026 by rpki-client