Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/7ee09d50-9766-3739-bf54-024888d96b72.roa
File:                     7ee09d50-9766-3739-bf54-024888d96b72.roa (raw, json)
Hash identifier:          Ia32UdNtCdzUCH/R8gK0zyZrVt71f0XuzHT2VBwBL5s=
Subject key identifier:   6E:66:E6:5B:AE:40:2B:7E:6F:EC:72:52:21:E8:5A:30:79:B0:FA:22
Certificate issuer:       /CN=fca4862e-7314-4415-a264-4e5dc31b73d8
Certificate serial:       010D0C9F4328584F03A78E9749A59077B85CF500
Authority key identifier: F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/7ee09d50-9766-3739-bf54-024888d96b72.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     4185
IP address blocks:        2620:0:610::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:8e:97:49:a5:90:77:b8:5c:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca4862e-7314-4415-a264-4e5dc31b73d8
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=0e8aa81d-0ba0-48af-be5d-db193407eb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f3:c5:47:70:b2:c0:40:c1:df:b5:bd:94:08:
                    b8:f2:78:22:69:ec:d8:28:b2:9b:64:3c:44:2f:b2:
                    1a:34:4b:98:96:a0:03:01:7a:f8:5b:53:78:92:ab:
                    00:77:90:2f:0d:11:bc:94:ff:56:6e:e2:3a:be:a2:
                    32:67:7f:33:e6:5d:a6:b9:3c:13:8a:3e:d7:b8:83:
                    15:68:e0:cc:9b:cf:82:8e:a3:f4:8d:9c:a9:f0:6b:
                    ae:c4:f5:d7:21:0f:21:60:e1:89:a8:ff:ae:c3:a2:
                    ac:3c:b5:41:cb:02:ab:63:db:1a:2d:15:7a:9b:fa:
                    0e:fe:d5:8c:38:d3:f3:13:82:c6:e8:7a:2c:4c:28:
                    30:63:5d:f7:ea:8b:58:03:ae:23:0c:1d:77:28:7d:
                    d5:a3:51:56:ca:a9:9c:06:a0:b0:23:bd:27:98:96:
                    7d:b4:61:32:8a:8d:36:ed:93:7f:58:33:d5:b3:82:
                    dc:28:6b:49:fc:ce:16:9c:fb:fa:5b:8e:fc:74:2b:
                    96:89:51:e3:f4:62:10:8a:f1:82:2a:6f:6f:ea:a4:
                    cf:f5:c5:6c:a5:36:30:f2:e3:c4:88:5e:8c:28:78:
                    30:7e:ed:22:c7:20:6a:f9:79:ba:5f:f0:94:7f:e6:
                    d3:a5:c2:2b:11:56:84:96:1b:e2:1a:a6:0a:40:a8:
                    80:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:66:E6:5B:AE:40:2B:7E:6F:EC:72:52:21:E8:5A:30:79:B0:FA:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/7ee09d50-9766-3739-bf54-024888d96b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl

            X509v3 Authority Key Identifier:
                keyid:F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:610::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c4:6e:11:0f:f2:d6:1a:f2:cc:76:37:e9:9b:59:6b:35:0a:
         4f:78:5f:ec:d7:69:84:0a:b2:df:5c:d7:5e:fe:8d:5b:d5:9b:
         6b:51:01:e4:44:25:39:50:7e:4f:73:af:57:37:b6:97:dc:8c:
         88:77:67:c0:78:52:7e:95:ad:f4:0f:c7:1c:f0:2f:82:94:44:
         62:16:d9:c9:62:18:55:18:26:e0:9d:ed:3e:21:8c:82:54:ab:
         f4:5e:63:8c:e7:d9:bb:ea:15:2a:ec:64:06:e5:66:de:c4:67:
         57:f6:17:f4:99:39:b4:69:90:f2:fb:d5:15:92:03:ed:59:bf:
         6c:09:9a:9a:75:a3:0f:3b:24:73:bf:3e:ad:38:8a:14:81:b0:
         f8:05:08:57:0c:de:1c:90:92:0a:0a:9b:a6:3a:5f:3d:3e:c7:
         07:cd:5f:5b:a5:52:03:40:78:65:a5:30:af:a5:ec:c2:f7:d5:
         c0:d5:b9:25:55:15:6e:7a:27:f6:4e:3e:25:2e:a2:7f:93:4b:
         16:65:c7:2f:15:ae:e9:29:f1:8c:22:ed:36:1c:7f:8d:ec:eb:
         eb:36:e5:7c:b9:ae:17:6d:3c:79:8b:a3:da:ac:65:09:17:d7:
         b5:3f:89:8e:fd:57:88:0f:62:54:3d:3b:e4:aa:42:12:04:3f:
         8d:02:05:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:53:33 2026 by rpki-client