Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/fc8851b8-385e-3d55-8759-66fb3fa1f38c.roa
File:                     fc8851b8-385e-3d55-8759-66fb3fa1f38c.roa (raw, json)
Hash identifier:          DgFaPYqKg/ny9IWQunW+Km6KMDf+yc5gwhWyRgicuAE=
Subject key identifier:   01:17:D5:FB:B1:7F:4C:D2:60:74:10:9A:97:B4:91:EE:AC:BF:8A:CD
Certificate issuer:       /CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
Certificate serial:       010D0C9F4328584D09126748A10B055A1B690000
Authority key identifier: CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/fc8851b8-385e-3d55-8759-66fb3fa1f38c.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        2602:fcee:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:67:48:a1:0b:05:5a:1b:69:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=8e7bb719-1064-4665-9123-bec46f3c5d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:73:a4:2e:96:91:45:a7:8f:00:cf:bc:24:31:
                    46:25:d9:77:f1:e4:1a:14:e2:ad:1e:b1:d0:fe:1a:
                    6d:da:41:c4:7d:f9:6b:2f:c3:80:9c:67:bc:7a:eb:
                    43:ca:f3:d5:38:d5:aa:64:05:72:6d:25:7b:63:02:
                    85:83:91:5a:83:fd:5c:3e:00:02:4b:45:be:06:31:
                    71:0f:99:e5:ed:76:d4:a7:13:ba:81:5c:62:6c:78:
                    88:9c:47:bf:11:4b:58:85:72:59:10:5c:21:ea:62:
                    bb:e2:f3:75:d2:f6:24:17:9a:58:20:fd:e2:98:e9:
                    c4:16:c9:a4:40:cd:17:40:de:13:5b:d4:cb:29:eb:
                    a5:0f:af:4b:4d:df:b4:06:51:2b:7c:bc:19:80:4a:
                    ff:18:fe:3e:3c:23:f3:b4:ad:e8:cf:53:6d:e2:94:
                    a9:c9:79:dc:d3:e5:87:b4:d4:2b:b6:18:c3:bb:49:
                    d4:1e:65:c6:9c:d8:ac:c5:b3:e8:5b:dd:a8:d4:c8:
                    98:7e:76:c9:4c:6f:02:c2:b0:ab:0e:5d:84:7b:84:
                    f6:da:36:a8:a4:08:0f:eb:d0:2d:20:94:3f:f0:8d:
                    76:ff:1e:4c:39:78:b5:1f:6e:be:96:70:8f:76:c2:
                    35:76:ce:71:48:88:b0:aa:29:2e:e8:30:13:81:75:
                    08:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:17:D5:FB:B1:7F:4C:D2:60:74:10:9A:97:B4:91:EE:AC:BF:8A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/fc8851b8-385e-3d55-8759-66fb3fa1f38c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcee:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:22:50:46:3c:57:61:9c:59:9f:ce:4c:3a:25:62:6b:b9:22:
         3f:d8:e7:28:4f:b1:5c:40:75:5e:b4:00:c5:8e:79:73:42:dd:
         d3:02:35:d2:a0:30:54:50:2f:6b:91:8a:e6:dd:ec:34:18:b9:
         00:43:c3:f0:0c:ad:67:cd:e1:0a:ce:5a:5a:8b:97:0b:b4:17:
         4b:b3:87:46:87:90:78:3d:cb:08:24:3d:87:65:cd:b5:0f:bb:
         f2:93:53:fb:01:22:ee:50:11:09:6d:25:19:8b:19:c7:a7:4f:
         94:05:40:b6:87:34:b4:47:70:7a:e2:e2:8f:c8:0a:26:38:c7:
         02:45:46:16:1e:ef:c3:ed:a2:42:c8:92:d7:b0:d2:92:8a:37:
         fb:e1:b7:5b:d8:81:c7:ba:9f:c1:c1:b9:c2:13:fb:af:dc:4e:
         7f:c3:e5:0c:e9:d5:95:28:00:a4:8e:a0:2f:66:08:dd:73:22:
         77:f5:55:cf:f2:d7:0f:f7:c5:d2:f1:eb:8a:62:dd:2e:5c:7f:
         f5:bd:33:e3:0b:ed:75:b8:b5:27:5b:76:c6:e4:7d:ec:4e:bf:
         06:3b:f0:32:76:4a:6b:a5:89:cb:c3:d1:75:c4:60:d5:b1:82:
         d6:4f:dc:38:a1:f5:32:45:db:93:0a:c0:14:41:77:cb:fd:ae:
         27:ac:66:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:46 2026 by rpki-client