Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/0820c32e-958d-3e91-8476-9b031bd8382b.roa
File:                     0820c32e-958d-3e91-8476-9b031bd8382b.roa (raw, json)
Hash identifier:          VytppmIt71rCfQSapBS1r6tLuaSX+coOldtKdZXymos=
Subject key identifier:   BB:AE:98:96:F3:E6:9C:AE:5E:AB:AD:89:58:A3:CE:D4:6C:D4:C6:09
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DB3578B7A0DF27F619A80
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/0820c32e-958d-3e91-8476-9b031bd8382b.roa
Signing time:             Thu 06 Aug 2026 20:23:34 +0000
ROA not before:           Thu 06 Aug 2026 20:23:34 +0000
ROA not after:            Wed 04 Nov 2026 21:23:34 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:18a::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:b3:57:8b:7a:0d:f2:7f:61:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:34 2026 GMT
            Not After : Nov  4 21:23:34 2026 GMT
        Subject: CN=c46bcc88-6be4-493a-bf7b-9abb38b8982c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:70:c8:8c:86:03:46:02:b3:2c:fa:fb:af:7a:
                    35:4a:12:1c:b3:d5:24:ff:2b:7c:82:f2:f1:9a:2c:
                    4e:00:51:a2:ac:94:b3:fe:7d:13:e4:3b:6c:49:d0:
                    05:6b:26:31:b3:b5:ec:b2:53:05:16:5e:9a:c0:46:
                    74:44:86:90:eb:55:d7:26:1d:f7:9c:fe:45:0c:3a:
                    31:d0:bb:c0:a7:fc:7a:11:a9:e5:b5:8a:fc:0a:32:
                    68:57:08:54:ec:22:ba:51:c6:63:3f:ee:ea:85:e9:
                    ae:61:df:0f:e9:e1:84:81:eb:2b:36:9f:c7:54:e6:
                    36:c8:50:fe:6a:5a:52:1b:ff:88:29:06:1a:03:b3:
                    8c:a9:af:2a:19:07:2a:25:c7:82:b0:ac:91:3d:bc:
                    b4:d4:4c:30:34:40:5c:1d:96:72:d3:51:0e:4f:a3:
                    65:e0:cc:73:9a:21:eb:ad:3b:c7:30:c4:3f:a7:79:
                    4a:20:7f:b0:3e:21:c9:60:e6:57:51:e5:0e:68:96:
                    4c:b6:c6:88:5a:48:21:38:21:9a:81:36:c8:ba:9f:
                    bc:0b:d2:b6:2b:59:13:d3:16:c1:19:ef:9d:3b:67:
                    fe:12:12:43:f2:cc:d3:60:f2:9e:ee:c0:68:08:89:
                    f7:a4:e9:60:bc:ff:71:dd:7f:18:47:3b:50:61:c4:
                    95:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AE:98:96:F3:E6:9C:AE:5E:AB:AD:89:58:A3:CE:D4:6C:D4:C6:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/0820c32e-958d-3e91-8476-9b031bd8382b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:18a::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:06:d3:7b:92:8b:46:9d:38:0d:fa:54:1f:41:6b:ce:86:d2:
         ea:68:85:f8:fe:ec:56:b2:01:c6:8a:62:8c:44:a3:4a:9f:fc:
         cd:27:2d:2f:5c:77:78:9a:3b:e9:9a:dd:5f:e6:1c:51:67:4e:
         10:a7:23:03:de:0f:ea:dc:15:ae:aa:41:2e:b2:55:c0:b1:b1:
         44:67:08:0a:af:00:e9:5c:e9:1e:b3:46:ed:8b:76:f3:07:7e:
         12:8e:04:0d:40:f5:87:89:a1:22:fe:4c:cc:a3:e7:f8:80:20:
         fa:f7:ea:03:85:be:ab:2a:87:2f:a6:92:64:5b:40:f9:a1:60:
         4e:13:29:dd:5b:e3:73:9c:f6:3f:70:28:cf:8d:f9:4a:4f:bd:
         60:7f:d7:44:1a:64:95:2f:f7:da:2c:17:87:ae:d4:c3:e8:a9:
         4d:fa:ad:96:fc:8b:fd:8f:8c:3b:a9:bd:ca:77:be:d6:83:af:
         4f:c0:0a:6d:2b:88:02:dc:af:5d:5f:7c:70:5f:83:cf:7f:f2:
         f4:53:38:21:57:8a:76:f3:fd:19:89:49:20:0a:5f:a3:94:54:
         1d:3a:03:01:54:87:95:a4:cb:9f:0a:83:8d:2e:ad:8f:0d:46:
         45:c3:0c:82:0e:c8:b1:0a:59:fc:6e:42:b8:29:3c:08:ad:93:
         3b:3c:a6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:39:18 2026 by rpki-client