Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/fa4cfe20-cbaf-3de8-9909-501b40a1e63a.roa
File:                     fa4cfe20-cbaf-3de8-9909-501b40a1e63a.roa (raw, json)
Hash identifier:          NPHyy9LuPbyty3X/mX5ASqxfxDY0hszECmdtjPC9O+0=
Subject key identifier:   65:94:CD:0B:65:AA:43:DC:55:CF:95:8C:2B:7C:E2:39:42:DA:AF:55
Certificate issuer:       /CN=e4f064d0-9017-41e7-be21-c7b9883020d5
Certificate serial:       010D0C9F4328584D60E50A25475EC13D64A5E100
Authority key identifier: 6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/fa4cfe20-cbaf-3de8-9909-501b40a1e63a.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     21903
IP address blocks:        2602:fa6d:70::/46 maxlen: 46
                          2602:fa6d:74::/46 maxlen: 46
                          2602:fa6d:78::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:0a:25:47:5e:c1:3d:64:a5:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f064d0-9017-41e7-be21-c7b9883020d5
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=85477fc5-27b7-42ab-bb2d-4a9d4cc3e0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bf:cc:18:e0:53:d6:c0:f8:5d:2b:ed:f3:c5:
                    9c:94:fd:f3:f9:01:c0:7a:30:6b:56:5a:6e:a0:c6:
                    6c:bc:eb:e4:d6:cb:af:86:21:42:10:b3:45:8a:9a:
                    12:e3:5b:2e:33:d3:d9:82:d9:1b:c4:e0:8a:49:70:
                    69:61:8d:8b:65:49:9c:7d:1d:4f:82:5f:76:c6:30:
                    2f:7a:a3:3a:1a:05:9f:f1:c6:b6:75:85:20:fe:80:
                    66:42:24:1d:b1:23:6d:64:bd:0e:ef:30:47:fe:12:
                    3d:d2:d2:1e:b0:7f:46:a0:75:f4:55:db:05:fe:89:
                    02:74:82:e5:61:a1:cc:fa:46:67:72:c4:a6:d2:9c:
                    1e:5a:f1:f4:f4:f9:fa:f9:5a:ee:27:90:dd:10:71:
                    e2:1d:fe:2a:95:be:c3:61:fc:6e:bc:5f:2b:fd:5c:
                    c3:43:92:5a:34:ae:5d:9c:c3:79:1e:53:99:fb:4e:
                    ce:5a:56:17:32:e1:41:fb:67:d7:ae:aa:8f:dd:0e:
                    36:9d:bb:42:42:d6:04:1d:20:27:3a:17:8e:f3:4a:
                    38:22:e8:b2:0a:9c:ea:7e:63:93:77:38:2b:4f:ec:
                    b5:59:b1:84:5c:39:8d:88:95:85:fa:3f:40:d6:bd:
                    6c:38:31:89:a0:35:4f:4d:d7:f1:66:4d:4c:03:1e:
                    80:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:94:CD:0B:65:AA:43:DC:55:CF:95:8C:2B:7C:E2:39:42:DA:AF:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/fa4cfe20-cbaf-3de8-9909-501b40a1e63a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6d:70::-2602:fa6d:79:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f7:ae:d3:20:9f:19:f1:c1:d2:9d:8a:22:94:64:9f:55:b5:
         8d:d5:7f:6d:66:52:cb:5e:ca:9e:1b:52:19:62:ae:11:5d:00:
         d5:d4:24:05:09:ab:b0:41:a3:da:92:96:d7:5e:55:b0:be:57:
         b3:3f:4e:f7:de:af:be:22:f3:7e:75:e8:5f:2d:46:9d:64:c9:
         d8:df:ad:f2:bc:65:42:0f:09:ff:81:f1:91:b9:5b:69:61:d4:
         45:c8:03:c1:c3:06:fe:6e:c3:f9:b4:a3:b7:6f:9a:cf:19:59:
         57:fc:cc:60:13:9d:ee:4d:f4:49:56:9d:5a:89:e8:11:b2:66:
         e5:d8:88:a6:15:b5:84:f3:72:4b:22:30:5b:8b:91:c3:01:93:
         83:b4:e0:4b:dc:07:01:92:6a:0b:ba:47:80:42:d7:46:8d:8e:
         36:ec:6f:37:cf:dc:33:68:48:aa:d4:e4:3f:2f:5f:6e:7a:fe:
         46:8e:5b:de:8a:09:ce:70:14:63:e3:60:8a:fb:e7:91:ed:b7:
         4b:b0:3a:dc:9e:13:1b:0e:15:1a:39:72:35:85:ea:e5:f7:55:
         04:b5:4d:52:6b:a9:37:b9:39:6e:c4:d5:01:7f:8d:59:87:10:
         63:e9:2e:38:63:86:77:0b:c4:bb:00:8e:1c:3f:65:dc:9c:d6:
         7c:13:0f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 17:39:29 2026 by rpki-client