Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/59fa60a9-faf2-3ff8-9b1d-e300053c5e7c.roa
File:                     59fa60a9-faf2-3ff8-9b1d-e300053c5e7c.roa (raw, json)
Hash identifier:          ef+V0aaYi5ajO2U2xSOkFEsRsWoOYFe//81iG6GTds8=
Subject key identifier:   BE:19:3F:47:D9:88:C6:E3:94:36:96:3F:0D:94:4F:1E:A8:F8:25:E3
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DC77E277F2725088C8B40
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/59fa60a9-faf2-3ff8-9b1d-e300053c5e7c.roa
Signing time:             Thu 06 Aug 2026 20:23:43 +0000
ROA not before:           Thu 06 Aug 2026 20:23:43 +0000
ROA not after:            Wed 04 Nov 2026 21:23:43 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:2de::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:c7:7e:27:7f:27:25:08:8c:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:43 2026 GMT
            Not After : Nov  4 21:23:43 2026 GMT
        Subject: CN=91bbb0da-1a13-4797-a2d7-0bc41412446c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:37:a3:a5:26:03:17:be:db:19:9a:9f:9c:
                    7c:d5:b6:be:60:9c:56:19:b7:ec:41:00:59:fb:b6:
                    69:fc:e6:d5:b2:dd:82:5e:c6:19:b4:e4:5f:c3:84:
                    5b:c5:43:e8:76:68:f3:1c:f8:83:18:8d:ba:b1:95:
                    ea:8f:6c:96:4d:77:9c:66:62:3c:dc:80:d0:32:16:
                    2b:ad:84:d3:57:51:4c:4d:86:7c:01:dd:b4:d5:f2:
                    73:cf:e6:ce:4c:da:70:a5:8f:e5:f4:06:fc:61:54:
                    db:67:fd:1a:59:32:30:87:4e:bb:25:88:34:ef:23:
                    cb:15:a4:5b:37:92:a3:88:98:90:7e:a7:ca:1e:18:
                    79:64:a0:6c:ce:a1:bd:e5:e2:d0:a1:aa:d6:f9:c5:
                    bb:65:a2:e8:c0:6e:8b:ba:97:44:c3:3c:ef:81:75:
                    85:c8:d7:2d:5d:d4:a6:e1:5f:2a:08:2f:eb:16:34:
                    1d:eb:94:7b:76:79:e3:e9:6c:3e:95:fe:aa:d9:b1:
                    9a:b6:8a:e3:78:29:d0:b9:19:fc:bd:08:b0:00:62:
                    f0:ce:89:27:a7:2e:0e:59:64:5b:36:ab:d5:69:39:
                    a9:0d:10:b0:cd:34:87:ca:f9:76:0c:8f:5b:41:22:
                    f9:b6:23:a1:27:c6:a6:0b:e2:d6:15:90:2e:7b:cb:
                    75:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:19:3F:47:D9:88:C6:E3:94:36:96:3F:0D:94:4F:1E:A8:F8:25:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/59fa60a9-faf2-3ff8-9b1d-e300053c5e7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:2de::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:8a:6b:85:14:9d:b5:22:b4:5c:bc:6b:8c:e8:3b:23:80:76:
         14:e2:8a:73:d2:c3:d1:9d:45:56:2a:6f:db:35:5d:d8:ca:a5:
         d4:7b:5d:a7:9c:52:25:d4:c9:1d:d9:8e:90:53:26:26:fe:62:
         a1:b3:ca:87:9b:08:17:0b:cb:6e:35:ae:6f:37:ee:26:3b:d6:
         73:a5:3f:d0:68:34:be:05:42:32:0a:57:f4:02:a0:37:b9:6e:
         4d:a8:37:a0:2d:af:e4:61:99:f8:cb:7a:ec:e7:81:1b:50:aa:
         ea:ee:5d:06:5e:47:f7:93:c3:e8:ec:19:6a:17:08:e0:8d:b6:
         d0:3d:f6:59:8a:18:c9:47:c0:d2:5b:3a:3f:1e:28:79:c5:fc:
         7a:73:64:d2:5c:76:6f:9d:07:64:97:2c:30:b3:c0:e4:bb:a2:
         75:56:fb:db:ae:b1:b1:a1:e6:96:f2:33:a2:a0:c7:0e:e9:fe:
         f4:c9:44:d1:97:6f:11:89:85:45:2d:64:6e:fa:e6:27:bc:3c:
         f4:4c:12:60:21:97:77:bf:85:a4:17:cf:e1:9f:a1:78:84:a9:
         da:ee:cd:3c:4c:e1:ef:7e:21:48:7e:ea:b8:78:19:5c:9c:35:
         c0:09:23:97:f4:cf:31:67:ec:f9:a7:e7:85:ba:c4:03:54:2f:
         93:5d:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:36:59 2026 by rpki-client