Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fc215afd-3439-46f1-8929-184b0892d664/8794d127-3be8-34a9-b49a-948706c4f836.roa
File:                     8794d127-3be8-34a9-b49a-948706c4f836.roa (raw, json)
Hash identifier:          Tid1jSxBK4BdGV9210J2rcvSPG6OzGpOPho8B72KQzY=
Subject key identifier:   43:6C:8C:33:59:73:E1:CE:C8:2E:31:E9:7F:43:48:3D:66:A2:30:1D
Certificate issuer:       /CN=fc215afd-3439-46f1-8929-184b0892d664
Certificate serial:       010D0C9F4328584DF97FED21AE3E672DCCFA2980
Authority key identifier: 47:FA:57:E3:51:15:E2:83:CE:86:FC:28:2A:BF:00:C2:B5:FB:E1:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fc215afd-3439-46f1-8929-184b0892d664.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fc215afd-3439-46f1-8929-184b0892d664/8794d127-3be8-34a9-b49a-948706c4f836.roa
Signing time:             Wed 27 May 2026 16:55:37 +0000
ROA not before:           Wed 27 May 2026 16:55:37 +0000
ROA not after:            Tue 25 Aug 2026 16:55:37 +0000
asID:                     399970
IP address blocks:        2602:fc3b:fb00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fc215afd-3439-46f1-8929-184b0892d664/fc215afd-3439-46f1-8929-184b0892d664.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fc215afd-3439-46f1-8929-184b0892d664/fc215afd-3439-46f1-8929-184b0892d664.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fc215afd-3439-46f1-8929-184b0892d664.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f9:7f:ed:21:ae:3e:67:2d:cc:fa:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc215afd-3439-46f1-8929-184b0892d664
        Validity
            Not Before: May 27 16:55:37 2026 GMT
            Not After : Aug 25 16:55:37 2026 GMT
        Subject: CN=426b9bd1-b66c-466c-b784-fde973e49c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:4c:2b:c5:79:f5:7c:e1:ba:17:27:1e:ce:
                    69:9e:28:49:19:65:78:1b:27:c0:95:a2:bd:7c:61:
                    42:2a:d4:42:88:7c:06:d2:3a:32:40:9b:76:08:90:
                    b9:7d:7a:d8:79:d3:09:50:4b:5a:34:d9:33:45:e7:
                    20:05:13:2a:f1:1e:00:0e:87:74:6c:0e:60:7c:26:
                    20:ea:20:69:e4:e3:8d:c5:70:4a:5b:fd:db:f6:83:
                    9a:11:8d:d4:bd:6d:41:88:cd:74:54:6a:12:ae:2f:
                    31:79:89:0f:9d:d8:d3:9e:8d:ab:58:14:2b:eb:8a:
                    cb:56:4d:c6:f6:8d:7b:13:c5:49:64:21:71:9c:56:
                    61:33:79:24:bb:8e:df:50:aa:14:cf:b9:a9:00:4a:
                    e0:5e:8e:c8:f1:1d:34:3d:d0:ee:1b:ac:3c:3a:c9:
                    d2:3f:3d:22:01:7a:1f:96:0a:41:a4:1d:fc:35:64:
                    53:13:72:4f:fa:97:c0:9c:7f:db:5b:1a:78:24:24:
                    1f:5f:a1:00:31:12:a6:c0:02:b5:1d:c4:57:16:9c:
                    83:b5:49:d9:6d:81:aa:5d:1f:1f:70:fb:4e:80:97:
                    64:f0:6c:f4:ec:00:a6:df:00:67:93:bd:64:f3:21:
                    ad:8d:e6:67:44:71:12:7b:19:8f:46:0c:0d:cc:54:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6C:8C:33:59:73:E1:CE:C8:2E:31:E9:7F:43:48:3D:66:A2:30:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fc215afd-3439-46f1-8929-184b0892d664/8794d127-3be8-34a9-b49a-948706c4f836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fc215afd-3439-46f1-8929-184b0892d664/fc215afd-3439-46f1-8929-184b0892d664.crl

            X509v3 Authority Key Identifier:
                keyid:47:FA:57:E3:51:15:E2:83:CE:86:FC:28:2A:BF:00:C2:B5:FB:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fc215afd-3439-46f1-8929-184b0892d664.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:fb00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:9a:25:e8:3a:8a:92:d0:6e:00:cf:1b:0f:5a:c0:3d:2e:25:
         92:56:be:41:4a:36:20:7f:f4:f1:d4:65:55:9a:b7:7c:8d:4c:
         84:c3:c1:31:6d:e8:c3:ae:c0:02:b0:ac:33:db:24:85:d4:7d:
         43:96:37:fc:de:7f:30:06:05:28:d8:a7:94:7f:24:71:e3:4b:
         95:da:47:eb:49:e1:b8:b1:79:d9:ff:00:3f:72:45:a7:52:27:
         71:cd:30:a7:0f:10:5c:e5:fc:b8:9f:aa:df:da:fe:f1:3b:b9:
         d9:41:76:9b:14:ee:c6:ec:34:b6:1f:5f:8a:6a:32:49:bf:0c:
         13:71:36:86:9e:75:31:98:4d:f0:c4:e5:4a:a9:95:d6:82:50:
         c6:fd:9b:11:82:e3:e2:14:41:eb:87:4c:b9:94:85:b1:d5:6d:
         82:ef:bf:12:50:7c:bd:83:54:26:ec:7a:8b:50:b5:0d:82:47:
         df:8b:e5:bc:ca:b0:8c:e3:d2:7e:8b:de:d1:bf:e5:9e:17:8e:
         21:93:10:cd:ec:c7:49:fb:1a:de:39:c4:88:6c:37:93:05:44:
         f0:28:7c:94:9a:52:fb:1f:ab:aa:b5:08:75:33:81:b8:fb:37:
         94:4b:da:65:c2:67:df:8d:99:5a:1d:bb:45:73:27:e1:fb:6f:
         2d:ff:69:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 22:41:01 2026 by rpki-client