Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/3b2dcafb-8302-33e2-813e-208a20360794.roa
File:                     3b2dcafb-8302-33e2-813e-208a20360794.roa (raw, json)
Hash identifier:          0bBUDJhE/AQLKiAtlLm15IWD1XXmzoJXd8Inn+uBDFI=
Subject key identifier:   00:5D:33:2D:08:08:E8:F7:FF:16:25:5F:F7:1A:06:05:57:C5:52:89
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DBCCBFFE71288A1E5C5C0
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/3b2dcafb-8302-33e2-813e-208a20360794.roa
Signing time:             Thu 06 Aug 2026 20:23:38 +0000
ROA not before:           Thu 06 Aug 2026 20:23:38 +0000
ROA not after:            Wed 04 Nov 2026 21:23:38 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:22e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:bc:cb:ff:e7:12:88:a1:e5:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:38 2026 GMT
            Not After : Nov  4 21:23:38 2026 GMT
        Subject: CN=cfb8aecf-84e3-4f4a-a61d-77a9d3c91d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:82:38:40:9d:61:ea:7a:4f:ac:4e:5b:b6:ec:
                    0d:a3:a0:f7:39:8b:c8:b4:20:8c:26:49:0a:09:3d:
                    13:2a:30:d2:f4:b8:9a:e0:cb:af:b4:67:72:a9:a4:
                    7a:32:78:39:7f:70:44:8d:ca:1c:3f:60:a8:55:9e:
                    d9:ef:4c:50:33:54:c9:18:09:48:ae:e6:3f:8f:8a:
                    51:3d:c0:0e:74:76:29:33:09:bd:a4:8b:c4:3e:3a:
                    44:cd:bf:3e:1d:37:be:77:6c:fa:3c:dc:e9:87:58:
                    85:ac:ce:0c:a2:e3:fa:e4:66:09:fd:db:d6:84:d0:
                    98:7f:4c:99:4e:75:0b:ff:9f:c5:66:76:c6:c3:8c:
                    ea:48:fc:15:3e:32:43:e4:47:b3:e8:62:9f:83:d5:
                    19:64:db:9d:ad:35:1e:92:55:ee:89:c9:ff:a3:e5:
                    cd:dc:17:ef:88:2c:37:b1:43:82:37:25:07:cc:25:
                    ab:26:65:02:1f:be:7c:b1:57:5e:38:91:e4:9b:9b:
                    36:b8:2c:4e:e1:c7:bb:42:9d:b7:cd:97:24:f8:b4:
                    e7:16:7c:dc:54:f8:f4:2d:f3:90:8e:e9:ce:10:4c:
                    71:3f:27:89:1e:41:9c:3b:c8:69:0c:5c:d5:ad:95:
                    b0:83:3a:13:fe:9d:35:39:4d:56:ca:47:48:a4:e1:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5D:33:2D:08:08:E8:F7:FF:16:25:5F:F7:1A:06:05:57:C5:52:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/3b2dcafb-8302-33e2-813e-208a20360794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:22e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:76:78:88:d8:c8:5b:2f:9d:e5:10:07:6c:35:65:4d:54:7c:
         d5:86:c6:a5:e3:57:71:e6:78:e1:f9:23:58:fa:9c:e2:fc:ea:
         5e:ec:9b:c2:60:17:c0:8e:2b:bc:aa:70:96:e5:36:52:d7:a3:
         dd:9c:1b:d9:d8:32:55:5c:af:f1:ad:c9:51:8a:0d:e1:08:7a:
         9a:17:4f:75:74:03:58:d5:8d:4c:31:36:97:43:d1:d2:98:82:
         a4:d6:33:51:df:cd:d3:1e:7a:21:15:c1:42:12:85:ce:6a:e0:
         b0:ea:34:e7:66:3c:df:56:5c:02:e6:3b:b2:d0:bf:33:49:2b:
         4a:c3:f5:f5:c0:20:81:d9:61:94:dc:b7:9a:2d:af:11:3c:19:
         88:1d:26:8d:6b:74:b5:af:4d:a4:3b:3c:0e:0b:c3:86:ec:c2:
         5f:8a:84:66:d1:12:91:57:b0:6f:c3:ff:18:69:6b:1b:37:d6:
         57:a7:8d:12:98:59:30:39:d2:e3:4a:c8:3c:79:88:7d:25:74:
         ee:2f:d3:e7:41:66:89:d4:e5:19:8d:31:4f:32:b3:6d:54:33:
         90:25:54:8b:15:bc:84:72:2d:04:a8:0e:3a:a3:77:49:d1:74:
         5a:10:7e:16:94:2a:bf:b5:54:18:4a:ec:b9:d8:be:98:19:11:
         b5:21:04:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:37:59 2026 by rpki-client