Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/0debc8c3-c56e-3223-8344-cbf33e199080.roa
File:                     0debc8c3-c56e-3223-8344-cbf33e199080.roa (raw, json)
Hash identifier:          NK/cl8EjiBmcLDqI1MLivqcQkgnecMWrbbGXiQLA+Pc=
Subject key identifier:   21:B2:8F:80:6C:C1:E9:75:57:CD:19:B3:FB:1A:40:BC:A9:57:26:1F
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DBAF1A758EBAC7BC0D8C0
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/0debc8c3-c56e-3223-8344-cbf33e199080.roa
Signing time:             Thu 06 Aug 2026 20:23:37 +0000
ROA not before:           Thu 06 Aug 2026 20:23:37 +0000
ROA not after:            Wed 04 Nov 2026 21:23:37 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:20f::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:ba:f1:a7:58:eb:ac:7b:c0:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:37 2026 GMT
            Not After : Nov  4 21:23:37 2026 GMT
        Subject: CN=9924b3ac-7136-4a67-af30-28d2307f64fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:00:24:3d:6d:03:d7:29:65:15:11:0f:a3:7b:
                    79:13:98:75:d7:94:7d:1d:05:16:52:50:9e:da:60:
                    27:41:ef:a5:0c:02:b8:11:6a:d7:95:c5:63:0c:49:
                    86:ca:29:1f:ef:7d:18:ca:a8:38:9e:4c:7c:d9:9c:
                    d7:c7:a9:ac:6c:e0:46:a8:3a:a0:f9:a5:5f:95:b3:
                    92:ea:66:6d:39:aa:05:6f:03:e3:79:73:88:af:01:
                    32:da:4a:2c:bd:58:a1:be:1c:02:01:67:9a:35:91:
                    d6:7a:f9:7d:45:02:a5:93:39:7d:2a:e8:35:37:03:
                    2c:74:61:72:0e:d9:4d:2d:be:e2:c6:61:d6:ba:80:
                    ae:fe:f3:d8:4f:91:dd:df:84:ee:fb:ac:1c:0c:a0:
                    76:c1:30:28:ed:f3:b1:ab:66:32:41:12:0d:28:b1:
                    26:8d:10:a9:62:5f:65:e7:73:c5:4e:cd:c2:fb:62:
                    3b:6c:70:5f:e2:ce:13:db:a9:d4:0b:b9:fc:df:e5:
                    9e:9c:a3:c0:12:64:51:f3:5a:d5:72:b3:33:94:7b:
                    35:df:87:a9:4c:21:dd:9a:81:de:51:ad:20:a0:2d:
                    f0:26:4b:97:56:58:61:75:25:d7:54:7d:10:a7:ae:
                    07:da:2e:65:7a:28:96:9a:a3:14:fe:7b:80:5a:ba:
                    ab:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B2:8F:80:6C:C1:E9:75:57:CD:19:B3:FB:1A:40:BC:A9:57:26:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/0debc8c3-c56e-3223-8344-cbf33e199080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:20f::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b9:20:ba:2a:42:d1:1b:b3:2c:27:2f:99:fc:7c:7a:bd:46:
         57:2b:5e:8d:8c:e8:d9:28:e3:39:78:db:71:14:39:a6:03:9c:
         70:7d:df:d1:ab:59:74:fb:d0:99:50:82:bf:6e:f6:fb:d7:b5:
         81:48:0e:1b:be:83:6c:ac:71:f6:16:ab:24:b1:9c:a6:7b:07:
         69:4a:da:54:16:e5:42:57:cb:73:03:f3:d7:2f:e3:74:be:db:
         da:9d:14:07:86:82:42:f4:63:7d:b9:14:fd:0a:ef:d3:b5:2b:
         9f:46:64:c6:f6:d0:8d:ab:93:67:5d:76:c5:ea:b4:5e:b2:03:
         4a:9c:f2:a7:7a:d9:60:7b:b3:68:be:4b:f9:06:a0:ca:19:f3:
         9b:df:56:06:96:22:25:61:19:7c:e3:47:f5:bf:d0:d3:ab:ba:
         44:51:bf:33:fd:86:93:e6:b8:87:34:35:98:d9:38:c6:c5:b6:
         8d:d6:e9:39:c8:68:4c:8d:e2:3a:a9:ef:a9:9b:b9:9e:cf:80:
         0b:a4:1d:37:4b:6b:3d:d1:ec:89:17:f5:bb:d7:02:f5:10:73:
         1b:96:b6:b9:fd:be:eb:bb:d1:e6:f5:a0:29:fe:af:ac:94:c6:
         76:16:f5:f5:b1:87:9e:c4:4e:90:70:19:7a:13:4e:e8:5b:de:
         91:8d:6b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:38:44 2026 by rpki-client