Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/7e15ae15-c81f-313d-a2e2-eb26b32fa1bc.roa
File:                     7e15ae15-c81f-313d-a2e2-eb26b32fa1bc.roa (raw, json)
Hash identifier:          sQbmUYbYifdIXsHlLQ5bxw3KKY0iIxWkvLuMb7zdfdM=
Subject key identifier:   CD:6B:24:F5:DC:36:0D:14:93:DE:D9:61:99:71:C3:24:C3:6D:8C:C9
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DD0DCF295AAD51F0F2D40
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/7e15ae15-c81f-313d-a2e2-eb26b32fa1bc.roa
Signing time:             Thu 06 Aug 2026 20:23:47 +0000
ROA not before:           Thu 06 Aug 2026 20:23:47 +0000
ROA not after:            Wed 04 Nov 2026 21:23:47 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:36d::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:d0:dc:f2:95:aa:d5:1f:0f:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:47 2026 GMT
            Not After : Nov  4 21:23:47 2026 GMT
        Subject: CN=6756b9c4-e19d-4065-aaa7-3db72a07266b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b6:a8:ea:17:f3:23:a4:aa:8a:c7:4c:89:5b:
                    71:aa:89:56:0f:44:46:26:75:08:c6:39:5d:d9:cf:
                    d4:d6:ee:ec:0b:ad:ef:0a:f7:1a:01:b1:80:40:27:
                    21:e0:15:a3:46:9d:81:d7:de:0e:cc:bb:27:ec:24:
                    32:10:8f:cc:09:e9:21:68:9e:52:45:b6:5d:1d:dc:
                    8a:d8:70:1a:60:23:c5:18:f3:66:49:b6:db:1f:27:
                    c9:db:ac:2c:1a:84:7c:a7:4d:2a:00:35:97:ee:18:
                    77:ef:4b:d2:65:f9:07:d4:3d:c1:69:1c:63:24:0f:
                    8f:01:35:02:33:95:2d:87:9a:6d:d0:07:34:21:83:
                    5a:69:40:89:f8:16:27:62:c1:88:42:b9:c3:f9:18:
                    6f:8f:09:21:ad:48:9e:6a:cb:86:42:9b:2f:23:59:
                    92:67:9b:58:6b:c9:43:d4:be:d0:cb:81:87:d1:55:
                    7e:a9:9e:a8:8e:9c:c3:b7:08:b7:54:85:a1:35:88:
                    22:1f:7b:7d:0f:91:e9:76:cb:81:f5:6d:6a:75:dc:
                    a6:bc:88:0d:28:08:be:b1:b9:c8:5e:a3:77:2b:f0:
                    fe:81:e7:ea:7d:38:3d:8e:ca:0b:e9:09:3f:a2:6f:
                    a6:44:76:49:74:1a:c0:81:60:20:b2:21:7a:a8:29:
                    7f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6B:24:F5:DC:36:0D:14:93:DE:D9:61:99:71:C3:24:C3:6D:8C:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/7e15ae15-c81f-313d-a2e2-eb26b32fa1bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:36d::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e6:1e:53:32:78:27:9d:20:0c:d8:d0:4a:fc:00:d5:6f:e4:
         44:ad:bf:6e:c3:4c:0c:19:49:cc:6c:c6:fd:5c:ec:7d:9c:19:
         6f:cb:5b:d5:20:e0:18:b2:99:48:d8:97:a0:d7:13:24:99:21:
         45:d3:0c:74:8d:cc:22:5d:a5:5f:2f:96:e4:5c:3c:09:2c:8c:
         db:d0:90:bb:9a:cf:49:97:a4:f7:c0:e5:16:c8:d8:5b:28:1e:
         d3:2a:b6:86:83:b7:97:8c:88:67:c7:13:ff:14:94:24:4a:a7:
         92:e2:94:0a:9e:8b:64:24:3f:46:07:f1:a4:97:7e:db:60:06:
         bf:5a:92:83:ad:34:cb:ba:23:45:73:12:9a:3d:9c:9b:9e:a8:
         bb:b3:1f:d8:e5:f8:8c:e5:39:45:ef:85:b7:ef:e0:61:9e:46:
         1e:b6:d9:b1:87:b4:a6:91:a6:50:c4:9b:67:b5:df:94:3c:d2:
         ba:1a:d3:71:cb:de:a8:e5:88:11:64:bf:c0:ca:61:e5:c6:0b:
         a5:33:ec:8e:bd:e8:ae:2c:91:6c:f9:bb:06:e0:11:34:52:ea:
         ca:89:5e:65:9b:4e:7d:78:ad:3d:d4:7e:37:f5:33:96:d2:a9:
         fc:fb:c4:c0:b0:9f:f9:75:97:6d:f4:03:28:b3:02:88:5c:44:
         15:5c:69:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:36:19 2026 by rpki-client