Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/2a8fce73-3b80-3a02-b388-00e87a0dd885.roa
File:                     2a8fce73-3b80-3a02-b388-00e87a0dd885.roa (raw, json)
Hash identifier:          qOZynqi4MDv5g9+aH4ZMj+BXzO78gde0l7foT3FyFZY=
Subject key identifier:   49:11:E0:ED:16:B0:DF:EE:6C:46:EA:20:5D:45:73:81:0D:22:76:B3
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DB53B1872D5F3FFB3F300
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/2a8fce73-3b80-3a02-b388-00e87a0dd885.roa
Signing time:             Thu 06 Aug 2026 20:23:34 +0000
ROA not before:           Thu 06 Aug 2026 20:23:34 +0000
ROA not after:            Wed 04 Nov 2026 21:23:34 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1ac::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:b5:3b:18:72:d5:f3:ff:b3:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:34 2026 GMT
            Not After : Nov  4 21:23:34 2026 GMT
        Subject: CN=e4b594c8-013a-4b1a-9263-4287d50aa135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9a:34:54:7b:7b:59:4f:75:45:df:fc:30:6d:
                    f1:8d:63:ab:f5:e2:f8:df:6d:4f:be:10:03:0e:04:
                    6b:25:ad:92:4f:df:43:e2:27:26:e3:8c:f7:56:8b:
                    d7:09:6b:ce:53:ba:73:eb:56:c6:8c:02:ff:7e:e5:
                    bf:04:94:db:31:b1:03:46:eb:47:1c:69:95:75:28:
                    d4:3a:9c:6e:86:fa:1b:16:27:c9:b1:f3:7f:22:f5:
                    77:df:19:81:b1:ed:08:a3:56:8c:16:11:bc:3a:91:
                    86:00:e8:b0:b3:76:44:80:ab:b7:a4:0e:c2:13:cd:
                    9b:7b:f7:6d:f1:81:55:d0:cc:49:20:54:db:7e:aa:
                    2c:05:33:7f:db:07:40:4b:40:c3:e3:15:19:d7:29:
                    a7:30:1a:ad:d0:bd:76:e2:c2:56:50:eb:3c:dc:90:
                    19:0a:19:e3:78:ae:12:0c:ba:97:46:bd:37:5c:8c:
                    9f:db:f7:11:5d:ac:95:41:00:78:45:a5:72:3e:e0:
                    2c:70:36:f0:c1:0a:12:96:47:20:6a:5b:34:0f:5a:
                    d3:82:83:8c:f6:76:dc:3d:a6:e9:45:d1:f9:09:b6:
                    3e:9e:c3:1e:72:f3:6c:39:cb:8b:54:16:9c:c0:1b:
                    90:64:77:3b:bf:06:e5:16:e3:c0:c6:87:e4:f2:f6:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:11:E0:ED:16:B0:DF:EE:6C:46:EA:20:5D:45:73:81:0D:22:76:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/2a8fce73-3b80-3a02-b388-00e87a0dd885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1ac::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:0d:35:7b:22:a3:4a:8e:31:5c:39:65:02:17:61:8f:1a:87:
         47:c0:da:f8:6e:a8:57:39:aa:63:73:fe:51:8d:04:29:69:57:
         74:a4:ae:a3:b0:7c:44:45:a6:c3:7f:67:20:c5:97:44:2a:91:
         13:75:23:d6:cd:f2:e8:26:5d:9c:f1:cc:2d:d9:d1:fe:58:d6:
         7e:bf:d4:6b:af:c5:ff:a3:ed:0f:ae:78:86:21:8e:00:70:13:
         84:65:0d:6c:1a:91:7b:79:a8:24:bb:35:4e:ed:3f:5d:d5:9e:
         46:82:32:da:9b:db:46:2f:1d:a3:50:8d:b9:e6:1e:4f:72:b0:
         3b:30:2f:04:c9:02:6b:bb:e6:3b:07:c8:d7:7e:91:75:7d:47:
         13:f8:53:f7:a5:ac:b8:23:a5:a2:6a:bd:0f:e3:2d:e0:b7:12:
         12:0a:31:50:03:95:e0:29:cc:82:f2:df:a5:7b:ff:38:eb:f9:
         35:e5:19:f3:2a:d4:7e:64:3c:b0:32:4e:64:46:10:88:78:ad:
         e4:28:da:67:e8:22:bc:c7:3e:be:19:b7:b2:a2:e9:60:4f:ae:
         58:5b:dc:3e:a6:cf:dc:54:96:2b:43:d0:dc:98:cf:e3:25:c1:
         91:ad:41:d8:ab:14:0b:98:79:e4:70:f6:4f:bc:b3:30:4f:a7:
         b8:ab:2c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:38:42 2026 by rpki-client