Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa
File:                     fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa (raw, json)
Hash identifier:          ybApB1fHG2KKCW/VcG3ffkwt5X2u8YT5A3oTpiMAFrA=
Subject key identifier:   31:FF:02:C4:3E:73:39:1E:38:4E:8C:C1:2A:C7:1B:F1:60:79:74:E7
Certificate issuer:       /CN=4d6573b2-9f3e-43b9-a710-eaee606df226
Certificate serial:       010D0C9F4328584CD407725B843DE616B5DBD0C0
Authority key identifier: 20:63:FC:C3:CE:AA:32:56:26:BD:59:C0:71:B0:16:84:43:E3:05:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     3128
IP address blocks:        143.200.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:72:5b:84:3d:e6:16:b5:db:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6573b2-9f3e-43b9-a710-eaee606df226
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=aec3030b-f190-46c7-8cd9-60c92d46e20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:91:a1:b9:d5:be:ed:d3:9c:ee:b3:3f:11:
                    e0:26:fb:05:a6:2c:9b:0e:7e:ae:d0:64:e9:bb:8a:
                    47:1e:15:5c:5d:40:f5:a8:4e:3d:cf:4c:2f:f3:f0:
                    58:06:59:5f:fd:52:e9:31:da:bd:29:ca:89:11:73:
                    1b:68:bb:04:10:b2:dc:7b:77:95:4c:8b:62:3a:ea:
                    db:ba:a1:5b:fc:eb:ef:4b:97:a4:d3:37:19:99:39:
                    e7:61:91:d7:5a:c1:a9:5c:eb:1d:a2:24:0b:53:22:
                    ec:71:39:a6:39:e0:96:e3:97:70:52:20:f1:76:ce:
                    7d:44:49:00:e1:9b:ee:76:5b:28:69:43:bd:d0:d8:
                    0d:19:69:cd:b5:d3:94:9f:c0:99:0f:9f:26:7e:c1:
                    89:22:81:e0:d2:4b:15:1c:94:33:7a:81:77:32:6d:
                    e7:a5:8e:2f:a6:f5:28:9c:4c:d8:d5:08:2b:ca:e6:
                    89:87:d4:a0:1c:07:6d:0c:67:eb:7c:e9:f9:b9:ea:
                    4a:77:d7:d1:79:45:cd:7c:92:a1:9a:2d:bd:d3:3b:
                    1b:78:19:6d:c7:9d:d4:b6:ba:04:c2:b9:83:d1:aa:
                    bc:16:4a:ac:ec:04:b3:52:ae:cb:5a:13:e4:72:9c:
                    a7:00:83:06:e4:79:bb:45:c5:6d:02:01:26:2a:a0:
                    2f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FF:02:C4:3E:73:39:1E:38:4E:8C:C1:2A:C7:1B:F1:60:79:74:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.crl

            X509v3 Authority Key Identifier:
                keyid:20:63:FC:C3:CE:AA:32:56:26:BD:59:C0:71:B0:16:84:43:E3:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.200.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:6e:ed:6b:7c:fc:ff:35:88:3d:38:cb:02:0b:ea:fa:3a:88:
         d6:68:c7:33:a9:90:69:7e:d9:e2:87:54:44:8a:d7:c7:57:c0:
         78:e4:e5:5d:69:0b:f6:68:c0:da:4c:35:1b:47:7f:b9:f6:bb:
         dc:6e:17:80:78:42:4c:5c:eb:c1:82:9b:52:58:38:e5:e7:c5:
         f0:58:ec:bc:1d:8b:97:41:13:d6:cd:0c:54:82:cf:70:61:cf:
         86:bd:ce:c9:4f:da:b6:80:3f:0a:9a:75:36:53:c7:53:3e:e0:
         0e:47:45:c6:69:e6:f6:26:cb:32:69:5f:96:c3:90:33:8b:7a:
         d5:bb:eb:11:c3:c6:b4:2e:14:13:90:39:68:33:f5:40:36:c9:
         c8:2a:d6:4e:39:56:63:de:dc:aa:2c:5c:f4:94:4d:44:f0:9d:
         bf:74:b9:69:42:e9:7e:fe:2e:2e:7b:98:9d:9e:46:14:2d:05:
         32:30:91:e8:6b:4d:19:ff:59:d9:d7:7c:3d:5d:7c:ae:97:be:
         6f:d6:d0:47:a3:a3:09:72:b9:1f:0e:f6:92:eb:46:fa:44:6f:
         b1:a9:49:16:e8:d8:a4:5d:60:55:1f:b8:2c:9b:14:19:9c:dd:
         e4:64:85:6b:1b:0a:04:d9:e0:30:49:7b:5c:13:2b:3e:96:ae:
         06:79:c4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:22 2026 by rpki-client