Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/2eaf526a-3968-3b46-a410-87087df4d089.roa
File:                     2eaf526a-3968-3b46-a410-87087df4d089.roa (raw, json)
Hash identifier:          E+zd1r3hfL7CXg9jSlzGrgXV/N/vOsqYdlDRFC4zKw4=
Subject key identifier:   9D:5B:4E:26:D0:7D:25:E8:91:5B:B5:45:95:DA:B1:7B:4F:98:7E:13
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DA7DBAEEE940D649360A0
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/2eaf526a-3968-3b46-a410-87087df4d089.roa
Signing time:             Thu 06 Aug 2026 20:23:28 +0000
ROA not before:           Thu 06 Aug 2026 20:23:28 +0000
ROA not after:            Wed 04 Nov 2026 21:23:28 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:b3::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:a7:db:ae:ee:94:0d:64:93:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:28 2026 GMT
            Not After : Nov  4 21:23:28 2026 GMT
        Subject: CN=c366f7d7-b2ea-4119-ae9c-f014886ee403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b1:4f:da:9b:f9:e8:f9:52:d9:d8:d6:6b:11:
                    9a:02:d9:c4:e9:87:bf:1a:91:94:4a:05:b2:df:c9:
                    37:ca:26:69:04:eb:fb:94:27:cb:93:45:e2:66:cd:
                    fd:96:a7:69:1b:ce:da:79:34:84:bd:43:51:d9:14:
                    33:63:ad:04:a2:b7:9d:fa:61:db:3b:3e:ed:00:75:
                    26:89:6b:d0:97:19:06:a3:e6:eb:8d:ae:0f:d3:b5:
                    e2:42:70:a4:58:14:8b:1b:13:21:13:29:4f:13:60:
                    ba:bf:23:d9:27:9e:05:f3:8a:38:76:59:e2:4a:a1:
                    af:7d:c4:e2:e7:10:ff:05:28:96:ca:4f:8f:3a:8f:
                    6c:40:72:07:b4:b0:da:b7:1f:49:bb:8a:b0:d2:5f:
                    ce:5a:05:31:ac:47:b5:7d:9f:3b:ba:84:44:97:a1:
                    69:b4:86:70:28:fd:d2:53:eb:1e:fa:fc:7e:10:43:
                    17:d1:17:de:c2:56:b4:4e:59:23:30:69:09:ce:c1:
                    ee:b4:db:d0:5d:5a:71:13:ae:45:23:dc:1e:85:b4:
                    43:ef:bf:69:e9:b2:26:bc:93:47:13:cd:50:f6:1b:
                    c7:b8:6d:48:95:f9:76:70:6e:5a:5c:41:5d:55:ab:
                    9b:36:6e:f4:34:93:34:52:20:fb:66:3c:6f:41:c4:
                    b0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5B:4E:26:D0:7D:25:E8:91:5B:B5:45:95:DA:B1:7B:4F:98:7E:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/2eaf526a-3968-3b46-a410-87087df4d089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:b3::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:4b:a3:46:6d:06:29:26:f3:14:26:47:c8:71:21:f6:ec:c2:
         21:47:72:38:31:d7:08:4b:93:42:67:52:8c:41:55:6d:f7:6b:
         f5:7c:9e:0d:41:7d:46:08:59:d4:7a:87:81:26:90:bc:a5:b6:
         08:2a:fc:18:41:25:ba:7f:6a:ec:c2:16:94:bb:23:84:df:7c:
         0e:22:4c:22:bc:c8:21:62:3e:92:dc:28:c3:99:c3:0b:a7:bd:
         88:f9:fb:59:a8:e4:52:a4:f5:7e:6b:8b:bb:a6:c9:fb:47:f4:
         59:44:6d:2b:7d:20:4e:46:61:a5:2b:94:d5:6b:8b:f6:b2:b5:
         1b:9c:7c:23:88:92:84:5f:37:4d:d5:94:af:26:25:f4:0e:b0:
         42:dd:5a:c2:3e:67:b6:06:e1:8f:8c:27:47:09:a5:0a:c5:92:
         53:d7:fb:e4:70:3a:98:67:3f:ef:f6:7b:00:21:ba:52:c6:73:
         12:25:af:90:4e:16:ec:b7:d6:fe:65:4c:f3:a6:eb:09:bd:da:
         fa:d0:d3:04:a9:fc:45:2a:76:e3:9b:a2:5c:44:31:59:17:53:
         c6:ac:12:6b:74:3d:83:70:02:9e:77:44:69:d6:02:b8:ba:6b:
         56:a1:8e:33:ee:e7:78:a5:64:d8:6b:aa:01:b0:c4:08:f7:38:
         b1:2e:a4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:39:56 2026 by rpki-client