Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/10b67436-fb26-3a65-bee8-d572f3644df5.roa
File:                     10b67436-fb26-3a65-bee8-d572f3644df5.roa (raw, json)
Hash identifier:          ut8xD/mwNg+nh/Rw6evNNZJ1e3zZsXf1DQHH2Fn9lQQ=
Subject key identifier:   E1:75:7C:4B:F0:ED:A3:B2:47:DD:A5:7C:D0:AB:3C:AC:82:AD:45:E7
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DAB89DC14BF2C936FD680
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/10b67436-fb26-3a65-bee8-d572f3644df5.roa
Signing time:             Thu 06 Aug 2026 20:23:30 +0000
ROA not before:           Thu 06 Aug 2026 20:23:30 +0000
ROA not after:            Wed 04 Nov 2026 21:23:30 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:fa::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:ab:89:dc:14:bf:2c:93:6f:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:30 2026 GMT
            Not After : Nov  4 21:23:30 2026 GMT
        Subject: CN=d20790b7-4339-44af-b186-80556951065a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:33:c1:a6:ae:a0:be:65:e5:6a:df:af:a6:
                    25:0c:61:b2:12:0a:72:46:c8:38:b7:af:88:e2:8a:
                    5a:18:13:9f:f6:ed:e7:7e:0c:e8:30:68:50:30:56:
                    8f:ee:c3:ed:87:09:c5:41:f5:09:59:40:14:65:2d:
                    55:ac:da:7f:b9:47:58:0c:9b:35:2a:43:11:8c:3e:
                    30:3a:39:d4:0a:5e:7b:89:8d:44:29:31:f4:3f:dd:
                    68:5d:e0:7b:89:0a:bc:c8:f4:5c:8d:d6:db:ea:d2:
                    22:d6:46:51:05:da:e4:14:44:59:25:c4:9d:3a:85:
                    8c:08:67:05:bc:4b:bf:3e:b1:a0:e5:4e:9c:50:a3:
                    fd:b5:51:98:7c:dc:d9:df:68:86:c4:e8:a1:96:42:
                    a9:4f:c3:24:b7:6d:40:00:4b:fa:69:1a:51:d8:1a:
                    81:aa:7d:e9:c0:1b:7e:cc:c1:8a:bb:d7:46:30:3e:
                    02:b6:f8:f9:3b:e0:63:df:b6:2e:63:6e:f3:fb:cd:
                    3b:b9:b3:4f:20:b5:6f:99:4e:22:c0:1f:73:2d:17:
                    b4:2f:ec:c8:cc:fb:0f:5a:1d:40:d1:b4:f0:b0:c3:
                    77:f7:32:bf:45:cf:fd:d2:f2:2b:c4:26:5b:82:e5:
                    9b:ee:c5:61:f2:b2:40:f0:c5:38:89:72:72:ab:3c:
                    c7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:75:7C:4B:F0:ED:A3:B2:47:DD:A5:7C:D0:AB:3C:AC:82:AD:45:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/10b67436-fb26-3a65-bee8-d572f3644df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:fa::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:87:39:b3:1a:43:17:94:40:06:97:7a:17:b9:52:12:d8:06:
         af:8a:cd:7f:dd:e8:20:0e:08:a1:9d:27:e1:ae:1f:58:24:9d:
         ec:10:eb:85:45:e0:e3:b1:a6:f9:dc:e2:67:e9:a2:a4:55:79:
         4e:8c:bc:ab:60:35:8d:02:77:97:17:26:32:49:8b:36:27:59:
         07:58:b3:90:88:a7:17:3c:a5:2f:83:05:d6:78:63:dd:cf:61:
         90:aa:b4:8b:6a:08:f6:ed:37:96:c6:c0:b4:88:5e:1f:4f:3a:
         81:a2:3c:9a:b4:2a:87:03:62:d5:6c:b8:79:97:7f:4e:d9:14:
         df:57:68:c5:1a:bd:11:44:36:7c:c8:c5:b7:03:d8:dc:cc:65:
         c6:aa:7a:94:d6:c6:b0:4c:58:7f:a4:91:56:f9:b7:dd:97:cb:
         bc:22:13:d2:6a:96:e2:01:42:ce:7a:44:4b:f0:63:20:19:21:
         60:bb:41:a7:df:b1:91:26:6f:f9:3d:db:fa:95:16:e4:ce:a9:
         9b:a4:52:13:f8:8f:9d:8a:c8:7c:f7:08:9e:16:a4:33:6d:3c:
         19:96:7c:eb:c8:10:b4:82:f9:da:ea:46:8f:77:09:2e:1c:fa:
         c6:9a:a7:5f:43:b9:70:3a:ee:e3:88:1a:7a:4d:1e:2e:e9:c6:
         bb:28:c5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:39:59 2026 by rpki-client