Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fbe973c8-7dd9-307c-abbb-ded4307d8a3d.roa
File:                     fbe973c8-7dd9-307c-abbb-ded4307d8a3d.roa (raw, json)
Hash identifier:          oNRdCE41SVs7YYuZuN9IXrHTvpjVIGhYfqqZKDMo3xQ=
Subject key identifier:   7E:F9:14:14:BC:09:5C:1B:A2:09:3D:AD:61:FB:E6:6D:33:5E:68:EB
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584CC6120E4F9E84733A4BB66080
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fbe973c8-7dd9-307c-abbb-ded4307d8a3d.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     13445
IP address blocks:        2607:fcf0:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:0e:4f:9e:84:73:3a:4b:b6:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=a0020fc7-c54b-4dc3-81b1-c2e8faa27e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c3:51:a5:c1:a1:6c:fb:bd:0c:ec:51:c9:25:
                    d7:fa:6d:9b:c2:64:9b:2e:bd:5d:1b:89:5b:b8:00:
                    c6:70:1a:76:22:e0:aa:72:3f:fe:62:fc:a3:b4:ab:
                    e7:da:ac:6b:6a:ac:13:c2:c3:43:db:b7:ae:49:2a:
                    90:a4:72:b5:a0:c5:62:e6:3a:e4:b5:10:0d:79:73:
                    bd:23:9e:55:60:92:cf:6e:0c:c9:24:2f:74:f5:0a:
                    ed:76:66:14:a5:43:eb:03:ef:57:31:e1:bb:6c:55:
                    af:c9:c7:70:58:3f:c0:78:e6:85:8c:48:47:1b:04:
                    c7:9c:27:3f:88:06:f1:cc:de:c6:6e:35:a2:5e:01:
                    e7:d4:40:f7:6d:1e:bb:f9:78:26:63:9f:ca:19:72:
                    40:86:07:99:5d:b4:63:47:ef:8c:7e:af:b2:01:14:
                    a7:cf:21:ee:fb:aa:34:99:7d:b5:1c:4f:40:08:14:
                    1e:e3:56:c7:5c:f8:6e:85:9b:2b:b0:c4:8b:83:8d:
                    28:99:a2:2f:f8:57:3b:48:47:32:24:ea:2d:50:5b:
                    e6:49:7a:db:4c:c6:40:ac:5f:3e:b6:17:9f:5c:c5:
                    c0:39:a5:02:e6:ec:48:21:9c:c0:77:d6:5c:f4:b0:
                    80:0e:bb:49:04:fc:32:ca:c7:b7:37:10:39:c1:e2:
                    d6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F9:14:14:BC:09:5C:1B:A2:09:3D:AD:61:FB:E6:6D:33:5E:68:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fbe973c8-7dd9-307c-abbb-ded4307d8a3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:5f:02:aa:07:11:f0:5f:f8:3f:f6:44:e0:4a:0f:96:83:1a:
         ec:37:49:33:d7:c3:31:22:ba:32:d1:6c:b2:f4:49:07:9a:4d:
         96:42:90:5d:9e:5d:ea:17:14:d4:3d:ab:60:e0:ee:6a:d9:09:
         30:25:87:45:28:ef:ea:b3:b3:80:95:84:a7:f3:72:b1:c4:60:
         60:ee:d0:26:fb:68:ab:3e:a9:fe:6c:43:ea:6f:fe:e3:4e:4c:
         f6:1d:fd:be:e2:0f:15:3f:fa:60:09:bc:65:1b:86:16:6d:18:
         4e:0e:8a:03:a2:d8:27:e8:6f:00:e3:d1:d5:26:d2:71:fb:fe:
         ed:a5:aa:e8:95:79:5a:5b:23:6a:c4:c4:e9:39:7b:38:d6:b7:
         a6:d4:b6:6d:61:9b:08:20:c4:9e:96:9d:0d:39:be:32:dd:99:
         4a:e7:b0:e1:fa:2b:8c:ea:ed:23:79:e6:d0:1e:61:ff:54:99:
         4f:bd:f8:09:e7:e6:dc:85:f8:80:ac:de:f7:09:18:79:69:b3:
         5a:0c:4c:ed:b9:87:a5:b4:0e:e4:24:8a:b1:48:7e:33:27:41:
         36:ac:6c:38:3a:8c:25:47:6f:f3:76:22:e1:2b:d8:6c:7f:c5:
         d6:49:18:d9:53:cc:a8:b0:4a:76:ba:b9:4f:90:bd:a2:78:d7:
         1c:de:9d:57
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzGEg5PnoRzOku2YIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk
YTAwMjBmYzctYzU0Yi00ZGMzLTgxYjEtYzJlOGZhYTI3ZTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMNRpcGhbPu9DOxRySXX+m2bwmSbLr1dG4lb
uADGcBp2IuCqcj/+YvyjtKvn2qxraqwTwsND27euSSqQpHK1oMVi5jrktRANeXO9
I55VYJLPbgzJJC909QrtdmYUpUPrA+9XMeG7bFWvycdwWD/AeOaFjEhHGwTHnCc/
iAbxzN7GbjWiXgHn1ED3bR67+XgmY5/KGXJAhgeZXbRjR++Mfq+yARSnzyHu+6o0
mX21HE9ACBQe41bHXPhuhZsrsMSLg40omaIv+Fc7SEcyJOotUFvmSXrbTMZArF8+
thefXMXAOaUC5uxIIZzAd9Zc9LCADrtJBPwyyse3NxA5weLW3wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFH75FBS8CVwbogk9rWH75m0zXmjrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZmJlOTczYzgtN2RkOS0z
MDdjLWFiYmItZGVkNDMwN2Q4YTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf88Acw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAqF8CqgcR8F/4P/ZE4EoPloMa7DdJM9fDMSK6MtFssvRJB5pNlkKQ
XZ5d6hcU1D2rYODuatkJMCWHRSjv6rOzgJWEp/NyscRgYO7QJvtoqz6p/mxD6m/+
405M9h39vuIPFT/6YAm8ZRuGFm0YTg6KA6LYJ+hvAOPR1SbScfv+7aWq6JV5Wlsj
asTE6Tl7ONa3ptS2bWGbCCDEnpadDTm+Mt2ZSuew4forjOrtI3nm0B5h/1SZT734
Cefm3IX4gKze9wkYeWmzWgxM7bmHpbQO5CSKsUh+MydBNqxsODqMJUdv83Yi4SvY
bH/F1kkY2VPMqLBKdrq5T5C9onjXHN6dVw==
-----END CERTIFICATE-----
Generated at Thu Feb 26 10:43:05 2026 by rpki-client