Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/fc786f57-8d05-329e-8903-a6e495bd3db1.roa
File:                     fc786f57-8d05-329e-8903-a6e495bd3db1.roa (raw, json)
Hash identifier:          gxSt4a9Fc5LiJKlBrbD3SDxLvH3Lh261QAbsWJpGDJc=
Subject key identifier:   59:B6:41:62:A0:0F:D5:A9:0B:3A:50:7D:DA:46:5D:12:0C:B5:EA:4E
Certificate issuer:       /CN=2e8a2dcd-c473-4343-ab03-233f389ee575
Certificate serial:       010D0C9F4328584CA75C66F6E6EED01DE45D4300
Authority key identifier: E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/fc786f57-8d05-329e-8903-a6e495bd3db1.roa
Signing time:             Mon 26 Jan 2026 14:00:41 +0000
ROA not before:           Mon 26 Jan 2026 14:00:41 +0000
ROA not after:            Sun 26 Apr 2026 13:00:41 +0000
asID:                     8079
IP address blocks:        2602:f718::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a7:5c:66:f6:e6:ee:d0:1d:e4:5d:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e8a2dcd-c473-4343-ab03-233f389ee575
        Validity
            Not Before: Jan 26 14:00:41 2026 GMT
            Not After : Apr 26 13:00:41 2026 GMT
        Subject: CN=eba1a441-b2bc-486f-aa36-696253bbe4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:b5:f8:52:71:bf:9c:a2:c2:f9:d0:49:ff:
                    f2:ec:f0:86:1f:f3:31:85:2e:1a:02:a4:98:e5:e6:
                    8f:30:de:3e:d8:65:eb:77:f7:ae:ca:9e:2d:59:f7:
                    f2:55:17:cc:8c:cc:ff:1c:03:5a:d9:f1:34:da:7d:
                    3a:e1:bb:29:42:5f:d6:5b:d5:a9:c0:4b:8a:e0:b8:
                    a3:fb:48:0e:a8:cc:29:8f:e6:15:ba:af:1b:2d:9e:
                    80:09:5d:4e:70:99:39:b1:00:50:ad:ef:31:94:99:
                    82:d8:82:06:26:94:9d:26:40:b7:e2:d9:d0:7c:a9:
                    f0:ea:a3:a4:b3:ee:e5:de:1f:32:c2:21:94:df:ca:
                    38:c8:d2:2b:ce:8f:b3:d7:90:7c:4f:af:63:c6:fb:
                    7a:f7:53:f1:6e:01:88:1f:4f:ad:1f:b5:b7:fe:23:
                    9c:0b:39:da:4f:68:66:5a:d4:8d:fb:dc:e8:3b:a6:
                    35:bb:93:23:e7:db:96:6d:60:4a:c1:e4:07:d9:9c:
                    17:82:e7:90:e9:4c:d6:3d:d3:77:59:e9:71:3b:6f:
                    d4:7c:58:29:a5:63:d6:96:a6:dd:0f:42:a7:9c:76:
                    7e:72:d8:29:43:60:a2:21:1a:fb:5c:ac:2c:69:5b:
                    39:ed:b9:85:5e:99:6a:e2:6a:66:f8:7e:52:a4:93:
                    de:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B6:41:62:A0:0F:D5:A9:0B:3A:50:7D:DA:46:5D:12:0C:B5:EA:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/fc786f57-8d05-329e-8903-a6e495bd3db1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl

            X509v3 Authority Key Identifier:
