Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/b95d006f-bb0b-314c-8fcf-dca8aaf0b1ab.roa
File:                     b95d006f-bb0b-314c-8fcf-dca8aaf0b1ab.roa (raw, json)
Hash identifier:          s103zjk8/EsKHIxTn+uiOpfsUFjg2rbXHFjSbiyTOKQ=
Subject key identifier:   2E:51:11:A8:C2:10:31:92:B6:8B:22:95:15:A4:AD:EE:93:BB:26:27
Certificate issuer:       /CN=fc3e43f1-7036-46e1-946a-c9e7a67efa67
Certificate serial:       010D0C9F4328584E7E94F5B17A77C3ECF6FAF440
Authority key identifier: D0:62:53:48:F7:DB:E4:10:64:33:BE:C3:2B:02:93:C1:6C:53:B4:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/b95d006f-bb0b-314c-8fcf-dca8aaf0b1ab.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     40119
IP address blocks:        2620:fc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:f5:b1:7a:77:c3:ec:f6:fa:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3e43f1-7036-46e1-946a-c9e7a67efa67
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=dc3e5096-16a7-4220-a02d-dd2904fc0ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3d:ff:39:c1:a0:7e:48:19:ed:e1:f7:a9:bb:
                    c6:b8:ca:e9:b5:de:fa:a3:2a:9a:e9:3c:c5:83:ac:
                    e9:93:f5:04:e9:b6:30:42:2e:0e:7d:6e:94:d8:40:
                    de:fb:92:40:4c:c9:c9:ec:90:b4:b8:79:6c:52:b4:
                    33:cc:4e:32:f1:ba:af:ff:ba:d5:81:ed:c1:52:05:
                    31:06:a6:25:0d:39:d6:c9:17:c7:27:4f:ee:9d:aa:
                    77:ec:95:2f:6b:2d:96:77:37:7c:e9:f7:b7:e3:ac:
                    ce:15:3a:08:64:08:81:46:20:85:24:59:c1:ec:99:
                    a0:e1:88:11:82:4e:e3:02:eb:7c:ff:e8:07:99:64:
                    26:04:ab:4e:5d:8c:f7:26:5e:55:ba:ec:a3:ca:73:
                    19:e1:10:f4:46:df:d0:3c:bd:bc:8d:dd:78:79:6f:
                    ba:a0:76:c3:c3:21:f6:60:7f:ab:38:2c:18:02:e8:
                    bb:43:71:61:f5:08:24:5c:06:07:2c:b2:f4:cb:7c:
                    a7:80:3c:52:61:3a:8f:28:b3:3e:6b:d3:da:dc:79:
                    00:da:cf:76:f2:24:d3:46:69:cc:2a:9b:30:54:7a:
                    5f:f1:7b:f5:68:8a:ce:1d:47:3b:34:0e:95:57:01:
                    4b:ac:f1:6e:ce:43:57:cc:7f:de:db:b6:25:3a:58:
                    ed:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:51:11:A8:C2:10:31:92:B6:8B:22:95:15:A4:AD:EE:93:BB:26:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/b95d006f-bb0b-314c-8fcf-dca8aaf0b1ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.crl

            X509v3 Authority Key Identifier:
                keyid:D0:62:53:48:F7:DB:E4:10:64:33:BE:C3:2B:02:93:C1:6C:53:B4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:45:25:c5:a1:6b:7b:0b:34:c2:de:e6:b4:33:93:e4:57:28:
         b7:0f:a7:ac:89:80:f2:eb:45:5a:4c:cd:21:70:78:de:8a:32:
         a9:49:a1:89:55:71:d1:39:5b:b7:93:b4:33:67:e9:9b:9c:59:
         41:df:4e:c0:42:ea:80:a7:d5:52:53:6c:38:3f:72:10:f0:1f:
         9a:de:6a:a4:72:09:0f:e0:aa:2a:4d:4c:e8:04:b7:ff:0c:f6:
         7b:2f:a2:db:39:07:41:6f:39:da:53:eb:0f:fe:b4:bd:1e:43:
         cc:0c:34:7f:b9:ac:87:9d:a7:1e:61:b8:7b:5f:f0:c5:6e:19:
         8e:3b:f3:bd:5a:88:12:0a:90:91:7f:35:14:74:b0:35:49:73:
         8f:9a:ee:a6:22:3d:d2:37:82:a6:66:d9:a8:39:e3:63:9b:60:
         61:0a:26:30:0c:20:6b:5a:9d:d3:1a:bc:76:4c:41:17:9c:07:
         9b:69:f7:52:92:7e:5b:aa:de:b1:31:e6:41:84:54:25:c2:d6:
         1f:2b:c9:2a:18:7a:1e:5a:98:54:2f:4d:b4:bf:85:5d:3a:34:
         5e:ad:4c:75:0c:98:da:78:47:6e:ba:06:89:73:77:8b:05:ce:
         f8:9a:3d:03:e8:be:6c:80:c7:11:c2:7b:ce:5f:65:f9:50:4f:
         2a:19:c8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:08 2026 by rpki-client