Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/1aba9625-ceaa-3876-91c1-b38e8e588a6c.roa
File:                     1aba9625-ceaa-3876-91c1-b38e8e588a6c.roa (raw, json)
Hash identifier:          hJJHpCFtsmt+6EXeSvMkZZkR/azJhSSCUk/MkBHsZuw=
Subject key identifier:   1B:C3:A4:EF:6C:F5:99:7B:AE:18:5A:7A:ED:C4:8C:D9:53:F7:A2:CC
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DABBEFCCDD035E70671E0
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/1aba9625-ceaa-3876-91c1-b38e8e588a6c.roa
Signing time:             Thu 06 Aug 2026 20:23:30 +0000
ROA not before:           Thu 06 Aug 2026 20:23:30 +0000
ROA not after:            Wed 04 Nov 2026 21:23:30 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:fe::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:ab:be:fc:cd:d0:35:e7:06:71:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:30 2026 GMT
            Not After : Nov  4 21:23:30 2026 GMT
        Subject: CN=3e94daf4-8011-4bed-be82-cd299fa0d626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:03:2b:f0:b6:7b:fa:f7:61:0a:ce:d1:33:eb:
                    ac:7b:cd:e0:55:d9:c6:70:06:34:5a:5f:18:ff:5a:
                    2a:a9:ee:8e:e7:10:a5:e3:e7:56:4e:c0:37:26:ba:
                    8a:c6:e9:93:9c:f4:5e:e7:f0:6f:02:22:fa:07:49:
                    b6:bb:7a:db:1c:41:86:8d:e9:11:78:0d:30:cc:e6:
                    08:94:b6:63:3a:2b:d3:7e:f7:9b:e3:54:f5:0e:3e:
                    75:b6:1d:3b:5a:aa:f4:e5:fe:f5:08:e9:14:6a:43:
                    9b:ef:a6:98:ec:f3:00:62:2b:dc:58:77:da:6d:77:
                    ed:38:d6:f0:58:01:49:b5:5c:c1:66:31:36:19:3d:
                    fd:33:44:c2:8b:a6:73:f0:58:86:62:5f:ef:63:bf:
                    fe:33:f4:32:0a:00:b7:da:81:e6:00:ee:ad:d3:ce:
                    97:cb:8a:a7:ff:a6:0b:66:3c:1a:b7:9b:88:75:8e:
                    3a:ae:fc:39:c6:f2:9f:84:aa:f9:b1:b8:8a:7c:c1:
                    1c:40:3e:2d:ab:7e:f6:c6:56:af:6e:df:75:5f:70:
                    ba:db:f6:e6:26:50:9f:5f:94:42:f6:86:95:99:a9:
                    9b:51:8a:00:2c:c5:35:71:4b:5c:89:9c:e3:2b:4f:
                    a6:91:17:b9:9e:1c:4b:ce:7e:0e:25:e2:5c:5a:16:
                    dc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C3:A4:EF:6C:F5:99:7B:AE:18:5A:7A:ED:C4:8C:D9:53:F7:A2:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/1aba9625-ceaa-3876-91c1-b38e8e588a6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:fe::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:2f:77:64:e8:d7:aa:57:40:ec:0c:d0:99:84:c3:e9:f1:29:
         d7:79:f9:b9:0f:06:6d:30:8d:3a:47:94:bb:08:eb:4d:db:59:
         e0:64:1e:a9:e7:32:87:fc:65:f4:1d:d3:20:81:df:c9:b9:bd:
         f4:fb:ab:39:aa:8d:38:60:de:65:f9:63:25:ba:83:58:ab:59:
         8b:ae:50:ba:7f:8c:ef:0b:62:75:34:bb:88:56:e2:d7:bb:cb:
         95:d9:c4:7b:62:00:60:ec:d4:9f:bf:bb:63:85:db:b5:6f:42:
         1e:1d:ce:89:68:14:2d:55:2a:43:b5:b3:ad:50:77:d0:dc:e7:
         3b:6a:01:cd:18:c1:7f:ed:99:26:49:51:97:b7:b1:1b:01:d0:
         cb:49:d8:f0:74:7f:01:7f:4c:fd:16:82:f3:90:4d:ed:91:94:
         5c:2a:02:62:de:ce:a6:b9:bc:6e:c0:ed:8a:10:69:09:e4:57:
         3f:23:78:6c:31:3e:99:c1:e6:ee:12:5d:d0:3a:62:be:0e:c9:
         42:8f:73:67:3e:5d:7b:cb:20:27:48:99:bf:ec:f6:dc:b2:4f:
         30:09:5f:6c:48:d7:08:bc:43:90:ca:91:7f:41:f8:5f:68:b3:
         3c:eb:fd:7e:fc:8a:b8:0d:6c:2b:ba:7c:c2:41:32:f1:9a:be:
         12:25:d1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:36:58 2026 by rpki-client