Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/fcaf83c1-9108-37e6-8a13-2e8231346c60.roa
File:                     fcaf83c1-9108-37e6-8a13-2e8231346c60.roa (raw, json)
Hash identifier:          a3vfAp2SW278vQTUd+lYysknpHPodGxaBpu4h6cIlwQ=
Subject key identifier:   2A:78:58:43:45:32:A1:BA:9F:66:FA:AE:5D:44:B0:4C:51:77:9B:83
Certificate issuer:       /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
Certificate serial:       010D0C9F4328584D0D426960511A50896896A280
Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/fcaf83c1-9108-37e6-8a13-2e8231346c60.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     36666
IP address blocks:        2001:19c0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:69:60:51:1a:50:89:68:96:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=96126fba-55e5-49c2-b58f-67ba4a4e5850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:11:ed:1b:b1:40:32:e5:f0:e5:f8:56:a1:86:
                    71:74:11:b6:71:25:e7:f3:06:5c:4d:18:c4:30:fa:
                    a7:87:e5:00:28:f9:83:e9:68:ea:6c:cd:09:fb:3d:
                    f8:78:c2:2d:dd:82:db:e7:94:2f:4a:99:2b:2e:fc:
                    0b:a3:11:85:4a:0c:2b:56:79:a3:34:49:29:ab:af:
                    82:80:15:63:e7:4f:e7:85:45:26:f9:7d:db:2c:03:
                    19:e8:fc:7a:e6:8c:69:7c:e9:ce:13:6b:21:80:53:
                    ff:a9:5a:34:6f:ff:4e:fe:74:71:84:d6:22:53:cf:
                    79:ec:da:51:d9:4e:c8:cb:0a:44:8e:44:1d:f6:10:
                    36:1d:4e:6d:f2:ec:0d:24:25:11:b2:21:2b:e0:3b:
                    6b:3e:8e:05:0b:73:77:fb:f0:92:2e:64:c6:94:7b:
                    3d:28:84:6d:a6:ca:f1:62:2c:bb:11:62:02:4e:e3:
                    60:26:cc:df:1a:4a:a9:e0:ac:5d:81:6e:89:b5:c2:
                    d2:10:57:52:45:7b:eb:b1:2c:1d:93:16:15:72:79:
                    2c:33:81:db:5a:16:00:63:98:0b:1c:27:ed:a9:a3:
                    d2:f1:9b:5d:9c:b3:8d:56:ee:82:36:c5:3d:39:78:
                    6a:93:6c:43:db:2f:6d:f7:1f:bd:7a:c8:65:28:78:
                    64:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:78:58:43:45:32:A1:BA:9F:66:FA:AE:5D:44:B0:4C:51:77:9B:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/fcaf83c1-9108-37e6-8a13-2e8231346c60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl

            X509v3 Authority Key Identifier:
                keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:2b:d6:e1:17:cc:7e:01:35:76:46:30:04:73:7f:29:4c:c2:
         8c:e2:e7:b9:7a:81:7f:15:90:e4:16:7c:c3:ea:47:26:9f:88:
         f2:81:b7:73:75:17:90:23:c8:52:00:15:1a:42:cd:e0:78:95:
         85:04:e9:73:6e:dd:35:00:e7:53:2b:93:79:f8:91:f6:59:6a:
         a6:32:7c:80:d4:47:dd:9b:b0:b8:7d:5f:9d:e3:46:b8:ed:d7:
         22:f3:74:ba:42:c6:e9:09:dc:91:89:e9:37:17:47:3a:4b:9d:
         de:03:57:97:b0:eb:fa:a5:21:ec:b7:f2:60:b3:fd:cd:cf:5f:
         f9:11:7c:05:21:40:05:8e:68:64:4b:df:9e:38:c7:19:2c:50:
         7b:46:7e:00:bb:45:2d:53:6f:4a:62:d5:41:4c:fd:fb:98:b7:
         aa:bb:45:78:c9:66:4b:ba:b6:fd:3c:90:67:fa:e0:ae:f6:81:
         dc:c9:96:4e:76:f8:dd:cf:e6:b8:8c:6c:70:48:38:cc:fc:a8:
         e5:3a:61:90:a9:cd:b3:17:ae:87:3e:80:35:70:5e:59:27:e7:
         fc:97:54:64:17:a1:f7:02:f9:87:33:e1:38:22:74:5f:07:e9:
         c6:ba:56:37:ec:0f:b5:9e:21:fb:bf:5d:9c:f1:7f:57:99:e6:
         a9:a2:dd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:02:27 2026 by rpki-client