Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/5a54d831-9d43-3f84-9493-1c80dfe006d2.roa
File:                     5a54d831-9d43-3f84-9493-1c80dfe006d2.roa (raw, json)
Hash identifier:          0/VKJQ3hPAaKpUYW201Z17Jj2Tn1pS4fmPLbNC10CP4=
Subject key identifier:   60:4D:99:C1:47:45:16:40:98:48:A5:B8:87:23:3F:9B:DF:72:86:22
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DDA61201B0CABDDA22EC4
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/5a54d831-9d43-3f84-9493-1c80dfe006d2.roa
Signing time:             Thu 06 Aug 2026 20:23:52 +0000
ROA not before:           Thu 06 Aug 2026 20:23:52 +0000
ROA not after:            Wed 04 Nov 2026 21:23:52 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3f8::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:da:61:20:1b:0c:ab:dd:a2:2e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:52 2026 GMT
            Not After : Nov  4 21:23:52 2026 GMT
        Subject: CN=f4df0082-a48a-4a01-be42-0a2bbd7d41ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f3:f0:8b:ee:fa:97:f9:da:6f:49:cd:a5:b8:
                    90:9b:f3:32:53:10:3a:81:16:41:cb:4b:d7:f7:fe:
                    9a:28:04:b5:64:24:69:e8:44:f7:a6:7c:84:84:1a:
                    84:2a:92:6d:78:ed:48:39:ee:e5:9c:9b:39:6b:58:
                    5f:7e:39:9b:74:42:e5:c9:96:7d:01:79:0e:aa:5e:
                    ae:f1:06:04:73:c2:07:62:1a:13:15:50:3c:5a:2b:
                    0c:ca:79:ee:14:fc:82:de:de:83:bd:af:07:97:9a:
                    02:2e:a5:98:32:4b:2d:70:24:42:45:3e:90:ad:79:
                    3b:39:80:fb:da:d7:40:57:c9:6d:f1:3a:65:d0:52:
                    2f:15:60:6a:4a:c7:f2:54:a1:e6:c6:70:06:ac:58:
                    f6:7e:2e:3b:08:55:e2:4d:6d:4c:ad:e1:0b:aa:30:
                    71:de:44:c2:1f:c6:13:af:6b:39:1b:fd:49:32:9e:
                    e8:61:6f:4b:6a:31:73:65:6e:82:db:79:dc:35:e6:
                    c7:d1:bb:a7:b0:ba:90:fb:46:c6:9e:c9:0b:3e:c8:
                    1f:41:d1:c8:1f:86:77:cc:74:55:8f:49:d6:3b:46:
                    6a:9b:24:16:59:06:7e:97:68:10:95:10:1a:86:09:
                    3f:74:79:18:f1:4c:cd:6f:82:75:2a:38:b8:2c:e1:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4D:99:C1:47:45:16:40:98:48:A5:B8:87:23:3F:9B:DF:72:86:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/5a54d831-9d43-3f84-9493-1c80dfe006d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3f8::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:e7:21:9b:6f:34:93:ee:f8:d1:5f:61:f6:a7:69:3e:47:21:
         74:43:01:95:f6:8d:c6:0f:48:16:1e:5d:03:ec:b4:59:56:c3:
         33:7e:2e:74:3e:a1:74:d6:90:a8:27:b5:18:f6:7c:28:32:38:
         95:54:3e:dc:30:5e:c9:7b:6b:9c:9c:ad:dd:13:9e:60:35:d6:
         bc:b7:f8:14:71:e2:aa:82:8c:16:1d:f2:0d:ef:1d:b9:f5:c9:
         e8:6e:9d:df:49:9c:8b:8c:5f:5b:df:e8:a2:9a:74:28:96:5b:
         bf:72:62:a1:cb:a9:60:7e:65:83:d1:39:97:2c:71:e8:f2:f6:
         4d:82:04:5b:2b:1d:b1:c1:21:7b:93:c9:58:65:8b:c2:4d:66:
         f5:b2:1b:5e:75:c5:8e:de:c8:7d:bb:b1:86:24:ee:25:58:97:
         8c:2f:58:7b:b3:8f:01:a5:d7:b1:67:ad:7b:0d:95:47:4c:86:
         0a:a2:ab:01:8b:51:8c:f1:b7:30:6f:b5:8e:18:13:53:ed:7c:
         65:23:5c:8a:60:0e:3f:c6:c5:98:58:b1:c5:36:7a:ca:3e:1c:
         a6:d8:53:a1:e4:06:a9:f7:ab:cf:39:71:37:82:16:6b:76:67:
         bb:11:b1:6d:47:d2:cc:4d:f8:5f:64:84:69:57:e0:38:e9:46:
         32:f8:e4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:37:59 2026 by rpki-client