Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/2d84cfe1-bb56-3316-8ff8-894de689fcaf.roa
File:                     2d84cfe1-bb56-3316-8ff8-894de689fcaf.roa (raw, json)
Hash identifier:          pfpoCO4oFUEngP9GwsTiQRUJaHzEUbq0lOi0nq2hj1I=
Subject key identifier:   F6:53:EF:1E:79:25:EA:9A:25:3B:04:69:AA:A9:C0:40:07:5E:62:CB
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DCBB7171F08270A250F80
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/2d84cfe1-bb56-3316-8ff8-894de689fcaf.roa
Signing time:             Thu 06 Aug 2026 20:23:45 +0000
ROA not before:           Thu 06 Aug 2026 20:23:45 +0000
ROA not after:            Wed 04 Nov 2026 21:23:45 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:321::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:cb:b7:17:1f:08:27:0a:25:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:45 2026 GMT
            Not After : Nov  4 21:23:45 2026 GMT
        Subject: CN=1849ac5b-be70-4ae6-8121-4e85ab6861aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:26:22:61:6a:f3:31:32:bf:b3:57:62:45:
                    f1:c4:82:56:04:f0:df:88:4e:52:9b:86:81:d6:94:
                    68:7c:53:9b:88:cb:82:92:a5:07:36:88:b6:c2:39:
                    cd:9e:57:42:29:3e:e1:2d:a3:cc:37:f5:a9:ee:cb:
                    6a:3f:99:7f:ea:bc:67:e3:3e:63:c4:6a:fe:3d:f3:
                    8c:d3:cf:4a:fa:f1:48:e5:e6:39:ad:6d:38:5e:0e:
                    92:b6:46:92:e8:6d:49:33:b7:31:1a:3e:2b:cd:36:
                    de:25:e8:1f:51:74:79:6d:63:c5:9f:a5:59:7e:9b:
                    c1:46:a6:7b:6a:cf:89:1d:f2:06:b7:d7:ac:c3:21:
                    b9:29:e1:d9:8f:20:18:35:b8:2b:66:fb:7a:74:81:
                    cf:8f:6d:47:0a:18:0d:d1:e1:4e:ea:a7:fc:14:96:
                    36:e6:75:fa:ee:60:3d:62:2f:0b:15:0b:ca:b4:20:
                    3f:1e:f6:7f:22:b4:64:fd:2c:31:98:40:9f:cf:bd:
                    b0:b4:01:fc:ee:dd:a3:d1:16:3e:e6:c2:15:d1:3b:
                    43:9f:84:ca:ec:25:70:e2:3f:6d:b0:1c:29:d6:3c:
                    6a:45:98:33:21:26:f0:f2:16:cc:b2:b0:06:6c:aa:
                    07:fc:d9:37:94:f7:2d:a0:be:c3:08:51:b8:9b:0a:
                    24:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:53:EF:1E:79:25:EA:9A:25:3B:04:69:AA:A9:C0:40:07:5E:62:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/2d84cfe1-bb56-3316-8ff8-894de689fcaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:321::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:20:0d:b7:3b:81:b3:e5:17:a3:4c:dd:21:e0:82:56:b9:3d:
         27:82:ea:9f:f4:79:ac:d0:37:50:3a:c9:c2:cc:a4:8c:4b:88:
         f0:c5:ca:20:ac:2c:dd:c9:b2:4d:ed:b8:ca:0b:3e:52:ba:dc:
         fb:5b:8c:30:90:28:df:ff:84:b5:9e:c1:20:57:d9:f9:fc:5a:
         b2:be:28:70:77:7a:cf:b2:73:d7:f1:2e:a3:df:33:27:cd:94:
         7b:ed:31:c6:47:c3:ae:81:b1:77:0a:fc:2f:14:1a:f6:dd:c7:
         cf:97:30:c8:15:02:4c:af:4b:ee:6e:04:db:44:b2:68:b8:ce:
         f5:19:6f:c2:18:c5:cf:ad:70:7b:81:f3:f8:7d:5f:f2:a1:c6:
         d6:15:8c:fd:29:52:e6:5f:cd:fe:9b:48:f6:2f:02:02:20:79:
         4a:70:4c:2f:a9:c5:00:6a:cc:88:c1:1b:09:f0:86:08:4a:e3:
         44:b9:f1:b2:e4:01:93:c5:d3:da:69:ed:d0:d2:19:4f:ec:a2:
         60:70:67:d4:d5:18:ed:e4:28:1f:ce:fd:e8:ca:4a:54:0e:fa:
         2f:ec:b5:dc:55:21:f4:cf:b4:bd:23:6d:ee:09:89:40:45:89:
         7a:8b:76:55:78:58:0a:e3:1f:b3:83:38:56:84:fa:ff:10:dd:
         da:89:fd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:37:14 2026 by rpki-client