Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a99bd478-1fcb-38d3-9a5d-a0267887621a.roa
File:                     a99bd478-1fcb-38d3-9a5d-a0267887621a.roa (raw, json)
Hash identifier:          8CTw5R+sY6+nTSeyevIGeB74vXGt9+VMKNdwr4ZoBtI=
Subject key identifier:   0A:D4:3B:BC:FA:16:D0:EB:77:3F:5A:94:53:FA:3A:D6:4A:1E:2D:2E
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DB7E845033018A5350F60
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a99bd478-1fcb-38d3-9a5d-a0267887621a.roa
Signing time:             Thu 06 Aug 2026 20:23:36 +0000
ROA not before:           Thu 06 Aug 2026 20:23:36 +0000
ROA not after:            Wed 04 Nov 2026 21:23:36 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1db::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:b7:e8:45:03:30:18:a5:35:0f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:36 2026 GMT
            Not After : Nov  4 21:23:36 2026 GMT
        Subject: CN=94411b97-a00f-4be3-b8c3-77feae979e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:5c:3c:23:8d:d0:0a:18:9f:24:84:0a:d5:
                    39:91:f0:3f:93:a7:63:69:47:1d:78:18:ff:a2:87:
                    b2:e8:e9:17:d2:e3:dc:a0:a4:96:9e:6e:1b:56:9b:
                    c3:f0:a7:56:df:07:19:fe:07:81:38:ca:2c:c8:66:
                    8b:7c:ce:ad:68:cf:14:22:b6:14:52:12:1d:96:04:
                    c4:73:83:24:1b:97:de:99:c1:ad:b4:e7:19:70:2e:
                    20:87:0f:0e:ca:72:60:fe:9f:82:62:7f:14:75:d5:
                    42:d1:54:15:f1:94:c7:88:af:bd:fa:2f:8c:ad:e6:
                    c2:23:02:65:db:7b:20:43:21:9f:e5:13:19:df:dc:
                    eb:7a:8b:14:ff:2b:90:5e:78:ec:8b:c3:67:26:55:
                    6c:7a:4d:d5:79:a2:fb:ab:a7:43:67:28:92:04:ce:
                    f1:d5:cc:3d:1d:7c:9e:cb:8a:e6:95:9a:3c:6e:f6:
                    78:f4:c5:32:0b:1f:ed:89:3f:db:16:2c:e5:bd:30:
                    c9:e1:49:7e:67:65:de:9c:c7:c3:b2:03:1e:ef:20:
                    88:19:62:3e:01:25:f6:67:a1:c3:30:6e:84:83:f2:
                    fd:8a:5b:46:12:ba:0d:2a:6f:eb:89:40:61:0f:03:
                    0b:89:78:45:d7:76:ad:3f:e1:a2:d3:ee:d2:c9:c6:
                    b2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D4:3B:BC:FA:16:D0:EB:77:3F:5A:94:53:FA:3A:D6:4A:1E:2D:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/a99bd478-1fcb-38d3-9a5d-a0267887621a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1db::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:72:67:f8:60:5f:3e:66:97:18:a1:9c:11:a8:ea:b0:85:58:
         d5:e6:8d:3f:fa:ce:0d:b8:7e:b4:73:93:9b:4f:35:35:d4:42:
         1d:af:1e:c5:6c:a7:0f:dd:52:e7:41:f6:42:91:d1:48:a3:81:
         38:b5:9c:4f:ca:c3:10:ed:c2:97:cf:46:a9:20:3e:eb:01:f2:
         b8:cf:31:ce:3e:0a:71:d0:42:cf:6b:7a:d2:5a:77:38:ff:29:
         74:1c:0a:7e:1a:33:aa:30:1a:7c:f5:64:df:5a:aa:07:b3:80:
         bc:7c:c7:9b:3c:f9:5f:79:ed:a0:fe:0f:3a:d7:b3:1c:9a:ad:
         0a:f4:f5:52:01:e8:73:36:f4:09:ca:dd:33:f9:4d:cb:fe:dc:
         f7:7d:0b:a1:c1:ca:a6:ac:41:31:8b:6d:c8:09:b4:34:c7:95:
         a6:d1:4c:8b:65:ee:0f:f0:4a:c7:75:33:ca:a5:f1:29:79:93:
         d8:2a:f2:a4:9d:ec:4e:ab:d9:5e:33:39:f4:77:56:1d:f5:10:
         6b:a4:bc:2a:ee:54:76:61:b9:83:09:c2:2a:39:90:73:0e:cc:
         99:5a:64:2d:79:7c:21:ee:0f:27:ec:9a:36:ba:45:ef:07:e3:
         79:b2:3b:98:c8:ac:e8:cd:85:cb:76:aa:8d:cf:53:e1:19:01:
         1a:02:6b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:39:26 2026 by rpki-client