Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/1a35f02c-dfa0-3e8f-9aa6-956f24bdb0f9.roa
File:                     1a35f02c-dfa0-3e8f-9aa6-956f24bdb0f9.roa (raw, json)
Hash identifier:          0t5KUIJIf4H66PjYGMbnC2JcnmUJz1APMbEfTy7mHdE=
Subject key identifier:   54:95:5A:10:D2:9C:DF:DD:80:41:B4:37:2E:A8:9B:EA:8A:66:91:85
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DA579DDC0702141D02680
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/1a35f02c-dfa0-3e8f-9aa6-956f24bdb0f9.roa
Signing time:             Thu 06 Aug 2026 20:23:27 +0000
ROA not before:           Thu 06 Aug 2026 20:23:27 +0000
ROA not after:            Wed 04 Nov 2026 21:23:27 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:85::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:a5:79:dd:c0:70:21:41:d0:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:27 2026 GMT
            Not After : Nov  4 21:23:27 2026 GMT
        Subject: CN=851560ce-f6bf-4ae9-b78c-f1a670b20f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:36:ac:70:a1:d5:72:0d:dd:b3:dc:1b:a2:
                    c8:d1:7f:83:09:92:30:4f:b9:97:f4:f6:c8:ca:7c:
                    1d:f8:06:e8:bd:f2:33:eb:02:61:24:b2:e1:66:3f:
                    fa:99:1d:63:29:18:0e:a3:92:f1:5e:83:6d:4a:43:
                    5f:a5:82:fb:67:94:ab:b6:7d:61:d5:b9:04:8e:67:
                    17:94:f1:d0:a7:c2:5a:c9:ae:fd:b2:a6:a1:dd:e3:
                    14:7a:80:1a:b8:cc:07:23:d2:f1:01:ec:12:5f:fc:
                    f1:15:f3:f9:67:f9:6a:d0:39:f7:47:84:b6:f4:e0:
                    9b:69:61:0f:ea:a4:27:ae:77:cc:97:d6:37:45:8e:
                    56:dd:c6:d8:ae:90:9c:d7:b2:cd:6c:b5:42:3f:3e:
                    e3:47:5d:bf:6c:9f:fb:65:81:2c:f6:99:07:3e:dc:
                    72:85:d6:fd:4b:c3:a6:84:13:a6:4e:34:95:50:3d:
                    94:41:72:15:01:60:ac:09:ba:40:2d:09:e7:27:8c:
                    46:b2:c5:a2:08:af:f1:03:cf:90:d6:df:0e:1e:81:
                    0c:96:ee:90:c1:c5:3e:54:fe:31:55:51:d7:16:37:
                    3b:1f:d2:4e:7b:6f:4f:30:ae:e1:8f:b2:b5:91:0c:
                    7d:a9:8a:ad:59:25:b4:c0:2e:cf:1d:f9:28:5d:5f:
                    37:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:95:5A:10:D2:9C:DF:DD:80:41:B4:37:2E:A8:9B:EA:8A:66:91:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/1a35f02c-dfa0-3e8f-9aa6-956f24bdb0f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:85::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c9:ca:f6:0e:5b:9a:4d:bf:a5:22:39:3d:e7:0a:cf:83:4c:
         cd:2e:e3:f5:54:a0:bb:60:7d:20:92:b9:6a:bd:de:6d:5d:42:
         4d:b2:31:cc:2e:24:c4:1a:7c:90:aa:41:60:cc:45:e2:07:c1:
         2d:43:a6:59:b2:05:44:d8:b6:f6:2f:44:e9:05:c5:05:90:77:
         d0:2f:b5:4e:d6:53:03:6b:27:03:4a:ba:87:09:b1:40:ad:12:
         ad:0e:bd:bd:68:29:87:06:cb:8a:ad:47:72:fc:94:7c:c2:4c:
         c3:fd:78:9b:75:e3:c1:cd:63:53:91:0b:6f:3b:4d:65:37:23:
         94:80:b7:78:13:09:6f:cd:25:46:5b:c0:41:6b:20:29:f1:1c:
         2e:2d:8a:8d:1b:e1:4d:c2:d1:2c:fa:74:64:65:27:8b:50:34:
         be:06:d9:94:92:9f:72:ff:4c:92:40:1a:55:9f:bb:91:a8:ca:
         c2:e5:4c:ab:d1:a7:bf:86:2d:01:fe:4c:69:49:d1:65:cc:4b:
         4b:bd:17:fa:1e:37:b6:0b:09:b6:51:aa:b7:78:80:6a:a8:23:
         18:e4:7f:f8:de:6f:4d:15:83:02:7c:5f:7d:3f:74:32:0b:86:
         b4:98:b2:c1:a6:bd:f5:1c:cc:ce:d5:9a:73:e9:8b:ae:b1:38:
         5a:72:1f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:37:13 2026 by rpki-client