Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/3c0760d7-3310-38ac-b048-16821df9cbd7.roa
File:                     3c0760d7-3310-38ac-b048-16821df9cbd7.roa (raw, json)
Hash identifier:          D8umvu8VKpoM6gGJuS9+sIN76tKlmfZ0f6cfUTB2J7E=
Subject key identifier:   21:3D:6D:F6:54:B5:BE:4C:D8:1D:DC:D3:33:70:71:E0:97:C9:E9:58
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DAA63844D9F295C5DB1C0
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/3c0760d7-3310-38ac-b048-16821df9cbd7.roa
Signing time:             Thu 06 Aug 2026 20:23:29 +0000
ROA not before:           Thu 06 Aug 2026 20:23:29 +0000
ROA not after:            Wed 04 Nov 2026 21:23:29 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:e4::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:aa:63:84:4d:9f:29:5c:5d:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:29 2026 GMT
            Not After : Nov  4 21:23:29 2026 GMT
        Subject: CN=6085cbc1-d047-47e5-84bb-076b5386fdf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:00:67:0a:02:db:5f:1b:8a:db:cc:87:b2:a8:
                    50:16:a4:79:66:fd:60:85:3b:f9:bd:eb:b5:29:b2:
                    34:5d:73:be:b7:03:99:bf:b0:3c:9a:ca:cd:62:72:
                    72:5d:be:18:43:7e:9a:df:59:88:e3:35:e8:ed:5e:
                    d0:1e:ed:ee:e9:a9:70:da:a5:56:d2:d0:31:4e:aa:
                    24:b2:33:9a:3e:50:bf:67:fb:0d:65:e0:f4:69:b8:
                    8c:2f:03:9d:f9:a1:c3:bb:01:6c:df:f1:1c:14:36:
                    67:f4:64:da:16:84:d8:9a:5a:95:7e:f0:55:ad:3a:
                    6d:5c:e4:02:c9:7d:68:41:ab:03:aa:e8:6e:77:73:
                    f7:ef:ef:a8:b1:c6:75:e2:6d:0b:ab:10:6a:73:04:
                    c8:38:23:9f:ed:a4:09:b3:92:5e:4b:f0:20:fa:35:
                    6c:42:ad:f7:8d:e4:af:5d:59:d4:76:4b:bb:d5:40:
                    21:e0:58:49:77:49:e2:e4:fb:ea:95:8f:f0:a7:17:
                    91:07:35:35:ac:06:06:1a:a2:26:eb:2e:0e:87:c8:
                    2d:46:8b:25:8a:c6:ff:d8:ba:cc:0e:66:eb:2c:53:
                    01:3b:f4:58:1e:98:ab:40:89:82:b9:4c:d8:f5:ce:
                    e1:f2:e0:2d:be:3f:cb:41:84:4a:4a:80:0e:06:9c:
                    b4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3D:6D:F6:54:B5:BE:4C:D8:1D:DC:D3:33:70:71:E0:97:C9:E9:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/3c0760d7-3310-38ac-b048-16821df9cbd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:e4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:0f:13:40:fd:41:48:7b:c7:78:a0:0a:f5:93:da:d5:c7:a3:
         b3:eb:e5:4d:45:19:05:8d:cc:14:2c:98:39:18:87:78:fb:14:
         f0:97:81:1f:5b:51:cf:cf:92:ab:ae:ac:3c:9b:85:3d:ef:b7:
         30:4d:a3:6b:26:d5:ac:d8:a1:d4:b3:3f:4d:29:3b:a1:91:1b:
         08:36:f8:0e:ad:a3:0c:b2:64:e9:b3:20:a6:8e:a9:48:86:f5:
         fa:0d:b0:ac:81:67:58:b4:f8:c1:7e:94:8f:ab:cd:75:77:99:
         12:6a:89:6f:a4:04:79:57:b6:10:74:42:cd:21:f6:c1:96:47:
         7a:b7:52:5a:b8:e8:50:62:0c:17:64:c1:f9:38:14:ce:ea:6e:
         4e:7c:6a:0f:d3:72:58:28:bf:2b:fb:81:66:b5:b5:cc:04:0f:
         1f:96:ef:88:4e:fc:0b:ed:f7:57:c5:d9:9e:54:5a:62:19:35:
         54:a3:2e:22:aa:e8:2e:78:c1:a9:a8:ff:95:ca:6c:ea:fa:03:
         17:9e:37:86:d5:25:f1:82:22:e1:38:d8:8f:9b:e5:ee:f5:62:
         7f:56:eb:a8:23:f0:c4:e2:fc:b7:9c:1a:b0:02:fa:71:c5:07:
         ae:ba:81:bf:ff:91:b9:2b:c8:41:d7:1f:df:a0:c3:0c:60:5f:
         01:33:19:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:39:32 2026 by rpki-client