Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/9e0f2151-d8bb-32bc-a2bb-72a57b81da2f.roa
File:                     9e0f2151-d8bb-32bc-a2bb-72a57b81da2f.roa (raw, json)
Hash identifier:          sdrFjHJCCAdK1tl3U0fbzL913zd6fM0/DqYn20ghg1A=
Subject key identifier:   23:72:BC:85:8D:7F:8E:B6:2C:CB:18:6C:3D:9D:6D:2A:00:D5:E9:1F
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DB840205296E6D016B900
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/9e0f2151-d8bb-32bc-a2bb-72a57b81da2f.roa
Signing time:             Thu 06 Aug 2026 20:23:36 +0000
ROA not before:           Thu 06 Aug 2026 20:23:36 +0000
ROA not after:            Wed 04 Nov 2026 21:23:36 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1e1::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:b8:40:20:52:96:e6:d0:16:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:36 2026 GMT
            Not After : Nov  4 21:23:36 2026 GMT
        Subject: CN=38966da0-2d9b-47af-a682-9079226fd243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:52:3e:69:cd:8a:25:a0:32:27:b7:58:32:
                    6f:b7:db:09:6a:30:a4:9e:9b:79:63:de:31:a8:fa:
                    99:50:5e:dc:45:0a:8d:b7:d0:6f:74:2f:7b:36:ec:
                    8c:49:8f:44:0c:c2:be:a4:a8:82:fb:e3:fd:05:9a:
                    dc:78:c3:d5:e8:8f:22:0a:e5:b6:2b:30:26:4e:08:
                    5f:3b:45:1a:d9:95:0b:8a:c8:1a:8f:6e:4d:fd:be:
                    49:ee:78:2f:3b:fa:4e:6b:ed:c7:72:1c:6b:6b:c6:
                    25:db:b3:ea:8f:04:06:ac:c3:00:c7:b8:1f:b5:b5:
                    ef:42:6d:c7:76:05:a0:d6:89:ed:2e:04:3b:43:5a:
                    0b:e9:63:fe:ad:ea:ec:8c:3d:44:28:c2:5c:04:a4:
                    44:e0:28:e8:c8:aa:a1:93:04:cc:43:40:ac:5d:cc:
                    91:e9:26:0b:36:67:e9:91:2a:22:95:8a:76:a8:38:
                    03:f9:46:89:1a:7d:c0:f1:26:c8:e2:41:8c:e9:cb:
                    dd:ba:2d:ca:6e:e9:53:2d:14:27:48:0f:61:b7:69:
                    0d:f6:16:88:47:0b:a9:db:92:a8:63:d5:52:68:ee:
                    f1:fa:98:0c:82:55:54:19:63:54:1f:6f:3a:39:17:
                    54:ef:08:a0:8d:04:30:2d:93:93:43:e2:38:f2:48:
                    8e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:72:BC:85:8D:7F:8E:B6:2C:CB:18:6C:3D:9D:6D:2A:00:D5:E9:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/9e0f2151-d8bb-32bc-a2bb-72a57b81da2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1e1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:89:63:56:94:d8:07:f9:0f:97:e5:c0:9b:ba:24:ff:e3:6d:
         61:de:8e:3b:08:1a:91:c8:0b:0c:b1:8d:03:90:fa:81:db:b1:
         df:52:3d:68:94:c2:33:9c:5e:97:e4:cb:53:b0:42:89:7d:bf:
         36:b4:42:88:ae:1a:45:f8:b5:73:11:b8:52:a1:f3:89:8a:b4:
         8a:4e:59:78:b9:32:37:a8:10:15:72:1c:44:31:86:56:67:49:
         b9:87:80:8d:02:15:95:61:ae:29:e2:3a:d3:10:83:89:5b:ca:
         b8:a7:e4:fa:4f:20:37:61:70:4e:5a:6b:45:ec:dd:ae:de:e0:
         cf:03:2b:9f:34:6c:5d:7d:c3:b8:0b:41:94:03:1a:34:34:2d:
         46:12:43:dc:e6:c1:b9:2e:7f:ce:ab:43:f3:4b:f6:22:8e:06:
         7b:d4:b8:d3:bc:ab:d2:50:3f:36:13:0e:a9:50:76:00:fd:96:
         a0:90:68:48:87:b8:c1:d6:c2:eb:a5:4d:15:d9:cf:5e:8e:b8:
         32:da:38:37:7c:44:23:66:54:d9:d4:d9:6d:c9:6b:9e:2a:df:
         9a:97:43:a0:28:01:8b:41:9e:b3:93:73:2e:ba:19:8d:9c:7f:
         d3:ab:5c:fa:2a:fd:14:2f:a8:a3:b7:2e:c8:8d:72:93:76:6d:
         cd:85:d6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:36:55 2026 by rpki-client