Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/87b022fa-e111-3038-a736-36814da5a24f.roa
File:                     87b022fa-e111-3038-a736-36814da5a24f.roa (raw, json)
Hash identifier:          fZB6Y86+kqMHAjhk4Ps3Wbr2O/kW4gMik0eRvS7/QO8=
Subject key identifier:   9D:3C:15:FE:95:FB:BB:1E:E8:3C:A1:32:B9:28:5D:89:A9:98:DA:B5
Certificate issuer:       /CN=fca4862e-7314-4415-a264-4e5dc31b73d8
Certificate serial:       010D0C9F4328584F497594B7CE695B72228F5E00
Authority key identifier: F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/87b022fa-e111-3038-a736-36814da5a24f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     4186
IP address blocks:        2620:0:610::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:94:b7:ce:69:5b:72:22:8f:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca4862e-7314-4415-a264-4e5dc31b73d8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0f77f451-336c-47b1-b80e-57a2c6eeeb69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:13:66:7a:91:e1:fe:0b:0f:8d:d9:84:ef:1c:
                    6a:b4:4e:54:f7:b2:bc:db:49:d2:f5:a9:65:89:17:
                    54:65:ee:e9:cb:c3:95:7c:3f:f7:b9:51:d7:0f:05:
                    9a:2f:38:0b:00:fb:94:c9:51:98:53:40:b4:46:bd:
                    4f:33:f2:55:e2:07:a9:03:9a:57:fd:c4:a1:34:46:
                    f7:f3:7d:25:2f:3a:e9:23:2d:f6:90:bd:4e:c9:61:
                    5f:b9:af:3d:60:7e:7c:71:a7:39:62:b3:ba:35:07:
                    bf:39:ca:b1:a9:6d:8b:f7:ce:96:d6:f5:af:b2:be:
                    a9:f7:a4:77:b0:b8:9f:ca:b7:92:56:bf:a7:5e:2c:
                    b1:73:7f:c9:7a:16:84:32:67:16:9c:31:72:03:37:
                    d1:88:fd:ea:ec:f3:f4:20:50:af:18:cb:4c:2e:e3:
                    fa:9c:33:8e:4f:1d:a5:dc:14:35:0c:c8:43:4e:43:
                    df:27:31:23:91:66:9f:35:7c:63:13:9a:af:a0:29:
                    e9:dd:d2:6a:5c:2c:4b:ef:af:d6:ba:7c:25:07:53:
                    d7:bf:f3:f9:2c:97:06:4c:ab:0e:bf:f5:8e:59:1d:
                    b8:23:e9:01:2b:af:35:70:40:c7:ad:3c:97:fa:d0:
                    4f:5b:e3:09:fc:f0:d2:d3:7e:e8:c9:65:37:c1:0b:
                    fb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3C:15:FE:95:FB:BB:1E:E8:3C:A1:32:B9:28:5D:89:A9:98:DA:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/87b022fa-e111-3038-a736-36814da5a24f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl

            X509v3 Authority Key Identifier:
                keyid:F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:610::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:87:e0:70:ed:eb:eb:f6:39:f5:c9:23:57:c9:cb:39:58:4f:
         fb:37:73:90:4a:3f:bb:52:fa:4f:7f:4e:a8:49:72:d3:ee:64:
         29:dc:3e:0a:a9:24:bd:2e:f0:37:c0:37:bf:66:18:79:1b:14:
         4f:e1:7d:56:03:91:77:3b:d4:03:ed:71:30:c1:c9:8e:79:06:
         f5:d0:2c:49:e9:d7:01:54:1d:a1:68:5a:a5:c0:e7:1f:68:b8:
         96:83:b2:7b:79:ea:48:f3:c4:03:4d:3d:14:0a:1c:6e:79:32:
         2b:76:59:7a:91:41:20:81:c3:44:81:7c:d4:37:88:6d:8f:38:
         74:f9:72:36:a8:10:f6:cf:a7:a7:1d:ca:76:0d:d6:22:ee:6f:
         0f:a3:02:02:1d:de:58:1c:56:5e:e4:f8:c4:15:5b:54:37:ed:
         2b:3b:3b:c6:06:4b:1d:d5:dc:83:f4:4a:cb:2c:e5:c1:53:fe:
         6e:11:75:83:b6:49:f8:5b:6c:30:13:74:e3:ca:99:0d:1e:27:
         72:d6:ce:ce:12:fa:e6:cd:66:bf:2f:09:cd:f0:9e:b1:ee:cc:
         b0:1e:2f:5c:ab:d1:81:69:35:46:52:c3:91:54:84:0e:12:a1:
         c0:c9:12:02:c1:75:4f:99:c5:d6:8f:bf:2e:88:78:e0:67:59:
         1e:39:6c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:41:46 2026 by rpki-client