Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/283d24b2-b111-3595-bc5a-80109559cc1d.roa
File:                     283d24b2-b111-3595-bc5a-80109559cc1d.roa (raw, json)
Hash identifier:          uAHAG1lMF+RtNA7ISdHb5RhgZFdM6sXQOgh3Rxznuvw=
Subject key identifier:   A3:BA:2B:89:A3:37:09:41:01:1C:FD:CE:A3:45:C5:32:74:1B:6A:9E
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DC3793F57997CD74F8100
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/283d24b2-b111-3595-bc5a-80109559cc1d.roa
Signing time:             Thu 06 Aug 2026 20:23:41 +0000
ROA not before:           Thu 06 Aug 2026 20:23:41 +0000
ROA not after:            Wed 04 Nov 2026 21:23:41 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:29c::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:c3:79:3f:57:99:7c:d7:4f:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:41 2026 GMT
            Not After : Nov  4 21:23:41 2026 GMT
        Subject: CN=1df624f1-960d-4b3b-b8eb-a1cbd2422514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:eb:3b:ac:4f:3e:1c:00:62:37:40:75:c4:2b:
                    c0:7b:5b:8a:aa:25:7b:59:4d:04:d1:fb:ea:02:93:
                    3c:19:cb:85:58:63:82:00:12:2f:e8:99:f2:6d:20:
                    06:61:b9:50:d3:24:ec:1b:c8:d9:f9:78:a5:b3:4f:
                    f1:10:d0:15:dc:99:28:9f:07:a3:c2:ae:5e:f7:03:
                    11:31:9d:ab:4d:c8:74:80:76:90:7a:ee:a4:c2:69:
                    f0:c3:27:12:67:6d:9b:01:17:a6:5e:e5:68:69:38:
                    15:12:73:08:9b:a3:43:ff:f0:67:96:ad:2c:b5:ef:
                    6b:c0:e1:67:7c:cc:7f:2e:5c:14:7e:60:3d:12:4e:
                    e6:b2:c1:ef:65:b7:9d:55:37:99:4c:b5:3c:fb:84:
                    b9:66:24:e5:19:29:50:84:af:e2:f7:7f:ec:47:54:
                    6a:3a:0f:83:31:5f:21:80:83:5f:56:38:53:c5:88:
                    56:01:08:7c:35:c0:7f:cb:83:7b:19:7f:ba:bc:62:
                    ef:ba:ea:1c:d4:a9:31:b0:69:62:9d:70:0f:42:e2:
                    8a:9b:c6:3f:df:8e:53:1c:f1:cd:b2:99:28:72:c3:
                    08:f5:f5:3c:93:cc:28:ec:49:1a:25:45:7d:55:77:
                    67:dc:4b:15:4b:c0:73:a8:90:e9:c3:a8:3a:a4:ce:
                    53:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BA:2B:89:A3:37:09:41:01:1C:FD:CE:A3:45:C5:32:74:1B:6A:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/283d24b2-b111-3595-bc5a-80109559cc1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:29c::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d2:e6:8e:f4:5e:de:db:ff:6f:35:90:da:2a:9e:d3:da:3d:
         55:71:f6:6e:d5:2e:bf:27:b3:2b:33:b8:65:1b:c8:88:d0:eb:
         f1:b0:91:a3:a3:ad:2b:08:6d:21:9b:b5:23:d7:01:0a:a1:d5:
         50:d5:3e:45:63:f6:50:b6:4e:f0:e8:d5:d5:62:62:cc:6c:ff:
         87:ca:27:df:9d:3d:5e:4c:19:44:80:8a:ed:82:ee:07:5e:36:
         d7:f7:88:75:82:a3:7b:7b:63:18:49:6b:f3:88:88:5d:12:c8:
         7e:40:8b:44:af:96:c0:b0:2b:1d:a0:ac:b6:c8:b3:e4:a6:9f:
         f1:f2:64:85:1e:9c:67:29:c9:36:09:11:da:78:94:e1:b2:65:
         36:85:ca:d7:af:71:15:c7:4e:0d:52:91:30:44:d4:27:34:89:
         63:81:97:29:75:07:2f:11:19:fc:8a:ad:aa:9d:6d:25:d8:c3:
         a2:46:17:35:e9:07:74:c8:27:95:90:32:24:d0:88:10:5c:75:
         79:68:d2:89:da:bd:80:68:08:6a:10:ad:a1:ff:ae:f3:da:57:
         ce:3b:b8:a9:0b:16:b0:6e:26:d0:3a:84:27:75:34:ee:89:e6:
         19:82:cb:83:38:e1:d2:d3:51:f7:1f:97:71:b3:cf:81:7c:9b:
         0d:ac:1d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:38:47 2026 by rpki-client