Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/5b0a70d3-2126-312f-b2e5-3ab6c11dcc01.roa
File:                     5b0a70d3-2126-312f-b2e5-3ab6c11dcc01.roa (raw, json)
Hash identifier:          3kaZRwOIo3fIpnwE2ueofT9l1ewW5NLDvt6aQkOSdTM=
Subject key identifier:   F5:6F:59:56:E7:1D:08:3E:09:8F:5C:77:1C:51:6C:30:63:26:EE:C5
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DBA54F7B0EE272803B448
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/5b0a70d3-2126-312f-b2e5-3ab6c11dcc01.roa
Signing time:             Thu 06 Aug 2026 20:23:37 +0000
ROA not before:           Thu 06 Aug 2026 20:23:37 +0000
ROA not after:            Wed 04 Nov 2026 21:23:37 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:205::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:ba:54:f7:b0:ee:27:28:03:b4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:37 2026 GMT
            Not After : Nov  4 21:23:37 2026 GMT
        Subject: CN=6b2a4f3b-5adb-4708-878f-18c692202df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2d:c9:09:ab:34:37:f4:5f:cc:47:f8:3a:48:
                    0d:77:0e:43:56:c4:8b:e6:7b:f4:87:09:85:e7:3b:
                    66:6f:35:87:cd:2a:59:c2:bd:08:63:e0:19:49:83:
                    54:bb:45:02:12:51:d2:ed:22:f4:17:e9:21:99:d2:
                    66:b9:bc:30:ea:3f:04:1a:c1:cb:08:77:3d:d0:54:
                    d8:76:3f:90:95:ab:ff:54:57:c0:bc:6c:ae:3e:b0:
                    87:e6:93:6a:e7:ee:95:18:48:2b:a2:76:b0:1a:28:
                    a5:91:49:23:75:53:61:dd:c7:e7:36:60:89:7c:d4:
                    1d:2f:2f:bb:7e:fe:bb:f1:2d:4a:41:e9:0a:f0:67:
                    67:78:b5:91:30:34:18:d6:9f:56:96:d2:f6:42:6a:
                    7d:22:07:d7:fe:66:3c:9d:b8:39:90:c5:f3:ed:1a:
                    ca:c6:29:2b:35:22:6f:3a:e8:8b:f8:7f:10:27:31:
                    aa:bb:f1:0d:a4:97:37:5d:7c:0e:ee:34:f8:fa:94:
                    74:4e:31:b7:f5:a1:71:db:b2:b7:fe:54:80:db:af:
                    8e:c5:87:32:e4:1b:5a:95:ad:9a:ca:99:da:b6:35:
                    aa:39:25:06:af:22:1d:0a:00:55:ea:54:7b:2b:3d:
                    7b:89:43:4a:21:3b:aa:7d:39:0b:bf:3a:b0:86:1e:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6F:59:56:E7:1D:08:3E:09:8F:5C:77:1C:51:6C:30:63:26:EE:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/5b0a70d3-2126-312f-b2e5-3ab6c11dcc01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:205::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:58:40:7c:a2:56:f6:e4:99:02:f8:e7:e0:7b:92:eb:28:8f:
         a9:02:ae:f6:30:ae:0e:c9:3d:b5:b8:8d:bf:58:ef:02:51:d0:
         de:b8:63:48:d4:a8:7b:91:cf:92:35:16:f7:63:22:c8:e3:5f:
         fd:b7:6f:83:ab:db:64:eb:25:23:53:34:67:69:0f:27:85:e2:
         aa:39:bc:ed:e3:a0:7a:ec:8b:f9:71:c4:a8:4d:cc:1e:e1:e7:
         77:db:97:2d:0b:f9:21:19:6c:f6:00:d0:db:f7:24:7a:56:9e:
         c3:92:b0:d9:0c:eb:57:52:af:44:53:45:9f:4e:fc:3f:03:94:
         3c:b7:0b:54:f0:3b:43:ed:ff:e5:ff:8d:60:fa:fe:13:67:fb:
         97:de:21:ff:66:d9:cd:2b:57:e1:fc:f6:9b:59:a1:af:43:29:
         d5:bd:e3:19:e2:94:f2:9c:84:a7:ec:56:d8:21:5b:f6:2b:83:
         38:6d:9a:fc:41:77:2c:f4:09:2c:03:6a:a2:5c:32:f4:50:4b:
         de:d3:82:34:0d:88:d1:39:a1:3c:81:00:45:30:95:3d:e8:40:
         2a:8a:3d:25:2b:37:5b:79:e5:70:b4:1a:5a:14:f8:88:74:2a:
         ff:93:66:86:b7:52:ef:62:06:8e:00:b3:9e:49:2e:fc:d5:cb:
         ee:15:12:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:37:40 2026 by rpki-client