Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a8a59452-1a47-3e95-a655-79b538f2a378.roa
File:                     a8a59452-1a47-3e95-a655-79b538f2a378.roa (raw, json)
Hash identifier:          1N5aMNvgFyYQ1ie46DKx83BSDWZ1fOcXMYHH+HRGYl0=
Subject key identifier:   BB:B7:49:AF:41:89:31:F0:84:72:2C:D2:9A:D5:EB:90:3A:D9:6A:7E
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DAE900235650411935B80
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a8a59452-1a47-3e95-a655-79b538f2a378.roa
Signing time:             Thu 06 Aug 2026 20:23:31 +0000
ROA not before:           Thu 06 Aug 2026 20:23:31 +0000
ROA not after:            Wed 04 Nov 2026 21:23:31 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:133::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:ae:90:02:35:65:04:11:93:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:31 2026 GMT
            Not After : Nov  4 21:23:31 2026 GMT
        Subject: CN=87b69fea-01a4-427d-83a7-0dcc05d2a4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ba:98:cb:20:9b:2a:cb:8e:a3:bb:b4:0b:e6:
                    50:cb:bc:b8:e5:e6:f6:90:e4:f3:2b:81:5b:bd:24:
                    69:14:7b:be:97:9c:b4:6a:69:54:43:a5:f5:75:7a:
                    d8:58:b9:63:cc:4d:a3:f7:6b:87:6e:5d:db:b5:98:
                    d4:42:bf:88:5b:8b:2e:e5:db:3e:ac:c3:93:9e:54:
                    10:4c:b3:d8:29:cf:c5:7a:6a:e5:a0:ca:4b:50:cc:
                    f5:5c:99:dd:ef:0b:d7:93:ff:6d:fc:3b:fa:98:1b:
                    07:4d:f9:92:f9:34:a8:f2:22:8f:4d:4c:98:fd:3a:
                    f4:c5:c1:00:53:75:54:77:6c:40:b4:9e:d5:79:79:
                    ab:61:c7:cd:ce:5e:03:6f:7b:a5:ac:d9:5d:43:dc:
                    76:e0:1f:1d:c0:da:e7:fa:02:ad:0b:a2:bf:d8:3d:
                    90:94:fe:04:f2:b4:b3:e6:dd:13:e4:9c:a0:43:37:
                    9f:8e:29:dd:71:9f:ae:74:37:44:d3:c7:84:ef:2e:
                    9b:2b:81:aa:4d:18:63:65:3a:27:6d:cb:6b:0e:3a:
                    28:51:d1:7e:84:a8:94:e2:7c:aa:08:93:42:12:4d:
                    81:0c:6d:cf:2f:fe:d7:a8:e1:68:01:9e:58:52:2a:
                    40:0f:35:8c:1c:df:63:ed:b3:83:b2:cf:3c:52:dd:
                    e7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B7:49:AF:41:89:31:F0:84:72:2C:D2:9A:D5:EB:90:3A:D9:6A:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a8a59452-1a47-3e95-a655-79b538f2a378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:133::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:6b:4b:81:fd:c0:a5:3a:d6:86:ef:99:0f:a3:34:d9:50:35:
         6e:9d:21:81:a0:2b:c4:73:87:b0:e2:93:b1:bb:43:26:3e:b5:
         51:7e:32:18:0e:ff:c2:59:cd:65:6c:10:30:f3:2d:97:a8:64:
         cf:f2:11:cf:f2:31:91:72:0c:1a:86:9d:c0:f4:8b:5e:b8:8d:
         60:55:ce:2c:53:b1:e5:e9:a9:ef:f0:d1:f1:b3:80:b9:61:c2:
         82:54:2d:93:f3:96:52:d8:60:83:b1:18:3a:87:42:6a:85:3b:
         88:b8:5a:c6:34:dd:71:8c:c3:b6:28:d7:ae:5f:d0:5a:ec:0e:
         72:f2:93:58:a5:8a:16:1f:6f:9f:59:47:36:b4:77:bd:f7:bc:
         9d:47:61:3e:71:44:28:1e:38:2d:9a:e6:4f:f9:cb:f6:26:95:
         51:09:e8:e6:7a:3d:32:84:22:f0:87:b8:21:2b:39:e2:d5:b6:
         c5:bb:e5:b6:97:21:51:01:49:93:3b:8b:10:07:bf:10:78:5e:
         9f:5b:f5:b7:f7:78:e8:6e:a5:ab:a9:f1:83:a1:10:9f:ff:ad:
         44:56:aa:08:ed:b6:91:52:04:f2:eb:55:98:3d:c1:64:dc:02:
         bb:b3:0a:6e:bc:d9:77:bd:9a:df:fc:30:be:b9:30:74:29:7c:
         b1:2a:34:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:36:57 2026 by rpki-client