Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa
File:                     f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa (raw, json)
Hash identifier:          5dxnTHFu6eOGgLuNp+mfyYhO9irxBKXOHuHv3QSDGSY=
Subject key identifier:   E8:BB:05:6F:14:53:11:86:0E:05:7A:54:ED:57:84:C7:60:A6:7E:4F
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F4328584CBF172E8AE7245E7275166F40
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     0
IP address blocks:        2602:fb78::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:2e:8a:e7:24:5e:72:75:16:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=aec7ecbb-a691-47fb-a900-c4ef29e525a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3c:49:dd:b9:d8:e4:32:71:51:b5:91:2d:26:
                    d2:ab:ef:e9:0b:e4:dd:60:45:57:42:8f:d4:19:47:
                    45:b1:e5:9e:27:69:8a:66:4d:75:10:bb:a3:bf:7b:
                    b5:fe:71:41:65:59:a0:e7:37:e2:a9:e6:c5:ab:a2:
                    7c:1d:c2:ea:77:c5:19:18:9f:25:47:4f:c2:a8:82:
                    22:76:fb:fd:ea:cd:53:7b:43:df:43:9e:61:7b:0e:
                    89:58:50:f8:0b:95:59:e1:3f:ff:1e:61:54:10:8a:
                    e3:04:94:be:9e:2c:23:46:b5:a5:a9:e4:b5:a7:e5:
                    45:1d:69:64:bd:d9:1a:07:8b:a2:4b:de:ea:e0:23:
                    86:4a:bb:9c:81:ef:92:94:d7:fb:c3:25:be:32:5b:
                    ca:3a:f4:0f:fe:66:4a:72:7a:63:30:a1:1f:99:38:
                    0e:68:60:07:aa:d0:bd:44:5e:70:21:34:0c:4a:33:
                    76:4a:d7:c7:cc:5c:cd:2a:a4:86:75:a0:a3:53:f4:
                    83:66:ae:bc:5b:0c:b7:19:3d:34:f5:73:b6:22:78:
                    5a:a6:35:eb:ad:7b:4b:32:24:f4:e3:cb:30:0f:17:
                    9f:cd:33:aa:38:06:10:ca:7c:ed:73:42:d2:a5:7e:
                    00:d1:ae:73:d4:8f:48:8d:f1:81:0e:07:f8:da:35:
                    8e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BB:05:6F:14:53:11:86:0E:05:7A:54:ED:57:84:C7:60:A6:7E:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/f9f7ea2b-614d-3bc9-8fa3-9843aebeefc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a5:8e:45:95:f8:3d:59:22:c6:ee:fa:a8:31:e1:71:f3:a3:
         f2:5a:09:ef:4b:5e:3c:fe:2b:12:04:6c:dc:4e:04:9f:d4:5f:
         e8:06:2c:54:72:14:7d:80:38:75:8a:20:05:5c:9d:99:cf:71:
         59:fc:67:ab:a0:4f:2a:d1:ba:0a:93:27:b9:93:7a:d7:a4:23:
         8b:19:55:55:2e:f6:5b:67:3e:7c:04:dd:6c:e8:92:35:67:c0:
         bb:6f:08:03:f4:20:03:37:60:14:9f:03:11:26:76:aa:6a:8b:
         4d:5d:d4:46:e0:28:f4:21:a0:86:95:1b:48:87:19:1b:d8:f2:
         44:a1:9c:e5:4d:81:30:dc:5b:6b:b5:7c:e5:d7:60:c3:b8:f2:
         34:2b:10:b9:c5:a3:d8:77:0b:f9:5a:b9:64:81:6d:32:a2:66:
         2e:9d:43:5c:07:f9:26:0b:8f:d0:a6:80:12:8d:ec:74:56:1a:
         05:a1:32:fb:d8:87:9f:34:53:d6:14:c9:d2:0d:e9:9f:7f:23:
         0f:ff:38:6f:ba:07:44:35:85:6b:64:cd:c9:54:c1:cd:66:62:
         40:14:2f:7f:ab:71:54:1b:47:2c:bc:e0:90:ad:b7:c1:15:7f:
         96:84:4a:8a:3e:3a:c5:fa:e2:97:30:85:2a:e2:49:8b:87:e3:
         12:07:5f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:42:35 2026 by rpki-client