Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/fda04578-1852-37e8-942d-696b643a77de.roa
File:                     fda04578-1852-37e8-942d-696b643a77de.roa (raw, json)
Hash identifier:          ph4hWC//gOnWNs9N3pgaA7eE3I/yrW6j0AVekeZGZCc=
Subject key identifier:   35:F0:9C:1D:2A:6E:FC:86:A3:B4:31:74:FF:ED:9A:5E:5C:39:ED:A2
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584D18378C7D36C69D4C4B65A880
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/fda04578-1852-37e8-942d-696b643a77de.roa
Signing time:             Sun 08 Mar 2026 00:12:54 +0000
ROA not before:           Sun 08 Mar 2026 00:12:54 +0000
ROA not after:            Fri 05 Jun 2026 23:12:54 +0000
asID:                     6517
IP address blocks:        2607:ffd8:ff02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:18:37:8c:7d:36:c6:9d:4c:4b:65:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Mar  8 00:12:54 2026 GMT
            Not After : Jun  5 23:12:54 2026 GMT
        Subject: CN=a43df338-5cf6-4f85-9021-b282dc60e73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:61:c6:13:e5:43:c4:16:f0:59:63:10:4a:68:
                    c8:d0:36:b6:42:8f:6c:56:17:5e:42:f2:3e:45:e7:
                    44:2c:8e:8e:34:86:1a:fb:cf:b8:45:f0:fd:67:45:
                    10:56:7d:91:56:b1:08:f1:68:4c:53:14:df:72:f3:
                    bd:0d:fa:43:17:3f:63:fa:51:46:7b:4f:f0:ec:76:
                    e3:20:01:f9:4e:8b:76:69:29:2b:81:50:e0:8d:e4:
                    5f:ae:c3:41:18:69:46:e5:a5:9a:54:2e:f0:b8:3a:
                    6f:3b:ac:12:e3:8b:a9:73:a2:e6:19:30:3f:ae:95:
                    d6:7a:6b:93:b3:a4:81:c5:65:f2:94:5f:ad:4d:b5:
                    92:97:a5:90:92:ae:f9:d8:be:bf:8f:39:86:4a:f6:
                    41:89:71:b4:14:a1:e9:6a:b0:33:0c:6c:3d:12:54:
                    35:7d:5f:56:63:f3:13:33:54:86:6e:c7:00:b8:56:
                    ff:82:4f:c6:1e:f5:e1:f5:11:ad:7c:8f:2d:b5:e1:
                    9c:f3:81:6b:25:64:99:67:3c:98:37:98:d7:0d:bd:
                    3c:f4:ef:d9:f9:0c:23:f8:73:91:87:88:a0:c2:c0:
                    3d:40:85:9e:53:5c:79:d9:17:80:bf:ba:1f:e6:e4:
                    1a:81:f1:b1:7a:20:91:9b:0a:2a:8c:e7:0c:a7:97:
                    69:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F0:9C:1D:2A:6E:FC:86:A3:B4:31:74:FF:ED:9A:5E:5C:39:ED:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/fda04578-1852-37e8-942d-696b643a77de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ffd8:ff02::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:46:82:51:ed:85:d6:66:52:ed:df:ce:37:d5:9c:40:2f:98:
         8b:bd:23:09:40:50:59:0a:34:1f:42:10:9d:6e:60:39:39:de:
         65:0b:a1:96:5b:6c:eb:3f:f4:99:a2:96:b0:1b:b8:7a:be:d8:
         cb:c4:78:c7:eb:f7:46:75:1f:2c:3d:88:cb:cb:73:28:5c:82:
         55:d4:6f:09:c6:a6:37:32:3d:d9:b3:da:56:16:64:61:05:8f:
         43:f2:53:41:36:85:17:9d:e0:9e:28:dc:39:7f:38:90:1f:43:
         b7:b8:03:cf:88:bb:08:29:d9:41:84:bf:7e:8a:35:9b:5f:42:
         a5:f4:61:e7:d4:ac:f5:12:1c:74:5e:ef:bd:18:ad:81:ca:07:
         38:51:8d:62:af:60:e7:1f:3d:e3:71:e1:a4:5c:df:02:8d:aa:
         7a:d8:b5:c0:80:f1:46:ce:b9:8b:0d:f5:2d:ef:f1:98:93:f7:
         81:b3:73:61:bb:14:47:64:f9:e9:5f:8d:e2:1e:69:77:95:45:
         ca:7b:ec:23:6b:64:c0:25:99:ff:79:96:dc:c5:5d:7c:c0:94:
         12:3a:81:3d:04:24:e5:b2:3e:d9:bd:b7:7c:20:d1:1c:61:57:
         4f:f4:a6:ab:60:44:06:10:6f:da:79:f5:3e:da:5a:0c:95:84:
         42:21:1f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:26:07 2026 by rpki-client