Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/67522320-b8aa-36e1-a276-308601213033.roa
File:                     67522320-b8aa-36e1-a276-308601213033.roa (raw, json)
Hash identifier:          95v8ltwj6CAR8YlleKZ9+VpZkY40eJId/AzANalqdQA=
Subject key identifier:   12:90:D4:0C:FE:BE:21:8A:DC:4B:98:12:CA:20:0F:A1:AD:4A:D8:18
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DC2E2905A95C4D5D4F500
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/67522320-b8aa-36e1-a276-308601213033.roa
Signing time:             Thu 06 Aug 2026 20:23:41 +0000
ROA not before:           Thu 06 Aug 2026 20:23:41 +0000
ROA not after:            Wed 04 Nov 2026 21:23:41 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:292::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:c2:e2:90:5a:95:c4:d5:d4:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:41 2026 GMT
            Not After : Nov  4 21:23:41 2026 GMT
        Subject: CN=de740d2a-1559-42b2-9042-6d1695c6ce41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:1d:a7:87:ac:81:a7:e7:6a:96:a9:17:c6:
                    6c:2d:02:1a:68:ea:88:d6:ba:db:9a:bb:81:19:37:
                    1d:50:d8:b1:20:e4:6d:4e:7d:5c:12:ec:aa:fd:f5:
                    d6:a6:eb:69:64:56:57:ba:b8:29:24:4a:1a:c3:a2:
                    6c:57:7d:9c:a2:95:21:92:89:91:d4:9d:8a:fc:95:
                    50:cd:02:ed:15:75:34:9c:99:53:30:cb:e2:d7:66:
                    f5:91:43:c0:fc:ed:96:70:7a:b5:fc:f7:19:fd:77:
                    d0:2b:1f:65:04:4b:c5:6f:ad:18:21:16:b4:7d:09:
                    98:b8:65:6c:37:69:0d:cb:30:6e:29:f0:22:6c:24:
                    3a:89:b6:d7:5e:d0:c1:cd:6f:c9:e9:3e:10:fc:99:
                    59:a9:ff:fe:fb:fb:f0:11:1a:fd:a2:d9:e0:23:0e:
                    70:21:af:68:34:1d:12:64:76:a8:00:3f:80:12:84:
                    a3:1b:37:a2:b2:55:6d:61:15:fa:83:79:79:46:11:
                    ed:26:95:b1:27:f7:95:97:06:4d:48:31:0e:be:48:
                    28:74:64:c3:09:87:0c:74:1a:7b:0c:a3:0e:60:72:
                    43:67:82:bb:34:64:b1:4f:53:45:b5:52:41:f9:3d:
                    bd:70:48:80:46:a5:5c:02:c0:2d:70:0f:7c:75:10:
                    ac:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:90:D4:0C:FE:BE:21:8A:DC:4B:98:12:CA:20:0F:A1:AD:4A:D8:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/67522320-b8aa-36e1-a276-308601213033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:292::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:96:c2:46:8e:83:43:09:7c:c2:0e:36:10:20:40:a0:d8:df:
         da:2d:b4:bb:4d:25:50:7c:e6:5d:42:37:98:c6:0a:85:74:49:
         eb:78:7d:d6:f0:c5:db:a8:7d:0a:81:66:79:1c:f0:be:b7:e7:
         79:29:be:51:ee:36:2f:05:d4:1f:cd:a7:14:1e:26:f8:0d:41:
         ec:f9:44:2c:6a:07:9d:a8:da:da:ce:cb:5a:d3:f1:b6:44:ef:
         ee:0f:94:43:a5:5d:62:42:c1:80:9b:32:f4:00:d8:76:e9:a1:
         e5:40:b1:3c:6d:d7:d0:ea:25:46:cd:4b:d8:a1:0f:ba:c8:17:
         35:20:0c:51:69:03:4f:c6:7f:7c:b6:43:be:e3:6a:64:0d:36:
         84:54:7b:52:39:a8:78:2d:58:db:f9:f2:bf:89:f1:48:0d:f5:
         8e:33:0d:76:04:ab:a6:75:0e:a6:6b:e7:ca:9e:f1:35:0a:c1:
         20:c2:ab:6d:d1:38:d5:3f:e4:85:99:9e:9a:33:c7:d7:9f:4a:
         b3:e6:73:08:b1:6e:25:01:65:99:9a:7e:e0:f1:80:d9:df:07:
         8e:18:35:1b:0b:4b:69:58:c1:4c:34:b3:4d:08:e9:8c:cf:df:
         e9:de:28:eb:21:62:3b:2a:84:cb:08:33:07:ad:23:ad:67:e4:
         09:34:4c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:40:59 2026 by rpki-client