Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/88f2c29d-8ce2-30b2-8221-80f9a90b56c2.roa
File:                     88f2c29d-8ce2-30b2-8221-80f9a90b56c2.roa (raw, json)
Hash identifier:          Cc8z/mRw8llQOMRGfUZWEvLF/d6sdh+lxDio/VkEE78=
Subject key identifier:   5B:EF:A0:0C:DE:45:A8:A3:79:E9:59:93:EF:F2:0E:7A:99:4C:A7:21
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DD6F153D7A18982B7E700
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/88f2c29d-8ce2-30b2-8221-80f9a90b56c2.roa
Signing time:             Thu 06 Aug 2026 20:23:50 +0000
ROA not before:           Thu 06 Aug 2026 20:23:50 +0000
ROA not after:            Wed 04 Nov 2026 21:23:50 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3c6::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:d6:f1:53:d7:a1:89:82:b7:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:50 2026 GMT
            Not After : Nov  4 21:23:50 2026 GMT
        Subject: CN=96b84a4b-af95-4d9a-8dec-70d338d3e239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:8b:a8:d7:6f:f1:5c:6c:d2:5c:fe:db:fa:
                    d4:55:a5:f7:c5:b5:d0:2a:de:34:62:26:29:d9:72:
                    81:b1:3e:a5:11:a5:42:bc:fa:7f:fe:3d:a9:ba:e7:
                    5a:aa:10:f7:d3:16:a3:60:d6:2d:5b:64:2d:29:05:
                    be:12:d1:0a:a1:84:12:d1:2e:24:2e:cb:ee:11:da:
                    a0:a2:c6:85:6e:83:6e:6a:52:ad:22:8e:03:74:7b:
                    34:0a:82:61:0e:9f:31:01:53:73:c3:1a:52:7d:c1:
                    e4:f5:4e:37:cc:46:3b:91:b0:ac:a7:d9:b6:90:dd:
                    92:93:c7:99:e4:6c:d2:f3:22:8a:b6:c9:15:c0:b6:
                    fa:2c:2c:91:c0:70:73:41:66:85:54:c4:0c:b8:d2:
                    c6:ce:06:50:9a:be:d9:60:ff:b3:d7:1f:04:4c:94:
                    ff:09:8e:2f:74:86:1f:47:7b:36:ad:ee:e6:0a:11:
                    51:ea:d0:3b:8d:33:d1:03:85:bf:a1:41:dd:bc:b6:
                    61:d0:92:d6:3f:06:25:fc:6b:75:8d:94:30:e3:d6:
                    8f:8d:98:c3:34:10:70:0e:76:9b:53:fe:ad:28:70:
                    b5:b2:2b:dd:87:ac:54:22:6b:a1:70:30:79:a4:3a:
                    b7:4f:d3:bd:f9:2e:67:59:11:66:d3:28:f9:76:0e:
                    bf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EF:A0:0C:DE:45:A8:A3:79:E9:59:93:EF:F2:0E:7A:99:4C:A7:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/88f2c29d-8ce2-30b2-8221-80f9a90b56c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3c6::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:57:7a:c8:54:38:a8:04:1b:81:e0:e3:76:94:b0:77:3b:a2:
         63:66:a9:04:cb:6d:31:65:9a:7f:0a:7e:d6:b8:d6:3f:75:dc:
         a4:8d:c9:1f:cf:59:81:d9:53:f2:e3:e6:8e:11:ce:ef:1f:3e:
         1b:04:0f:2d:fe:3c:6f:3a:47:a7:c6:00:ea:27:49:fd:1b:ed:
         5d:6c:6e:c0:8b:cf:f5:6d:8d:8a:e1:c4:bc:29:7d:46:27:85:
         16:ce:24:56:be:9d:88:a0:6c:de:8a:28:7b:17:5b:1e:c6:71:
         3c:3b:30:97:ac:95:59:e5:65:7d:46:8b:41:89:ea:57:cf:7e:
         21:e4:64:bb:3a:cb:1e:d2:e2:e8:13:13:ce:ec:dd:72:d4:c4:
         24:b2:79:77:c0:42:c3:eb:65:bc:46:05:8e:7d:87:0b:ab:64:
         c7:ef:e8:fe:9f:9a:98:1b:2c:b6:e0:0a:49:b4:58:96:97:fe:
         4b:b0:06:d6:ff:da:8d:25:34:f0:05:b0:31:a6:e4:d2:c2:a4:
         2e:7f:91:83:e5:b4:90:fe:f4:63:18:7e:7d:1f:f0:9a:ee:5f:
         02:87:9d:81:f0:d9:80:3f:78:5a:7d:d1:53:df:94:3e:0d:20:
         13:78:73:0e:02:15:8d:4a:94:34:ca:59:b4:56:ea:91:a3:16:
         70:e7:66:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:37:27 2026 by rpki-client