                keyid:E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f718::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:fc:0e:2c:84:15:61:b0:41:50:ee:65:31:68:07:e4:a0:e2:
         8a:ca:c1:c7:4a:df:f2:69:ad:63:9c:cb:b3:3c:d6:2c:1c:73:
         15:14:9b:64:cd:be:80:75:d5:9a:88:02:d0:e9:9b:f1:62:25:
         cb:fe:0b:1d:5e:40:ee:e6:bb:5a:a7:4e:52:4f:0d:9f:0d:40:
         cf:84:d8:91:8a:b5:e7:39:1c:f8:47:fe:23:68:91:0c:d5:f8:
         a5:d9:da:a9:eb:b0:52:b8:ec:9e:31:a3:ea:1d:30:37:f0:2a:
         cb:7e:c4:ea:b5:d4:cd:17:63:b6:6b:7e:c9:d6:1e:fd:42:c0:
         25:74:54:eb:49:65:3d:e5:47:d6:50:bf:e1:e9:54:0e:82:6e:
         66:cc:e7:73:4d:32:6d:44:2c:f5:3d:bd:7e:9a:62:72:52:1c:
         95:c8:9a:db:fe:9d:6c:64:76:73:92:c8:89:79:25:61:01:e4:
         21:cf:41:61:2e:e0:24:26:e1:14:12:38:4d:db:dc:9d:e5:25:
         c3:89:72:06:65:f5:a2:d6:18:31:4c:c1:31:d3:78:a9:f3:3f:
         e1:f5:6a:21:2b:16:fb:f4:80:26:7a:7f:f0:74:ee:01:78:e4:
         06:29:90:a3:52:18:cb:cb:1f:27:36:37:cf:d7:38:8c:5c:c7:
         3b:8b:da:36
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEynXGb25u7QHeRdQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmU4YTJkY2QtYzQ3My00MzQzLWFiMDMtMjMzZjM4OWVl
NTc1MB4XDTI2MDEyNjE0MDA0MVoXDTI2MDQyNjEzMDA0MVowLzEtMCsGA1UEAxMk
ZWJhMWE0NDEtYjJiYy00ODZmLWFhMzYtNjk2MjUzYmJlNGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8a1+FJxv5yiwvnQSf/y7PCGH/MxhS4aAqSY
5eaPMN4+2GXrd/euyp4tWffyVRfMjMz/HANa2fE02n064bspQl/WW9WpwEuK4Lij
+0gOqMwpj+YVuq8bLZ6ACV1OcJk5sQBQre8xlJmC2IIGJpSdJkC34tnQfKnw6qOk
s+7l3h8ywiGU38o4yNIrzo+z15B8T69jxvt691PxbgGIH0+tH7W3/iOcCznaT2hm
WtSN+9zoO6Y1u5Mj59uWbWBKweQH2ZwXgueQ6UzWPdN3WelxO2/UfFgppWPWlqbd
D0KnnHZ+ctgpQ2CiIRr7XKwsaVs57bmFXplq4mpm+H5SpJPeVwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFm2QWKgD9WpCzpQfdpGXRIMtepOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZThh
MmRjZC1jNDczLTQzNDMtYWIwMy0yMzNmMzg5ZWU1NzUvZmM3ODZmNTctOGQwNS0z
MjllLTg5MDMtYTZlNDk1YmQzZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmU4YTJkY2QtYzQ3My00MzQzLWFi
MDMtMjMzZjM4OWVlNTc1LzJlOGEyZGNkLWM0NzMtNDM0My1hYjAzLTIzM2YzODll
ZTU3NS5jcmwwHwYDVR0jBBgwFoAU6IMEMKbtwGxYA66eTEuUOiytzjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZThhMmRjZC1jNDczLTQzNDMtYWIwMy0yMzNm
Mzg5ZWU1NzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3GAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEACvwOLIQVYbBBUO5lMWgH5KDiisrBx0rf8mmtY5zLszzWLBxzFRSb
ZM2+gHXVmogC0Omb8WIly/4LHV5A7ua7WqdOUk8Nnw1Az4TYkYq15zkc+Ef+I2iR
DNX4pdnaqeuwUrjsnjGj6h0wN/Aqy37E6rXUzRdjtmt+ydYe/ULAJXRU60llPeVH
1lC/4elUDoJuZsznc00ybUQs9T29fppiclIclcia2/6dbGR2c5LIiXklYQHkIc9B
YS7gJCbhFBI4TdvcneUlw4lyBmX1otYYMUzBMdN4qfM/4fVqISsW+/SAJnp/8HTu
AXjkBimQo1IYy8sfJzY3z9c4jFzHO4vaNg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:32 2026 by rpki-client