Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/099f8381-a0b0-3dc6-bb11-c9904d5fbf42.roa
File:                     099f8381-a0b0-3dc6-bb11-c9904d5fbf42.roa (raw, json)
Hash identifier:          cqYqFw30K4r9BP6m+C/qwkd9cpYy1PLgAfdx1Wvg7Vw=
Subject key identifier:   1F:3C:97:3E:AC:78:3B:37:CD:C6:64:54:73:D5:DC:1C:47:8C:AE:13
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DA8ACF0FE402F5AA3C660
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/099f8381-a0b0-3dc6-bb11-c9904d5fbf42.roa
Signing time:             Thu 06 Aug 2026 20:23:28 +0000
ROA not before:           Thu 06 Aug 2026 20:23:28 +0000
ROA not after:            Wed 04 Nov 2026 21:23:28 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:c3::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:a8:ac:f0:fe:40:2f:5a:a3:c6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:28 2026 GMT
            Not After : Nov  4 21:23:28 2026 GMT
        Subject: CN=9569b528-55ab-4107-b114-429425ef3a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b7:67:99:24:0e:e1:70:12:f0:80:5f:7a:2b:
                    e5:f4:2b:cb:c7:4a:b5:47:1e:ea:ba:53:c7:9b:45:
                    7f:cf:89:98:39:a2:93:7e:de:ce:56:02:69:bd:0e:
                    c8:ec:28:ee:33:9a:0a:03:bc:b2:b6:c4:89:08:5d:
                    6b:ee:bc:c0:02:cc:ff:f4:fa:62:01:4b:4f:70:24:
                    99:da:83:97:ef:7e:c4:22:ca:eb:ee:3c:1b:f4:c1:
                    2a:35:af:38:f6:7d:8f:d2:4a:72:ae:56:6a:be:ea:
                    e3:d3:70:75:33:3a:d1:c6:eb:56:9e:ec:92:85:40:
                    b5:c0:70:d4:a2:e0:30:e4:fe:75:97:a8:71:91:b3:
                    21:de:9d:f9:a0:cb:c5:6d:14:a2:fd:3b:8a:77:1a:
                    38:e9:b7:1c:4d:e2:38:63:fe:11:ce:a1:07:4c:d1:
                    c2:75:8a:d0:50:72:df:6d:2f:66:ab:1a:a6:ff:60:
                    0e:10:d7:64:b0:72:91:1a:2a:79:e8:28:df:1a:d3:
                    59:41:fa:55:c0:50:b0:a1:f0:c8:ec:af:df:aa:a1:
                    c7:c6:11:95:ff:56:7c:eb:64:99:81:aa:ae:c6:f1:
                    34:46:e3:c6:a6:15:d4:c6:c8:7b:c3:e8:37:ec:0c:
                    1e:47:fb:a9:10:dd:a5:f6:7f:07:ac:71:c1:df:01:
                    aa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3C:97:3E:AC:78:3B:37:CD:C6:64:54:73:D5:DC:1C:47:8C:AE:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/099f8381-a0b0-3dc6-bb11-c9904d5fbf42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:c3::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:1b:40:0e:f0:5d:89:be:d7:38:aa:42:34:9f:2e:05:f5:7b:
         d3:35:6f:64:c1:11:5b:75:83:ec:6a:b1:a3:a6:c6:8b:27:da:
         bf:84:e7:31:82:12:ee:7e:2c:10:91:c9:9d:e4:be:da:be:21:
         5a:d7:2c:50:9d:ad:87:8f:a5:9e:f6:de:cb:ed:4b:93:51:ac:
         8c:64:65:6c:13:72:68:b2:c4:97:18:5c:10:81:ef:e8:8f:d1:
         a9:09:6f:13:e9:87:49:3f:84:2f:59:ad:e5:80:1a:45:01:88:
         aa:dd:57:fe:b6:e3:a2:59:6a:a0:ac:71:d8:c6:26:a4:96:74:
         84:b6:4e:ab:17:65:7e:3b:f5:1d:29:ff:ee:28:57:71:a9:85:
         98:98:ef:6a:8a:0f:e9:f6:0e:ef:c9:c7:48:c8:07:5c:e6:57:
         b9:11:cd:08:72:a6:34:66:cc:7b:7c:2e:f0:75:13:7f:40:3f:
         ff:c8:2a:b3:d5:94:07:ef:35:eb:e2:8f:47:82:21:1b:04:cf:
         56:45:65:51:44:fe:ee:19:a4:ad:53:d1:ac:3f:b1:cc:22:ea:
         68:6d:b8:7d:eb:cf:af:6d:50:31:4e:07:5c:55:81:5a:2f:b5:
         5f:bf:70:5f:aa:ed:40:e8:ad:c5:48:fd:01:17:74:0a:1e:30:
         95:85:03:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:37:57 2026 by rpki-client