Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a44c599e-0dcd-30cd-99e9-1e0c4e8d8b4f.roa
File:                     a44c599e-0dcd-30cd-99e9-1e0c4e8d8b4f.roa (raw, json)
Hash identifier:          eh9cTyFBCBbr4wEZqeaDhhi/UWlyEWwo9kidk6Ia5vU=
Subject key identifier:   43:99:F7:58:E8:A1:13:B9:46:75:AA:6C:35:63:22:38:45:69:89:85
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DA0126B78B91BF5586D00
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a44c599e-0dcd-30cd-99e9-1e0c4e8d8b4f.roa
Signing time:             Thu 06 Aug 2026 20:23:24 +0000
ROA not before:           Thu 06 Aug 2026 20:23:24 +0000
ROA not after:            Wed 04 Nov 2026 21:23:24 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:17::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:a0:12:6b:78:b9:1b:f5:58:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:24 2026 GMT
            Not After : Nov  4 21:23:24 2026 GMT
        Subject: CN=822a9921-ae25-43c0-b79d-ccc40f0390ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:6f:79:68:e5:1b:56:f4:6d:8a:74:2c:9b:
                    76:61:6d:6b:92:06:0a:09:e3:29:64:4e:3e:ad:71:
                    5e:90:2e:cb:3c:f3:c1:6a:75:ca:d2:1e:32:31:00:
                    fd:7e:23:b2:68:e0:9e:08:36:35:9d:1f:6c:be:a2:
                    c4:8f:a1:ff:8d:c0:c6:01:1a:44:29:07:c2:dd:66:
                    d3:88:cd:ee:c5:ce:c2:d5:8d:85:31:e1:5f:71:a0:
                    ec:73:bf:ab:4b:17:f7:df:0e:d1:d1:d3:d8:e4:b1:
                    42:87:f4:f3:dc:dc:b3:03:b0:4f:65:fb:08:b6:12:
                    fb:b8:aa:47:e2:91:81:0d:06:22:6e:ac:9b:ee:da:
                    74:cb:e3:44:c4:f3:fc:da:77:fb:17:17:0d:89:ef:
                    39:bd:2f:fa:50:69:30:07:1d:df:ef:c1:bb:22:15:
                    d6:db:33:ec:53:cb:76:c6:c6:02:e9:30:ba:52:89:
                    08:68:0e:d9:4e:7a:f8:1d:bf:d4:c1:24:09:f8:fd:
                    b5:6d:d9:b0:8c:a7:b8:6c:07:da:a3:31:7f:36:64:
                    a1:10:f0:e5:7c:1e:c2:65:20:37:e5:44:46:56:c0:
                    eb:66:fc:dc:a9:48:b8:55:07:81:ca:50:b5:f4:81:
                    54:95:d1:bc:cb:a4:c9:5b:23:c6:c1:53:12:26:41:
                    9c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:99:F7:58:E8:A1:13:B9:46:75:AA:6C:35:63:22:38:45:69:89:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a44c599e-0dcd-30cd-99e9-1e0c4e8d8b4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:17::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:5f:26:25:d2:e4:c8:0b:73:28:a7:f1:2f:68:08:ef:ea:2e:
         86:3a:47:bf:f6:ad:2d:f9:df:9a:db:cf:98:ed:17:9d:42:be:
         3c:e1:d1:79:96:d7:08:ee:c1:c6:5b:f3:27:a1:51:95:4c:26:
         13:eb:39:20:bf:73:9a:39:3b:62:ac:42:8a:67:24:73:1b:fe:
         c6:ae:08:41:3b:ca:db:85:0a:6f:cf:ed:6d:23:bc:99:8f:4b:
         fe:d8:a1:08:48:eb:1b:4f:41:24:94:01:34:47:be:79:24:2c:
         b9:13:4a:5f:00:57:eb:62:65:84:42:5e:f4:4d:36:36:5f:01:
         42:45:49:c5:49:74:d1:8e:39:51:5d:8a:26:3a:10:cb:e6:b9:
         67:0b:69:cd:52:b1:9b:ed:81:45:2b:95:ec:1c:c8:e8:ea:04:
         11:2b:b2:d1:67:a4:24:f5:a4:aa:5f:2d:57:ab:7a:da:1b:38:
         b1:06:ef:d2:c3:5b:47:31:93:28:21:2e:c4:23:d1:c3:f3:86:
         da:e9:92:86:91:4e:7b:a9:d7:06:ac:6d:a6:83:d9:9f:b6:0c:
         bf:5f:ed:e9:85:d9:b4:69:7c:e6:d7:d3:77:19:a0:21:3f:bd:
         19:49:16:5f:7d:82:f8:a7:18:0a:39:e6:47:86:6a:bc:2c:1a:
         15:bd:f5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:36:04 2026 by rpki-client