Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/65fd8fc1-943e-3639-b937-e43d8083d218.roa
File:                     65fd8fc1-943e-3639-b937-e43d8083d218.roa (raw, json)
Hash identifier:          nfEoG7F52JNsbx5RAG+TkbbdS5Mu3QflDhbkQM3xT30=
Subject key identifier:   ED:B9:B6:0C:CE:5D:1F:EB:CB:80:D5:D9:08:DB:1B:58:16:63:2F:0C
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DB1CAB5D10E355DAA7C00
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/65fd8fc1-943e-3639-b937-e43d8083d218.roa
Signing time:             Thu 06 Aug 2026 20:23:33 +0000
ROA not before:           Thu 06 Aug 2026 20:23:33 +0000
ROA not after:            Wed 04 Nov 2026 21:23:33 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:16e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:b1:ca:b5:d1:0e:35:5d:aa:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:33 2026 GMT
            Not After : Nov  4 21:23:33 2026 GMT
        Subject: CN=6389c274-eab6-4b56-a2b2-abfc36a6f0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2b:61:ac:db:13:85:46:4a:df:a3:a4:51:6b:
                    14:47:e5:aa:66:7a:95:2f:41:b3:66:54:dc:5e:23:
                    99:7a:19:71:53:c2:0d:f0:7b:7f:51:ec:fc:16:bd:
                    4d:12:67:cd:48:cb:ab:f2:02:06:99:fb:1f:3a:b0:
                    2b:d4:64:b6:17:6e:ae:0a:af:fe:f9:40:59:1e:87:
                    b2:a2:b9:59:65:f4:b7:fc:4a:fe:a9:2d:84:0c:26:
                    4d:40:18:79:e3:8a:76:8f:28:b7:20:68:26:6a:ba:
                    7a:7b:ba:73:1c:4d:df:a5:11:89:8a:cf:c0:84:3e:
                    40:5c:bf:b7:72:0e:6c:5f:5c:9b:5d:e1:c9:43:1b:
                    e4:69:b5:e8:31:0a:48:24:8f:98:9c:c1:09:42:49:
                    6d:a3:6f:e8:54:18:92:55:36:97:ca:78:6a:c3:76:
                    48:49:bd:3d:1e:cf:89:bd:58:a4:a2:fb:2a:e3:e7:
                    2b:c3:96:a8:25:1b:6e:6e:a2:2c:09:11:28:a7:4d:
                    78:d9:1e:31:75:9c:dc:e7:d8:81:d6:cd:06:74:8d:
                    84:15:fb:54:df:a0:19:48:2b:4b:46:0e:75:36:c1:
                    7f:ec:9a:f5:98:ed:53:59:e3:42:85:7b:76:8e:62:
                    02:77:c1:bf:12:3b:9e:10:1f:68:63:b3:8b:1b:43:
                    59:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B9:B6:0C:CE:5D:1F:EB:CB:80:D5:D9:08:DB:1B:58:16:63:2F:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/65fd8fc1-943e-3639-b937-e43d8083d218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:16e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:72:44:f2:07:f8:b5:cf:9c:1e:62:e7:68:03:e8:04:bc:46:
         bc:90:3a:ff:c4:03:39:94:3b:d8:ce:59:f0:b5:7c:d6:b7:53:
         51:7f:8d:dc:0d:b1:ab:83:91:d0:74:c9:cf:37:3c:38:76:d4:
         5f:7c:c5:54:b2:df:5d:8a:62:a8:99:1f:8c:32:b8:40:e4:42:
         0b:6d:27:4b:23:5c:46:66:4c:80:82:a4:3b:6a:58:f2:9c:0d:
         5b:ef:ba:49:be:9f:87:d6:f7:2d:26:9a:ed:26:2d:a8:c0:15:
         6b:06:4a:7f:c7:3c:d1:78:86:bd:8b:35:12:17:03:7d:1d:a8:
         2e:24:3e:25:d0:f3:2d:f8:19:f6:af:1a:75:03:0d:79:47:0e:
         75:8e:39:1c:a5:17:8b:5d:d4:96:99:fd:31:82:84:a1:b4:d0:
         57:b8:c3:4d:fb:9f:3b:ca:1b:71:9a:ee:45:0d:8e:ea:57:4e:
         a1:a7:e7:45:4b:a8:04:6c:fa:55:56:31:45:71:41:7e:94:c2:
         60:51:08:6f:88:c6:31:5c:df:eb:e4:1a:05:5f:07:a1:f3:ef:
         03:a7:a7:84:cb:cc:2a:e8:6c:6e:08:a7:61:74:a5:6a:77:39:
         ee:1b:fd:86:f1:d2:36:b2:16:56:53:ba:ad:9b:0e:22:b4:53:
         45:ca:dd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:37:43 2026 by rpki-client