Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/fa478577-19e5-3bb6-b7d8-a2cbcf25a3a8.roa
File:                     fa478577-19e5-3bb6-b7d8-a2cbcf25a3a8.roa (raw, json)
Hash identifier:          /nFEemawLL/+tK+suSWLF11VFwfip0WO2reOoAVu4Bs=
Subject key identifier:   94:26:FA:F5:FD:C0:B1:33:78:CE:8E:1D:20:80:19:20:59:15:C6:85
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584D300A56CDA38F24C7A396BEA0
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/fa478577-19e5-3bb6-b7d8-a2cbcf25a3a8.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     27299
IP address blocks:        2620:10a:8001::/48 maxlen: 48
                          2620:10a:8002::/48 maxlen: 48
                          2620:10a:8004::/48 maxlen: 48
                          2620:10a:8023::/48 maxlen: 48
                          2620:10a:80d1::/48 maxlen: 48
                          2620:10a:80d4::/48 maxlen: 48
                          2620:10a:80f1::/48 maxlen: 48
                          2620:10a:80f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:56:cd:a3:8f:24:c7:a3:96:be:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=eff66735-e942-4d84-931a-120cbf96cba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:92:8a:bb:39:3e:40:b1:46:10:22:6b:b3:
                    91:2f:24:82:45:f4:11:9a:2a:48:35:81:14:f1:e4:
                    56:d7:b3:bf:f5:e1:2b:80:fb:23:71:93:a8:05:3d:
                    9a:a9:c3:30:b6:dc:f6:c4:ca:3f:5a:e3:af:b4:d6:
                    39:d3:09:b7:06:ba:47:91:e8:5c:ed:77:d8:f0:54:
                    1c:23:bb:26:39:e9:87:75:7f:ea:28:b1:43:0c:79:
                    e5:60:96:89:8c:8a:a0:8a:65:e1:07:da:9f:22:24:
                    98:10:2e:4e:c6:7e:03:c7:57:18:45:74:7c:e1:5c:
                    b6:e8:b3:2c:04:ed:0e:e3:4d:b5:46:93:f2:a7:40:
                    2e:d5:61:fa:59:fd:45:f9:0e:2c:7a:d9:99:5d:5e:
                    1a:f8:31:5d:dc:36:1a:43:90:42:c9:46:47:96:6e:
                    bc:55:eb:8b:21:32:b7:aa:ce:88:70:c5:94:24:96:
                    ec:d5:1a:50:1f:53:d1:8c:f9:8c:e0:cf:03:00:17:
                    16:eb:38:4f:7d:ef:54:61:a6:a6:2f:60:c3:24:76:
                    9b:b8:aa:ae:b4:84:40:ce:bf:3f:9b:5e:ce:85:64:
                    bb:f7:60:02:ab:65:cc:7e:c0:b7:e2:7a:c6:f0:58:
                    33:f2:a8:a0:b3:e8:7c:b7:0c:06:a7:42:7a:43:60:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:26:FA:F5:FD:C0:B1:33:78:CE:8E:1D:20:80:19:20:59:15:C6:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/fa478577-19e5-3bb6-b7d8-a2cbcf25a3a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:8001::-2620:10a:8002:ffff:ffff:ffff:ffff:ffff
                  2620:10a:8004::/48
                  2620:10a:8023::/48
                  2620:10a:80d1::/48
                  2620:10a:80d4::/48
                  2620:10a:80f1::/48
                  2620:10a:80f4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c2:9c:f8:9c:68:f5:7f:b3:d7:fc:ed:fc:a0:38:80:f6:8f:
         b8:7a:2e:40:25:77:5e:c0:15:ac:e6:3b:71:55:45:ad:73:de:
         0d:41:78:58:7e:62:3b:d5:dc:49:0e:a7:d7:3e:d1:ff:69:78:
         c8:49:14:bb:34:17:ff:9f:6d:22:a3:a7:91:e7:85:d8:26:f1:
         fa:15:4e:ad:8b:6d:6a:e2:a7:71:b3:cc:fc:a7:77:d6:f6:8b:
         f2:e6:29:2f:f1:01:4a:bc:62:ab:68:f1:5b:80:89:ea:89:4e:
         89:bb:b9:57:58:0e:34:ab:97:8c:f3:79:bb:99:62:38:eb:5d:
         b1:12:74:b5:6b:6e:3f:8c:0e:97:73:9a:3f:fe:7d:8b:b3:41:
         ab:5e:38:fa:14:dc:25:4e:7c:67:f5:ca:9d:50:c4:02:50:e5:
         93:ff:56:7a:04:7f:61:2b:ca:bc:aa:7e:8e:45:d7:fc:ac:92:
         aa:17:d1:fc:f4:81:2d:e9:53:7b:6a:e1:62:e1:cf:0d:40:4a:
         98:34:2c:60:f0:89:26:cb:e5:46:97:2e:7f:29:6d:79:c9:41:
         d8:fe:f6:17:b9:61:b8:db:17:d7:a9:88:f7:98:30:a7:42:fe:
         23:c5:25:e8:aa:06:df:29:60:7b:3c:b4:99:82:5d:63:69:51:
         fa:32:00:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:45 2026 by rpki-client