Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/6b6a90b2-b22e-36f0-ba92-633400435c81.roa
File:                     6b6a90b2-b22e-36f0-ba92-633400435c81.roa (raw, json)
Hash identifier:          trmOeYdahZuWm7YHoU8kHI80LA5M2sxxoOvMNgAy8RE=
Subject key identifier:   02:57:56:5C:91:9A:0A:09:CB:50:00:7E:E9:E7:E6:E6:76:67:52:FD
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DD6564B78AFAD2CBF0800
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/6b6a90b2-b22e-36f0-ba92-633400435c81.roa
Signing time:             Thu 06 Aug 2026 20:23:50 +0000
ROA not before:           Thu 06 Aug 2026 20:23:50 +0000
ROA not after:            Wed 04 Nov 2026 21:23:50 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3bd::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:d6:56:4b:78:af:ad:2c:bf:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:50 2026 GMT
            Not After : Nov  4 21:23:50 2026 GMT
        Subject: CN=ce96f4f4-505c-4144-9142-e4de85f374c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b0:91:b3:54:5e:a1:3f:41:df:67:74:eb:38:
                    0f:cf:7a:1f:4b:59:eb:79:fb:9b:14:b6:de:82:57:
                    d9:cd:c0:87:56:ea:a5:51:f5:4f:34:54:2d:c7:22:
                    f5:d0:31:0d:26:3f:ad:ad:47:e7:d5:b0:6d:aa:a2:
                    64:9f:61:29:c1:0e:2b:8d:47:61:ce:23:3d:8a:22:
                    aa:bc:f1:b3:f3:6d:86:fa:7f:4c:1c:db:74:e8:b3:
                    12:3f:e0:a4:0d:86:59:ca:cd:d4:52:b6:35:56:c8:
                    c4:ce:e7:ab:33:a8:e1:79:a0:64:34:77:5d:cc:26:
                    0f:9b:03:a3:56:5c:30:4e:c9:e1:b0:63:a7:4d:f0:
                    a9:9d:ab:88:28:3f:1b:3f:27:70:1b:86:cb:b9:27:
                    2d:0c:1b:2e:a1:86:9c:cb:80:76:ae:cf:af:02:93:
                    a8:29:55:61:18:8b:23:8a:a2:87:b1:bb:c9:5a:5b:
                    8b:70:0c:dc:fe:06:30:ac:59:38:d9:79:b4:16:2d:
                    eb:71:14:6f:a9:55:48:3f:79:70:42:e9:8e:2d:cf:
                    95:ab:58:49:a6:21:41:9c:7c:35:04:6d:61:9e:f4:
                    6a:01:76:ee:06:9a:25:43:92:4b:15:4c:30:b1:75:
                    c0:4f:8d:e4:c1:30:be:90:43:2d:4d:13:c8:fb:04:
                    1e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:57:56:5C:91:9A:0A:09:CB:50:00:7E:E9:E7:E6:E6:76:67:52:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/6b6a90b2-b22e-36f0-ba92-633400435c81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3bd::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:0e:3a:c5:f8:09:80:e1:41:2e:df:22:78:f1:04:d9:d0:a9:
         05:23:86:88:f6:f2:3d:a0:2b:c5:92:26:22:9b:bc:42:8f:b1:
         f5:18:a8:28:78:95:12:4d:d2:24:8a:ce:b3:1b:62:eb:8e:bd:
         e9:7f:7a:e1:45:40:c6:64:fc:ea:8f:4b:26:df:9b:23:09:04:
         70:c9:c4:aa:da:c2:99:1d:9f:a1:5d:71:ea:cd:94:67:08:78:
         dc:db:d0:ee:73:8d:3f:24:36:33:4c:09:31:a8:13:97:70:ce:
         d4:a5:87:e5:54:cc:60:ec:60:f0:e5:75:2b:92:34:f2:ce:0c:
         8a:2d:5b:7c:4d:4e:0b:4b:b7:54:f9:9f:22:9a:62:40:63:b5:
         24:30:7f:da:cb:1b:7a:52:5a:0c:ab:8a:49:48:42:04:79:65:
         26:c4:ab:1b:31:3f:c6:9f:cb:b8:dd:0b:b4:d3:9c:3e:cf:e0:
         1a:74:b5:bd:93:67:ac:78:53:08:22:a8:e6:14:87:8a:bf:c5:
         fa:da:6b:c3:5e:94:12:0a:fe:9a:72:6d:c9:34:df:d8:4c:76:
         5c:cc:33:bf:53:ca:22:44:cb:18:09:f4:82:e6:68:0b:1b:90:
         5f:e3:2b:48:5d:02:02:cb:fa:de:35:cb:34:b7:f5:e2:c2:3f:
         6d:ed:41:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:39:59 2026 by rpki-client