Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/3d71c602-f418-3e09-a6b7-d9c2c6de1a08.roa
File:                     3d71c602-f418-3e09-a6b7-d9c2c6de1a08.roa (raw, json)
Hash identifier:          WDVBBW8n6p3ahZpyiZ+1WsTZbCMwuC1anZwGSQoMbqY=
Subject key identifier:   A3:13:29:FF:14:A8:F1:6B:11:49:11:3E:AA:E5:DC:8D:8B:A6:C6:79
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DCEA44F66F864EB28DC80
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/3d71c602-f418-3e09-a6b7-d9c2c6de1a08.roa
Signing time:             Thu 06 Aug 2026 20:23:46 +0000
ROA not before:           Thu 06 Aug 2026 20:23:46 +0000
ROA not after:            Wed 04 Nov 2026 21:23:46 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:34c::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:ce:a4:4f:66:f8:64:eb:28:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:46 2026 GMT
            Not After : Nov  4 21:23:46 2026 GMT
        Subject: CN=c38df1ba-6921-4c38-bdf1-31a5e038f72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:24:2f:2b:e8:c2:cf:f8:02:37:6b:83:ee:db:
                    d3:da:b7:05:78:6d:3b:52:3e:1b:07:1c:dc:9c:aa:
                    14:97:ae:1e:9c:b8:6a:07:b6:76:c1:47:7f:17:a2:
                    5b:33:ca:c4:54:2d:01:da:98:d4:92:a7:56:d2:2f:
                    5b:51:c2:b2:be:57:da:ac:dc:cf:5c:57:21:54:8c:
                    c2:b5:6f:60:ee:e9:34:c5:c0:2c:7f:34:73:85:ca:
                    19:0b:e2:6d:5b:b2:5a:82:84:6c:ed:04:39:82:55:
                    81:c8:bf:ab:84:0b:5d:2d:c2:4b:8e:d3:85:35:19:
                    b5:43:c2:96:7b:b5:c4:95:f7:9c:9f:6e:7a:f6:e9:
                    44:ea:71:e7:2a:07:54:72:00:df:7e:ff:e8:05:52:
                    16:a7:55:0d:d3:af:02:41:cc:af:52:df:23:03:11:
                    1e:1f:18:aa:1e:7e:10:78:75:61:91:bd:2f:6c:b7:
                    79:f9:c7:ba:43:39:0a:9e:a9:14:57:dd:c3:09:e6:
                    b7:b8:9c:55:c2:0e:66:1f:e8:35:14:a9:4c:e5:0a:
                    75:99:45:3d:26:ab:c8:77:e5:d9:9d:99:02:3a:d0:
                    a3:3c:f5:e8:24:1f:dc:fa:2d:da:8d:33:ca:c9:bb:
                    cb:bb:0f:3e:93:db:62:59:ef:46:88:83:fc:43:02:
                    e9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:13:29:FF:14:A8:F1:6B:11:49:11:3E:AA:E5:DC:8D:8B:A6:C6:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/3d71c602-f418-3e09-a6b7-d9c2c6de1a08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:34c::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:49:97:93:aa:9b:d5:b9:32:71:4a:6f:a1:f9:af:af:6d:7f:
         d1:df:bd:fc:71:d0:19:4a:63:03:12:3f:42:c3:e0:ce:0c:af:
         02:9e:50:73:59:23:81:40:fb:55:eb:d2:8c:b1:20:cb:b4:78:
         6b:44:53:21:43:cc:21:e8:04:8a:95:96:4b:1b:15:54:28:5b:
         80:55:52:14:97:19:bd:43:23:67:43:41:f2:13:03:78:bd:88:
         8f:c7:e3:44:c6:79:ea:4c:08:8c:5c:95:cd:5c:7d:e5:99:bf:
         93:57:20:ad:04:14:93:1f:a5:6c:31:16:b8:b6:b8:05:70:dd:
         6a:22:ff:de:4a:a2:0f:c8:e9:cd:db:d6:50:57:0a:c4:8b:69:
         72:c8:c3:51:c6:a7:8e:33:db:28:42:df:5c:81:96:49:a1:38:
         81:ff:e2:40:e8:4d:f1:bb:b8:47:41:10:08:03:3e:ca:08:4c:
         9b:e3:6d:2a:8e:0e:b5:3a:94:b2:7b:42:d0:4e:8b:72:95:1c:
         2a:2b:7c:df:b7:28:76:22:c5:01:89:3b:c0:70:55:e0:80:8e:
         b6:a3:5a:e3:af:dc:a4:d5:df:b0:ad:71:43:01:e4:cd:b5:a3:
         5c:5e:da:69:ed:9a:f4:63:d9:87:26:ef:96:52:3f:c1:6b:50:
         f1:e4:18:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:40:38 2026 by rpki-client