Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/0f25475a-0848-31e0-bdf8-e16b7b0789b8.roa
File:                     0f25475a-0848-31e0-bdf8-e16b7b0789b8.roa (raw, json)
Hash identifier:          3EZvUtkQpLmPZZcYZe4OOfML6+wDEZzjjftCfbz175o=
Subject key identifier:   43:49:88:86:69:53:3F:3C:35:69:17:5E:39:E5:6D:FB:2E:5F:7B:92
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DCE4BEC9A8E87A2DB9EC0
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/0f25475a-0848-31e0-bdf8-e16b7b0789b8.roa
Signing time:             Thu 06 Aug 2026 20:23:46 +0000
ROA not before:           Thu 06 Aug 2026 20:23:46 +0000
ROA not after:            Wed 04 Nov 2026 21:23:46 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:347::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:ce:4b:ec:9a:8e:87:a2:db:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:46 2026 GMT
            Not After : Nov  4 21:23:46 2026 GMT
        Subject: CN=fcd423e2-3977-41d7-87db-bdc60b8ce6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:93:60:27:b6:c1:e8:b2:b9:3a:98:d7:33:
                    72:65:96:80:c9:fb:b3:6e:ac:93:31:b6:70:90:27:
                    11:bf:38:88:65:4b:e6:4f:86:7c:74:9a:53:d5:3c:
                    c9:0f:7a:3c:51:e8:8d:a8:b8:27:3d:9e:45:16:9e:
                    60:d7:0d:04:86:7f:fc:93:7c:00:59:cd:37:03:0b:
                    5c:da:26:9e:89:c8:12:b2:15:f3:1a:9b:ba:32:75:
                    72:fc:1b:71:90:03:03:fd:d8:1b:fa:38:c6:3e:66:
                    a7:38:a2:5f:a7:64:78:46:8a:a0:6b:50:6a:5e:bf:
                    89:4f:a1:b6:b7:52:a0:12:03:59:54:40:08:80:3a:
                    29:05:52:b7:5e:b7:b5:42:fa:99:c1:96:20:9b:c7:
                    0c:1b:8e:bf:f5:45:67:77:79:09:0c:d4:bc:58:ab:
                    62:19:c9:0e:0d:9b:5f:90:81:62:b2:6b:92:65:76:
                    48:2e:fc:e7:2c:3d:f7:09:11:f5:c5:36:56:95:65:
                    7b:02:a0:73:8a:4f:50:c4:f0:22:76:d3:d1:63:a5:
                    3c:02:f3:02:5c:e4:03:e2:15:27:df:30:8b:27:ec:
                    70:ee:c4:ef:cd:49:ab:98:60:90:5a:7e:33:e7:e0:
                    25:70:59:84:06:75:ad:a3:65:cd:8e:2e:b9:c2:6b:
                    d8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:49:88:86:69:53:3F:3C:35:69:17:5E:39:E5:6D:FB:2E:5F:7B:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/0f25475a-0848-31e0-bdf8-e16b7b0789b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:347::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:1b:ad:55:96:3e:83:07:2e:10:c4:59:48:7c:6f:8c:6e:b9:
         28:95:7b:45:ca:a6:3d:20:78:58:0d:3c:07:1f:ee:22:30:3b:
         ec:e7:a0:ce:cb:09:ff:31:77:90:d3:39:3f:85:68:d9:72:bf:
         71:98:54:23:95:f7:4b:8a:62:2c:f1:64:39:4f:fb:b0:cf:f8:
         60:98:1f:1e:5a:77:12:f6:50:64:e4:c8:15:27:5c:07:11:00:
         78:8e:69:eb:cd:f7:51:20:d5:c6:40:5e:0b:42:1e:aa:e0:9b:
         d2:e2:29:45:54:eb:a4:83:00:d4:e4:0c:46:68:d1:22:bc:ea:
         c5:cd:a0:32:f7:e3:70:19:31:0b:ce:f1:ee:a2:3d:d7:aa:55:
         46:3a:c4:b2:d1:43:b5:35:0a:d7:90:38:fa:7c:af:f9:20:cb:
         c0:c2:3e:e1:3e:44:25:c5:61:9a:1d:8c:1b:dc:ad:3d:c9:03:
         18:8b:93:71:32:40:f6:cb:21:78:b4:a3:b1:87:9e:e0:25:2c:
         af:31:5f:ad:30:e8:87:cc:91:9b:e2:37:f8:10:da:dd:3f:5a:
         3e:be:44:de:d3:e9:07:01:ea:28:1c:4f:bc:85:ea:8a:8b:6a:
         93:6b:67:e3:b1:89:e9:6f:95:5e:7e:f1:e5:29:4c:96:09:71:
         19:7e:21:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:36:59 2026 by rpki-client