Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/37716013-f68a-30b6-b52f-8ac71ecf3904.roa
File:                     37716013-f68a-30b6-b52f-8ac71ecf3904.roa (raw, json)
Hash identifier:          SMUIBHgNskJs7ztwvXrN4MP9HNXxiZb9sg2m2PU3ywY=
Subject key identifier:   AE:AB:28:31:18:7E:6E:7A:FC:50:2E:AC:06:34:60:9E:5F:E5:3F:7E
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DC5C4DDD05E325854A120
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/37716013-f68a-30b6-b52f-8ac71ecf3904.roa
Signing time:             Thu 06 Aug 2026 20:23:42 +0000
ROA not before:           Thu 06 Aug 2026 20:23:42 +0000
ROA not after:            Wed 04 Nov 2026 21:23:42 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2c2::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:c5:c4:dd:d0:5e:32:58:54:a1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:42 2026 GMT
            Not After : Nov  4 21:23:42 2026 GMT
        Subject: CN=43eb0ff3-7b83-475f-bdcb-f3f94ad96228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c9:67:d2:38:75:53:a7:4f:fd:49:e3:0b:45:
                    44:58:b5:97:86:b0:e6:18:92:e5:f0:83:f8:b9:48:
                    b8:e3:cb:0b:a1:c0:b5:d4:3b:7f:1e:54:64:bd:3c:
                    dd:ba:5b:21:43:fb:cd:25:4e:95:aa:fe:25:e5:b4:
                    70:6b:83:64:9a:73:b3:7f:5d:e1:57:50:70:61:be:
                    c4:54:d8:2b:90:9c:31:bb:3e:25:0b:bd:b6:45:c9:
                    90:9d:b7:d4:96:47:0e:ca:15:ea:f8:2d:7f:c9:7a:
                    4b:06:a2:95:15:53:89:c5:08:fa:22:68:09:20:e9:
                    06:28:a2:75:78:e0:0a:8b:74:ce:c2:47:d8:a1:2c:
                    e9:45:e2:75:7a:69:ea:86:30:08:a4:c9:17:7b:72:
                    12:e4:15:05:c3:7b:bb:1d:79:10:bc:d0:3c:ff:7a:
                    60:3e:55:af:8d:c8:ea:1e:ba:21:dd:99:7d:8f:f4:
                    ed:bb:39:f7:c0:7d:1d:3c:38:f5:95:41:e5:5d:36:
                    6d:1c:57:58:1f:ca:a3:fc:e0:fc:9b:4e:f6:bc:69:
                    fd:10:b3:5d:33:09:9d:e0:7a:63:4a:e4:c8:06:41:
                    f9:20:98:10:bd:12:b6:3a:e4:e9:9e:19:8e:08:0f:
                    ab:58:15:96:8b:92:d6:c4:fd:9e:d2:55:a0:45:e5:
                    0a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AB:28:31:18:7E:6E:7A:FC:50:2E:AC:06:34:60:9E:5F:E5:3F:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/37716013-f68a-30b6-b52f-8ac71ecf3904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2c2::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a5:c4:db:2b:61:dc:10:ca:51:04:5e:09:58:5d:c3:54:8f:
         03:1a:90:69:c8:d6:8b:dd:e7:f8:9d:9c:4b:24:b5:09:c4:3d:
         f0:3a:53:08:53:46:db:1c:55:a1:8a:96:f5:fc:a3:e2:6c:dc:
         7e:dc:57:40:94:0f:a4:ac:e2:d1:df:9f:4b:d1:d8:a2:f2:a8:
         c7:a1:13:d7:27:db:e4:62:7c:2b:be:e8:c3:4b:d9:47:fe:22:
         19:94:8f:66:b8:f0:9d:10:1c:1e:33:a6:10:95:fc:af:9f:10:
         7d:e1:cc:58:5e:49:6d:72:ae:f1:1c:ae:53:e7:8c:15:f3:8c:
         a0:a4:0a:c7:a0:fd:46:01:2a:2a:49:24:24:05:f5:c7:d9:da:
         ba:27:e0:c2:41:d0:a3:e8:98:06:d3:04:5a:35:c5:3e:b9:56:
         24:de:04:27:06:bc:3e:51:12:65:77:a5:5a:fb:69:a0:88:37:
         9b:b5:76:c6:80:9a:c5:24:76:3f:f8:ce:57:84:61:c5:a8:1a:
         b2:21:f2:44:d7:46:97:3c:dd:01:6e:be:af:5e:89:3f:7d:ec:
         19:a7:ad:30:8b:7b:ce:85:c5:4a:6e:c1:d6:9a:52:9a:c2:6c:
         ac:31:8e:f2:ac:64:dc:9f:dd:2a:b1:44:f8:54:5f:f1:1a:52:
         8e:2d:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:40:54 2026 by rpki-client