Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/8d8dd5da-0cc6-367e-b598-d7bc48b01cae.roa
File:                     8d8dd5da-0cc6-367e-b598-d7bc48b01cae.roa (raw, json)
Hash identifier:          32ZnCf3hhgopCcC3ziOoqu0QSfPvR6pzURAx5vFWJr0=
Subject key identifier:   D7:23:68:7C:31:C2:1F:97:63:FE:14:13:7F:F8:F8:BB:7B:F8:0F:4F
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DA477C610E9E0DD5430B6
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/8d8dd5da-0cc6-367e-b598-d7bc48b01cae.roa
Signing time:             Thu 06 Aug 2026 20:23:26 +0000
ROA not before:           Thu 06 Aug 2026 20:23:26 +0000
ROA not after:            Wed 04 Nov 2026 21:23:26 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:71::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:a4:77:c6:10:e9:e0:dd:54:30:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:26 2026 GMT
            Not After : Nov  4 21:23:26 2026 GMT
        Subject: CN=49b09e90-d985-4c95-97c2-6a11b6dabdba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:c0:63:63:9a:69:df:e9:00:22:d4:c9:61:
                    ff:40:44:17:f2:d1:0b:03:28:b4:b1:90:23:53:d1:
                    7b:f0:9e:18:53:ad:47:c3:76:e2:48:5f:c3:65:1b:
                    c6:0f:2f:c9:5e:04:da:6a:a0:0e:e7:03:b5:64:f4:
                    6b:e3:a6:3f:db:0a:f1:03:fb:27:6b:c7:51:18:97:
                    5c:21:6b:ba:90:b4:32:b3:fe:f3:0c:64:bb:c3:1a:
                    c7:42:82:5f:6f:2c:12:a5:bc:51:1d:0b:9f:44:64:
                    5c:81:30:a8:29:f9:57:21:55:27:58:06:bd:a5:f3:
                    db:2b:1c:3b:89:ec:6a:77:7b:dc:e3:66:6d:54:c9:
                    f7:bd:f1:24:cb:ae:2f:33:e4:29:2b:d8:24:51:c8:
                    39:40:0c:3c:45:de:f6:af:4b:33:18:1a:5b:4c:7f:
                    37:6c:ea:6c:5c:ba:b6:71:50:af:30:aa:f4:28:dc:
                    a8:a3:c0:4c:3b:d2:01:0f:3e:de:2a:05:9f:cc:c4:
                    a4:63:ee:52:21:e3:be:38:a9:0a:33:75:33:56:9a:
                    ac:00:8a:ce:f5:58:aa:27:32:4a:8b:aa:0c:52:e3:
                    bb:e0:f8:f2:81:68:e9:90:52:92:56:74:d3:6b:9a:
                    a2:95:be:b3:f1:09:97:94:c7:63:2d:dc:47:56:07:
                    55:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:23:68:7C:31:C2:1F:97:63:FE:14:13:7F:F8:F8:BB:7B:F8:0F:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/8d8dd5da-0cc6-367e-b598-d7bc48b01cae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:71::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0d:59:75:f6:1c:b1:9b:ac:bb:28:5e:5d:a4:63:3b:61:60:
         43:05:ad:af:69:67:0a:20:d8:d1:ba:a2:26:25:2b:13:ea:9f:
         87:2f:96:81:39:f9:05:dd:6a:e9:ea:99:4d:92:27:9c:ea:d7:
         a4:2f:c8:5a:08:ac:66:09:07:14:75:76:c5:2f:a8:68:24:b6:
         4b:5e:a4:b5:ba:b7:fc:59:be:59:dd:8e:8c:eb:ae:89:84:58:
         e6:ba:e7:6d:e6:e6:70:49:8e:44:42:41:4c:96:d1:e6:f3:18:
         09:77:6d:a5:b7:6a:4e:9b:25:47:32:76:27:a3:71:2f:2c:3b:
         9d:33:e0:d5:34:b4:5a:bd:dc:a4:ad:16:dd:a5:6a:24:e1:5d:
         7e:21:05:59:96:d6:14:87:62:e2:8b:dd:87:b8:c6:cb:06:88:
         fc:38:83:dc:e0:4c:57:a8:98:29:69:04:e4:b4:93:19:66:1c:
         3c:4a:d0:2d:0d:ca:e9:72:f8:5e:1d:e8:d8:f4:a6:ac:8c:b8:
         35:a9:af:e9:af:b3:a8:ea:53:f7:f0:7e:10:97:21:2c:79:d2:
         b2:31:96:bf:8f:06:ac:ae:28:94:0d:09:e7:27:ed:ac:f3:39:
         78:97:3c:09:7d:b5:08:c0:9c:39:05:87:02:68:e1:95:9f:4f:
         59:58:4c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:35:58 2026 by rpki-client