Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/0921a9aa-ba70-3a3a-9b28-7895b45f204b.roa
File:                     0921a9aa-ba70-3a3a-9b28-7895b45f204b.roa (raw, json)
Hash identifier:          CzT3MEDncy+LGxx11uMSpOb/3UrwDPis7Z0U0q2OE70=
Subject key identifier:   72:0B:EF:AB:05:DA:A1:39:13:34:61:78:68:E3:12:7A:38:8C:3A:E2
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DBE080E3FCB1FB80DA880
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/0921a9aa-ba70-3a3a-9b28-7895b45f204b.roa
Signing time:             Thu 06 Aug 2026 20:23:39 +0000
ROA not before:           Thu 06 Aug 2026 20:23:39 +0000
ROA not after:            Wed 04 Nov 2026 21:23:39 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:243::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:be:08:0e:3f:cb:1f:b8:0d:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:39 2026 GMT
            Not After : Nov  4 21:23:39 2026 GMT
        Subject: CN=6b9323e7-f640-4868-8dda-f0dab3b08997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:eb:4b:bd:69:eb:cf:57:63:34:cf:99:1c:
                    af:56:45:93:b4:a7:2d:db:25:ca:16:4b:9e:43:55:
                    c5:23:7f:90:e2:63:d3:4c:14:1c:18:ab:56:00:58:
                    cb:1c:31:60:3c:a5:4a:eb:53:2e:f5:36:bf:f4:b1:
                    28:b8:df:d2:ef:63:51:54:c4:21:f5:2a:e6:6e:fb:
                    24:f9:b2:d3:28:61:c6:80:53:ea:02:c8:cf:f1:fa:
                    bb:a0:3e:b1:8e:9f:de:18:3f:07:0f:b6:1e:2b:9a:
                    56:bd:5a:49:f2:94:fc:38:4f:63:2c:0c:d7:6e:96:
                    c7:27:a9:f7:ca:b2:e1:d9:b6:62:a2:75:6b:08:16:
                    f8:b8:c0:67:e7:d9:db:33:ad:32:59:84:3b:57:30:
                    c6:85:3a:33:77:25:79:9e:0f:9a:53:f5:96:c3:f0:
                    2c:a6:b2:70:6e:59:64:89:a4:32:83:4d:ca:b6:0c:
                    3a:64:af:96:1a:33:a8:95:80:8e:89:61:2c:c7:42:
                    7c:df:c8:aa:33:0d:98:af:13:55:fb:da:aa:13:21:
                    5a:56:43:99:45:66:31:7e:fe:ed:44:da:fa:04:a7:
                    48:57:e8:58:7e:f0:d6:b3:bc:a2:8c:84:5c:2a:55:
                    d9:d0:a8:70:e5:43:a4:14:47:3b:06:c3:81:86:6e:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0B:EF:AB:05:DA:A1:39:13:34:61:78:68:E3:12:7A:38:8C:3A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/0921a9aa-ba70-3a3a-9b28-7895b45f204b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:243::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:58:d9:e8:c2:7b:12:42:49:24:eb:98:81:a3:26:05:11:15:
         3c:43:90:ce:13:51:50:40:32:7b:28:c2:74:c9:9b:e8:85:0c:
         e3:41:b5:27:65:28:d7:a3:e7:4a:5e:ec:59:22:37:28:b5:c8:
         23:48:74:77:91:b3:cd:d2:10:40:1c:72:44:61:40:ee:e6:21:
         d6:ca:26:31:ef:af:fb:8d:ec:26:f5:25:c7:81:27:a9:b1:66:
         26:2c:c2:12:ac:08:1e:ce:69:b4:df:5e:3e:cd:22:e5:63:7e:
         c5:9c:75:c2:61:a4:b2:9a:85:93:77:26:a7:5d:40:8e:7a:a8:
         6b:90:02:2e:fa:12:10:70:a0:e9:e4:6d:0e:2c:21:af:54:cc:
         1a:d0:32:f0:a7:5e:44:53:71:ea:19:08:59:4f:02:ea:7b:bb:
         ac:c7:dc:c3:dc:bd:e5:f7:94:d0:92:2f:5d:d6:dd:ea:9c:8b:
         2f:e8:59:6c:d8:b2:44:c9:d9:18:8e:e6:93:6b:0f:34:13:07:
         6d:81:0f:1c:a3:7c:da:2c:41:82:a0:2a:e7:d3:37:6e:bf:b7:
         19:44:79:bc:f2:b0:ba:96:7d:ca:b0:7f:d7:8b:38:ba:91:3e:
         0d:95:39:4b:ad:27:80:e5:b9:12:31:00:dd:a4:74:d6:b4:ca:
         46:8e:f5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:40:29 2026 by rpki-client