Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/4ad06a2c-4701-35d2-ac5e-1ea8d9074296.roa
File:                     4ad06a2c-4701-35d2-ac5e-1ea8d9074296.roa (raw, json)
Hash identifier:          gZWGPiPd/qHULWHd/fmUsAS8W396eHCZa9epP+ABclU=
Subject key identifier:   A2:FF:90:41:63:3F:0D:F6:E5:C0:AD:53:1E:A2:4A:69:9D:52:D3:A2
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DC258D8542A05060D5900
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/4ad06a2c-4701-35d2-ac5e-1ea8d9074296.roa
Signing time:             Thu 06 Aug 2026 20:23:41 +0000
ROA not before:           Thu 06 Aug 2026 20:23:41 +0000
ROA not after:            Wed 04 Nov 2026 21:23:41 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:289::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:c2:58:d8:54:2a:05:06:0d:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:41 2026 GMT
            Not After : Nov  4 21:23:41 2026 GMT
        Subject: CN=a132bc39-52e0-46e9-aa48-e12ab7f3ab5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:29:c4:f1:d6:45:73:13:ee:f9:3e:b3:79:5e:
                    8c:e3:ff:c1:53:ef:dc:37:1c:e4:6e:b0:de:49:6f:
                    ff:84:47:cf:47:c8:7c:14:40:90:b9:f3:c8:cd:8d:
                    4a:fa:6e:b7:1f:94:82:81:58:60:a3:98:28:2c:65:
                    5e:e1:20:13:46:c5:0b:13:85:23:65:1e:76:37:98:
                    25:f0:c5:9f:f3:39:0a:2f:a8:20:f5:80:03:d6:60:
                    0a:d4:a8:b0:57:56:38:b6:bb:ec:9e:ea:1c:99:da:
                    a7:92:d3:a0:04:02:27:25:b7:03:7b:ab:f3:72:75:
                    2a:ec:3d:eb:13:b1:f7:14:13:22:1f:c4:e7:02:8d:
                    22:75:bb:3b:67:a5:2b:14:b5:40:6f:f3:a8:69:8a:
                    f4:4a:2c:0c:8f:ca:e6:00:78:30:02:77:e3:b5:e9:
                    30:5d:92:90:a4:57:fb:8f:4c:00:f3:eb:4b:63:72:
                    cc:c8:a8:8d:78:25:6e:b6:d2:4f:67:7f:9f:da:c0:
                    4a:ff:0d:7f:35:22:ef:94:04:a7:4e:58:44:19:ac:
                    b5:a0:20:74:55:74:90:8c:75:a6:68:fc:52:a9:ff:
                    30:f0:d6:7a:d9:f7:a8:99:3e:37:07:6a:59:7c:b9:
                    34:8f:7c:80:9f:87:6d:3d:9f:49:3f:9b:30:22:e0:
                    12:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FF:90:41:63:3F:0D:F6:E5:C0:AD:53:1E:A2:4A:69:9D:52:D3:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/4ad06a2c-4701-35d2-ac5e-1ea8d9074296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:289::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:8d:cd:4f:d5:a2:a4:a1:91:4f:74:86:65:37:7b:25:fa:3b:
         77:93:cb:fa:93:38:7e:ce:cb:b1:39:fe:a0:8a:b3:a1:6e:05:
         a3:a6:54:8d:db:21:db:d5:b5:f4:83:d3:0a:9e:1a:7e:15:61:
         27:50:c3:ab:c9:22:d0:56:bc:e7:29:19:00:4d:ca:13:24:6d:
         94:d6:02:74:fc:6d:ed:d9:da:ee:66:80:67:ce:2f:60:f1:f9:
         9f:dd:57:62:cf:4b:85:de:7f:c1:d2:07:dc:4a:f8:52:29:71:
         52:59:e9:39:69:35:bc:41:11:28:a9:a8:20:18:1d:7d:ea:ba:
         ee:7b:a7:51:e7:1c:82:62:f4:60:17:1a:6d:e8:d6:a1:5a:34:
         f2:56:df:71:72:64:98:6c:7c:2e:61:96:98:69:f5:6e:2e:a2:
         bd:4b:6d:0b:f9:a1:54:02:12:21:f8:5d:f1:7f:eb:ac:49:dc:
         eb:19:8f:7a:b8:39:e3:37:ba:9c:f6:6c:35:52:98:07:76:39:
         93:ad:cd:d3:a9:bf:82:84:b9:f4:89:de:07:4c:e8:b7:9d:c5:
         8f:11:21:1e:79:d3:9d:44:5b:2c:8b:8f:c8:ea:a1:24:7f:f0:
         f7:6d:46:5f:f3:44:1e:25:1c:44:c6:ad:8e:83:2a:4f:88:b6:
         b0:39:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:38:01 2026 by rpki-client