Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/7ffe41ab-cbe4-3fdb-8313-c1d055b6fca4.roa
File:                     7ffe41ab-cbe4-3fdb-8313-c1d055b6fca4.roa (raw, json)
Hash identifier:          cO3N3mZ3dnh9xiFO4kfPMHqceMdwFAe/e6+V7MhnTPU=
Subject key identifier:   EB:09:24:EF:0A:8A:4B:1C:03:95:82:81:AF:34:F8:55:50:36:37:9A
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DA97EC4460ED5C6A28000
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/7ffe41ab-cbe4-3fdb-8313-c1d055b6fca4.roa
Signing time:             Thu 06 Aug 2026 20:23:29 +0000
ROA not before:           Thu 06 Aug 2026 20:23:29 +0000
ROA not after:            Wed 04 Nov 2026 21:23:29 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:d3::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:a9:7e:c4:46:0e:d5:c6:a2:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:29 2026 GMT
            Not After : Nov  4 21:23:29 2026 GMT
        Subject: CN=86f28c42-7c43-48c5-84c4-c2c6e1da5f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:b1:12:44:80:1c:58:51:2a:8c:d9:78:d6:
                    be:63:ab:fa:59:3f:e4:ed:b2:9b:2f:04:18:6a:f5:
                    1a:92:80:9b:6d:f4:40:75:fd:b7:b9:0f:77:5f:8a:
                    74:81:df:53:5d:11:89:41:08:2e:94:53:15:79:1a:
                    33:29:58:b9:17:a5:87:79:4c:30:20:a0:df:75:95:
                    5f:96:3d:16:7e:5c:ca:67:7a:12:a0:2d:e4:a5:8b:
                    59:77:ce:30:cb:61:bf:0b:52:ba:ce:5d:c8:12:c5:
                    66:5f:49:5b:29:45:59:24:28:8c:80:2a:b8:6c:c8:
                    f2:f9:99:52:5b:b3:9f:d6:2f:89:27:e4:2b:ed:d5:
                    79:9e:6e:5b:9f:40:a5:17:bf:38:c0:51:48:c6:60:
                    6a:ed:fc:af:06:e8:79:0b:05:b5:71:f5:7a:99:ec:
                    7e:39:bb:52:14:5e:4b:09:d6:e8:30:39:a8:ab:c8:
                    03:0f:21:25:33:24:85:41:e0:1e:4f:c0:db:19:f4:
                    01:c0:3c:34:4c:e5:0d:ef:1c:10:fd:91:d5:e1:31:
                    f3:8f:d3:fd:04:b7:6f:34:d7:b0:a8:d5:05:e8:93:
                    0f:b1:85:73:a8:f7:a7:19:aa:f1:46:e2:40:ab:57:
                    89:6e:f3:c6:66:78:f4:75:30:13:f4:55:ed:1c:a6:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:09:24:EF:0A:8A:4B:1C:03:95:82:81:AF:34:F8:55:50:36:37:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/7ffe41ab-cbe4-3fdb-8313-c1d055b6fca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:d3::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6d:33:22:8d:7b:8c:0f:30:1a:1f:14:68:56:40:bf:71:c3:
         be:01:a4:50:49:7d:be:d6:7a:4b:df:8c:c3:ee:ca:44:cf:43:
         ef:39:15:51:a3:cc:9d:5c:1f:40:43:0f:0a:17:ae:f6:a9:0a:
         7d:48:08:8a:68:28:54:69:59:4f:cb:62:cf:ca:ca:89:ed:b4:
         2a:e7:d9:81:c4:bc:4f:d3:ff:5e:24:0f:bc:30:a9:0b:ed:42:
         7b:5a:d3:27:a8:08:e0:42:64:7e:8f:49:3a:47:65:74:0a:2a:
         75:ae:b4:71:cf:60:2a:49:d1:9e:9b:58:a2:8a:34:6f:0c:5f:
         5d:cf:55:5b:3a:36:5f:e2:c5:c8:c5:33:2d:14:b9:29:3b:16:
         44:a0:4c:27:97:6b:e0:73:6a:a8:f8:78:4f:44:ea:de:a1:af:
         05:be:60:fd:17:21:33:0e:8e:d9:6d:84:9b:b8:05:79:0f:54:
         ed:31:ec:59:f3:a0:f3:72:2c:e6:41:8e:eb:7d:07:4e:49:57:
         21:9c:68:dc:f4:be:d3:3c:c7:02:8c:4c:a2:39:cc:2e:9a:67:
         78:9d:9a:7e:3a:22:ae:c3:85:24:a6:7c:e6:0a:6f:42:bb:54:
         8f:c7:47:b6:8f:81:82:3e:ab:91:5b:f6:6e:ac:df:df:4d:f2:
         3e:ab:18:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:36:56 2026 by rpki-client