Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/3c57f19b-26bf-3d7d-b349-74b973b358b1.roa
File:                     3c57f19b-26bf-3d7d-b349-74b973b358b1.roa (raw, json)
Hash identifier:          gKTxkrvFJNYOXXjSRF6ULhmvD/4fxvSSRWQ2hCfgEvg=
Subject key identifier:   38:40:6A:BD:8A:0D:0D:DC:33:6B:71:61:F8:F5:C5:B5:1F:0A:CD:09
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01D9F73024F9320A8A3D380
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/3c57f19b-26bf-3d7d-b349-74b973b358b1.roa
Signing time:             Thu 06 Aug 2026 20:23:24 +0000
ROA not before:           Thu 06 Aug 2026 20:23:24 +0000
ROA not after:            Wed 04 Nov 2026 21:23:24 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:a::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:9f:73:02:4f:93:20:a8:a3:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:24 2026 GMT
            Not After : Nov  4 21:23:24 2026 GMT
        Subject: CN=bfb09033-63c7-4b04-ba42-27b8c91369e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bb:7a:a9:69:7d:c1:22:56:26:77:40:a0:7f:
                    a2:89:2a:35:f4:cd:f8:bb:ed:ee:5e:57:a3:08:0f:
                    2a:d1:98:d2:7d:01:4e:d5:d2:3d:84:b8:cb:96:7e:
                    9a:77:6c:a1:3a:ce:e6:28:c1:de:f9:65:2f:ab:63:
                    a4:74:4d:f9:e6:0d:68:ff:7e:1a:c1:a4:e8:92:d4:
                    c1:5b:1f:1b:a5:cb:7b:06:1f:13:be:90:97:ef:aa:
                    1e:6c:04:de:a7:ad:a9:dc:85:66:00:ab:c3:7a:73:
                    b6:54:ce:39:90:5a:a2:c0:1e:b7:eb:ca:5a:33:4d:
                    56:e3:0b:a7:cc:36:e0:61:15:b0:14:6f:11:6b:a5:
                    c0:9a:ee:06:e1:a6:42:c8:85:f0:34:9a:3c:92:97:
                    2b:ec:93:c1:20:32:46:94:49:4b:e2:82:c0:d8:ef:
                    9b:b9:70:bd:42:06:90:83:d0:cc:6f:c8:8e:4c:13:
                    3d:ad:87:b4:ee:04:1a:e7:52:92:9d:f4:92:76:28:
                    f9:5e:9a:b6:4d:26:5e:7c:81:c0:35:22:7e:fd:ce:
                    7d:ad:14:3c:11:6f:f7:b5:15:5c:4d:5e:9d:08:c1:
                    6a:fe:c5:cb:7c:a6:a2:7c:70:87:27:9c:62:b8:ca:
                    79:74:a0:ca:43:ef:c3:f3:70:70:5f:1e:bc:88:9a:
                    a7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:40:6A:BD:8A:0D:0D:DC:33:6B:71:61:F8:F5:C5:B5:1F:0A:CD:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/3c57f19b-26bf-3d7d-b349-74b973b358b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:a::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:52:12:b2:3f:d1:8a:4b:73:fa:1a:d3:f8:ae:ef:25:d6:f8:
         3a:16:8a:61:6e:56:7d:0d:41:65:cf:cb:f7:e1:c3:a9:51:f6:
         52:32:19:ba:d0:db:13:c2:52:50:0f:16:1c:73:18:9e:ef:42:
         8e:2e:1c:31:97:3c:17:6c:00:bf:70:65:6e:a8:c6:37:9c:eb:
         82:8b:1f:fe:8e:6b:88:48:75:09:5b:bd:fb:92:66:d8:95:86:
         f8:0c:66:85:7b:67:a5:ea:e1:92:05:d3:37:ac:a8:06:ac:94:
         3e:04:a4:cc:66:3e:1e:dc:12:89:e1:fc:6a:a9:89:80:e8:c8:
         77:bd:37:0c:b0:81:96:89:cf:42:c6:37:7a:20:3e:c5:9f:84:
         ef:df:31:71:5c:65:5b:ca:19:36:47:61:d5:f3:79:0e:a3:fa:
         ff:c1:05:4c:32:71:86:c4:a2:42:33:d5:05:6a:9c:71:ad:e6:
         03:d3:4e:21:e1:ab:3b:8b:c2:3a:cc:24:91:bb:6d:e7:99:cb:
         d3:e5:c7:ac:f7:12:5a:ee:78:ea:ea:24:5b:e4:07:64:1c:27:
         f2:88:92:34:71:69:b1:63:74:52:91:96:63:44:19:6c:c3:f8:
         81:95:70:25:28:d1:4c:83:13:cf:2c:a5:31:54:56:d1:bf:fa:
         bd:3b:25:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:39:29 2026 by rpki-client