Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a89ee141-71bd-32fc-bc05-f2dfa6c23321.roa
File:                     a89ee141-71bd-32fc-bc05-f2dfa6c23321.roa (raw, json)
Hash identifier:          GZFmhz7siKuAufugVhBcue1u/dJsvGH6SFJXS1ZElQw=
Subject key identifier:   9D:6D:35:32:06:1F:81:5B:B8:67:AC:58:0D:C1:9A:17:3C:9D:27:4E
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DA39F7D5EFE6C45D73EA0
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a89ee141-71bd-32fc-bc05-f2dfa6c23321.roa
Signing time:             Thu 06 Aug 2026 20:23:26 +0000
ROA not before:           Thu 06 Aug 2026 20:23:26 +0000
ROA not after:            Wed 04 Nov 2026 21:23:26 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:60::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:a3:9f:7d:5e:fe:6c:45:d7:3e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:26 2026 GMT
            Not After : Nov  4 21:23:26 2026 GMT
        Subject: CN=314f50f6-e574-4860-96f1-84fdd53d18ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c6:7b:e7:a8:e0:2d:ed:8e:54:09:19:e9:2c:
                    05:13:48:1d:2d:8c:9c:c2:6b:8c:6d:5d:ce:a4:64:
                    4a:02:fc:4c:e1:49:3b:08:34:b3:fb:43:f2:47:3a:
                    92:a3:bc:49:dd:08:cd:0f:05:64:42:cf:be:3a:aa:
                    f7:30:eb:c1:58:fd:41:27:42:44:ae:bb:e8:31:df:
                    2e:70:75:4b:74:45:6d:3c:5c:24:c8:65:b2:12:70:
                    0b:91:a0:b1:4d:13:7a:04:02:3b:2d:93:a9:ea:c5:
                    a1:5f:5c:24:94:fd:41:cd:37:08:b9:72:98:08:19:
                    ac:dc:1c:1a:ae:f9:82:dd:f6:ec:d9:b6:71:6c:09:
                    ee:9e:80:48:f2:9a:fd:b4:f1:b5:1b:be:02:6c:13:
                    86:c3:6c:3a:42:07:c0:a9:c7:fe:28:fe:02:e4:d1:
                    0f:45:34:0d:24:be:56:24:ad:0a:c5:d3:2d:6e:00:
                    af:51:1b:de:14:fb:a8:2d:fe:90:0b:9a:5c:5b:fc:
                    f6:17:71:3c:a3:bc:07:ed:fc:53:f1:fe:f2:3f:2a:
                    27:ba:dd:b8:88:c4:59:81:76:3d:af:5b:67:71:37:
                    44:50:01:bf:87:fd:fa:77:4c:96:fc:86:95:98:42:
                    e9:68:f3:75:ca:b6:7b:b6:fe:69:37:54:79:a3:53:
                    11:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6D:35:32:06:1F:81:5B:B8:67:AC:58:0D:C1:9A:17:3C:9D:27:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a89ee141-71bd-32fc-bc05-f2dfa6c23321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:60::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:1f:92:2b:a1:93:2d:dd:94:29:12:6d:c4:1c:e8:a3:b1:65:
         96:d1:98:bf:c1:f6:79:d0:c2:4b:bb:40:99:82:85:7d:87:8d:
         dc:b5:ad:cc:84:fc:b8:14:d9:7b:a3:32:94:04:30:bb:9a:44:
         53:18:0b:c3:ab:d6:e3:f1:86:de:01:3c:ae:04:20:98:88:9e:
         78:06:76:c6:3d:08:4b:d6:c1:b7:cd:f8:d2:ce:1c:17:12:17:
         26:82:ad:82:0e:62:72:cc:51:a8:49:72:74:72:cf:ff:23:c6:
         ef:91:96:60:bc:77:c9:1f:60:c4:15:36:99:02:30:6b:6d:83:
         de:e6:cc:84:4d:2d:31:d5:a9:9c:3a:a6:c9:83:19:f2:ac:76:
         77:33:64:98:85:a0:2c:85:f8:76:95:e7:25:ef:f8:16:18:2a:
         cf:7b:2e:f0:e2:ce:88:bd:13:eb:a2:de:20:f7:bb:69:bb:bd:
         ec:a8:7f:fc:3a:f8:19:ef:35:e6:0e:c6:ff:f3:6c:ca:3d:d2:
         fa:71:2e:06:be:6b:3d:23:8e:c0:8f:ec:76:4f:48:6b:cc:de:
         73:f3:3e:1b:49:20:14:4e:2a:23:ac:2c:b8:7e:f8:0c:df:74:
         ea:8f:eb:b6:02:e7:64:74:3f:ac:1d:f0:96:75:ea:54:74:c2:
         72:41:fa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:39:57 2026 by rpki-client