Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/533e4a45-91d7-3231-b203-abde5d086f7e.roa
File:                     533e4a45-91d7-3231-b203-abde5d086f7e.roa (raw, json)
Hash identifier:          XdLtBUN+fW2CXhNHt46lPM8yyH0w6CWd2PRshOoNXYE=
Subject key identifier:   FE:04:1B:35:B4:7D:25:47:7F:CD:21:C1:C9:27:23:05:16:70:A9:EF
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DA405658C600174C1F350
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/533e4a45-91d7-3231-b203-abde5d086f7e.roa
Signing time:             Thu 06 Aug 2026 20:23:26 +0000
ROA not before:           Thu 06 Aug 2026 20:23:26 +0000
ROA not after:            Wed 04 Nov 2026 21:23:26 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:68::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:a4:05:65:8c:60:01:74:c1:f3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:26 2026 GMT
            Not After : Nov  4 21:23:26 2026 GMT
        Subject: CN=40c08e25-b451-4d87-b4a4-3eb71854cbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:85:3a:a2:b6:00:de:24:b9:1c:e2:a9:6a:80:
                    38:b7:a4:39:3c:d9:b3:ae:b3:44:aa:ec:0d:82:9a:
                    ae:a8:a1:ec:8e:ce:03:b1:2b:d9:98:1a:0d:d3:58:
                    9a:c2:3b:24:02:d2:3d:4a:93:01:0f:ed:9d:f1:79:
                    00:b6:93:23:75:ea:6b:af:d6:f2:93:1c:d6:69:9b:
                    0b:1d:c0:87:44:64:9f:d2:42:c1:d6:27:2e:98:eb:
                    74:ba:37:eb:d8:cc:42:88:1f:4a:45:9f:14:ae:71:
                    45:90:58:7f:4b:c5:73:e0:a4:75:82:02:8a:47:83:
                    a1:2f:94:59:f1:3e:80:9a:b4:fb:23:fc:40:37:29:
                    fb:3c:04:b9:4e:06:b1:d5:f8:6e:df:bd:cd:2b:41:
                    7b:bc:3f:5d:91:57:2e:5a:a0:aa:1c:2b:c4:c7:a4:
                    56:d2:0b:4f:ad:46:5a:cd:f9:30:ce:e5:05:ce:bb:
                    4b:f2:a8:80:9a:09:7d:c7:a9:a6:4f:74:5b:ec:19:
                    1d:9a:6e:04:4f:9c:44:8a:96:27:ca:a9:2e:d9:45:
                    ce:27:2f:b1:e6:ee:9f:dd:14:53:24:e7:b2:2c:f6:
                    62:35:6b:0f:f0:09:7c:54:38:7c:a1:12:c4:80:99:
                    2c:75:fb:88:95:8b:23:6a:c0:06:79:e7:d9:ce:f5:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:04:1B:35:B4:7D:25:47:7F:CD:21:C1:C9:27:23:05:16:70:A9:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/533e4a45-91d7-3231-b203-abde5d086f7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:68::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:0b:d0:b9:d5:0b:01:0c:bb:4e:c6:c0:56:2d:5f:e2:69:7d:
         d5:71:08:e2:a7:20:d1:cf:18:05:b9:7c:51:8f:f4:3f:5d:33:
         30:a0:dc:25:78:29:a6:dc:75:eb:c3:9b:61:ee:98:e5:a9:7c:
         57:09:8f:34:a7:e9:23:58:74:55:fe:8d:27:0e:4f:0b:b3:b7:
         3b:e1:f6:00:6a:6d:37:ac:4a:eb:57:4d:c7:4a:e7:de:4d:b1:
         96:75:be:b1:3e:22:cc:77:4b:68:4d:74:fd:c2:0b:b0:c7:0d:
         af:a3:9b:5f:f8:9e:f2:44:9e:39:c1:70:c6:5d:71:a8:5d:fd:
         3b:81:6c:e2:8e:78:af:c9:d2:f3:52:57:a9:6e:f4:a7:36:db:
         68:64:b7:c6:36:1a:3e:8f:30:4b:80:f3:f2:e2:02:ef:cf:e9:
         a1:b4:c4:d1:3a:ec:4f:e6:c8:d0:bc:ad:df:d6:e3:62:3a:b5:
         c7:37:39:f0:cb:c4:2c:92:18:9a:06:a5:c3:0b:65:ae:dc:e9:
         2a:94:b1:82:6c:7e:2e:b6:57:18:80:30:6c:ce:78:6e:96:fb:
         d9:a6:a8:09:e8:e0:87:b7:74:37:77:79:d0:2b:9d:af:da:4c:
         73:a4:cd:e3:90:c2:fd:ba:68:38:cb:36:33:27:a4:c4:27:2a:
         2d:5d:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:38:46 2026 by rpki-client