Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/fe4ca4bb-f14f-3381-a209-4ce00b8e635c.roa
File:                     fe4ca4bb-f14f-3381-a209-4ce00b8e635c.roa (raw, json)
Hash identifier:          WBIA+MUQxtTqsjmATFdPYAQkvPiFOU0aRFMnmMavTkY=
Subject key identifier:   25:ED:F7:9D:54:89:B2:BE:4E:93:2F:A8:87:B2:16:5C:5E:36:77:44
Certificate issuer:       /CN=5ef4d5f1-c1e2-4799-9868-866a263537cc
Certificate serial:       010D0C9F4328584F119CF044137B1FAAF4623580
Authority key identifier: F7:C0:D1:DE:57:83:26:71:CD:9B:A6:65:85:13:E5:4A:D9:D6:92:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/fe4ca4bb-f14f-3381-a209-4ce00b8e635c.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        2602:fcde::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/5ef4d5f1-c1e2-4799-9868-866a263537cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/5ef4d5f1-c1e2-4799-9868-866a263537cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f0:44:13:7b:1f:aa:f4:62:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef4d5f1-c1e2-4799-9868-866a263537cc
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=13fa9923-6f73-4cf8-88c1-8db0a0aa2251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:80:b2:43:9e:23:94:64:b6:79:71:2f:f1:5e:
                    de:91:35:49:bf:7d:e2:86:d3:4a:ee:4d:15:04:bd:
                    37:f0:11:37:10:8c:91:05:a3:33:00:0a:e0:9a:1c:
                    68:9a:49:35:b4:5e:88:3f:fe:38:e3:53:2a:5b:e5:
                    3c:05:14:24:79:6b:22:c8:7a:e1:a7:1f:98:e7:22:
                    e4:3c:9b:75:7b:64:96:89:ae:02:c9:79:68:2d:df:
                    83:4f:79:22:3a:a9:94:2a:e8:b0:69:a4:41:a8:6d:
                    80:90:4f:88:4c:ae:9f:fb:24:97:e1:67:54:51:82:
                    6d:20:36:71:79:5d:ad:a1:93:81:fa:03:bd:de:47:
                    16:36:81:84:fb:13:b3:82:2c:7f:96:ba:0e:f8:18:
                    c6:da:f7:41:ea:53:46:82:de:ba:fc:26:b2:07:2a:
                    6a:a1:49:af:61:3e:fb:18:84:ab:44:a4:90:ce:ef:
                    16:43:71:95:50:69:11:bf:7c:f0:8d:1b:04:64:25:
                    1a:8e:87:c0:cd:28:d3:fb:f3:66:85:b2:81:b8:c6:
                    bf:42:30:96:1d:bf:29:63:58:67:12:d6:bb:09:44:
                    6b:8f:3f:0d:cc:5d:29:84:50:e6:af:46:66:fa:4f:
                    f8:f1:13:75:fa:49:08:10:b1:e6:8b:56:88:cf:18:
                    d6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:ED:F7:9D:54:89:B2:BE:4E:93:2F:A8:87:B2:16:5C:5E:36:77:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/fe4ca4bb-f14f-3381-a209-4ce00b8e635c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/5ef4d5f1-c1e2-4799-9868-866a263537cc.crl

            X509v3 Authority Key Identifier:
                keyid:F7:C0:D1:DE:57:83:26:71:CD:9B:A6:65:85:13:E5:4A:D9:D6:92:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcde::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:89:a4:e7:9c:82:5b:c3:36:d5:9d:3d:13:0e:e9:52:e9:e5:
         16:9a:47:fa:72:f3:cc:ea:e1:68:08:5a:90:76:79:b5:a5:f2:
         3e:27:3f:55:a5:c9:27:c4:4a:e9:6b:7f:ee:a5:c6:b3:26:56:
         40:30:e7:66:13:d7:fb:0d:e8:9c:6d:f5:52:5c:00:a6:87:aa:
         6d:81:a1:4f:01:32:b8:4b:10:ce:a4:b2:9c:21:1b:32:6f:ac:
         aa:e6:b9:c3:31:f7:99:43:4f:16:70:f4:4a:cc:05:88:a6:29:
         d8:fb:00:e3:49:88:93:62:6e:f7:a3:b9:4a:c9:22:bf:65:38:
         af:5a:0f:20:56:5a:14:a9:c2:4d:aa:45:4c:b1:c2:74:9e:c6:
         95:bc:61:2e:b7:e1:02:22:7d:71:e2:88:06:2d:91:58:83:d9:
         74:f6:be:4e:3b:a2:e1:e7:60:63:c3:df:a5:ad:26:16:8d:70:
         83:2a:6f:a2:5b:e1:04:ef:d2:1e:89:c9:06:74:fb:ba:c0:6c:
         13:21:bc:1e:38:46:32:0d:31:54:47:bb:94:38:ee:86:ed:65:
         2f:68:1f:8b:78:7f:42:08:7d:23:2e:93:14:70:55:52:31:eb:
         32:81:3d:5c:2d:a5:75:1a:5e:b8:ad:7e:cd:dd:fd:97:36:b0:
         b7:9e:30:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:00:54 2026 by rpki-client