Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/b5c1b889-2825-3238-8342-6cc8948f080b.roa
File:                     b5c1b889-2825-3238-8342-6cc8948f080b.roa (raw, json)
Hash identifier:          bK5Qr7cC5hKMGqq+1rY2Wiw3hFIejCqZHlc8fgZaPmM=
Subject key identifier:   86:FA:B0:09:A9:71:B7:9E:E4:9F:0E:E1:52:48:A9:24:3A:A1:BF:EE
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DA0E208EA03EFFA6DD400
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/b5c1b889-2825-3238-8342-6cc8948f080b.roa
Signing time:             Thu 06 Aug 2026 20:23:25 +0000
ROA not before:           Thu 06 Aug 2026 20:23:25 +0000
ROA not after:            Wed 04 Nov 2026 21:23:25 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:28::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:a0:e2:08:ea:03:ef:fa:6d:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:25 2026 GMT
            Not After : Nov  4 21:23:25 2026 GMT
        Subject: CN=ed1c8de7-1301-4e5b-8bb1-08cffd7040c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:74:d5:0d:82:ec:7e:f3:d0:d8:03:a0:90:31:
                    11:d8:58:4b:5c:64:9c:37:c7:87:71:aa:a1:31:c1:
                    86:23:4c:e0:31:19:52:ef:9a:ef:cc:a8:b6:61:28:
                    ed:d6:77:0a:f6:e7:ba:50:ef:41:28:2e:98:4c:79:
                    1b:a4:7b:66:fb:c6:34:fc:1c:2c:c8:3d:fe:66:42:
                    c4:41:6f:98:65:ef:53:a0:c6:19:7a:30:90:b2:8a:
                    94:1f:3b:98:50:76:c6:d1:ea:8b:14:b5:01:1e:79:
                    6a:ec:69:91:62:69:13:f6:ae:21:7c:eb:da:49:d0:
                    f8:cf:f1:2a:28:94:2a:2d:33:1b:26:19:a7:df:5c:
                    20:0f:ab:e2:ba:7e:cd:0d:9a:1d:85:53:36:26:be:
                    62:9f:4c:a3:bb:fa:74:c5:2c:6b:62:e4:6f:46:06:
                    0f:20:e8:f1:c8:b4:63:b8:6c:fe:64:85:7a:d4:b3:
                    fa:98:ae:bb:97:93:f0:01:48:71:1a:2e:41:d4:5b:
                    51:89:e3:a0:30:95:f6:19:c0:fd:59:2a:4c:b1:58:
                    1f:ee:43:88:a3:aa:43:72:f8:d4:53:13:a8:28:19:
                    ae:2f:da:5a:e9:15:8e:cb:ba:0a:d4:44:bf:a0:42:
                    10:c2:58:89:f2:da:8a:56:f9:81:6d:9e:99:6b:2e:
                    3b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FA:B0:09:A9:71:B7:9E:E4:9F:0E:E1:52:48:A9:24:3A:A1:BF:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/b5c1b889-2825-3238-8342-6cc8948f080b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:28::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:dd:a0:9e:43:97:d8:b8:77:2e:47:52:4c:50:25:24:6e:8e:
         4b:36:37:cb:16:a4:7d:52:e9:ee:2a:6e:53:7a:a0:3b:9c:6b:
         41:3f:94:61:3f:17:ee:5d:30:81:dd:c1:41:62:7c:a1:88:65:
         6d:0e:ca:7d:c9:0d:4f:dc:92:b7:65:ed:11:dd:ed:42:f7:85:
         41:6c:08:4d:e5:b8:ca:f2:ea:4d:ef:38:e0:93:d9:b8:1a:cd:
         3a:80:fa:8a:f4:03:e5:10:9b:37:c9:db:02:55:0e:bb:ab:a2:
         1e:33:05:f9:e9:69:de:8e:60:d2:97:b4:48:a8:ba:ec:74:55:
         46:7c:29:2c:fa:f5:0b:f3:e6:87:b5:ef:6a:cf:c2:77:aa:75:
         27:48:b6:80:13:ee:e4:c7:7c:4d:a5:c3:0d:9e:e2:b6:bb:ed:
         b6:d2:50:ce:d4:b8:30:78:8e:a2:cf:17:2f:38:a7:7d:a5:9a:
         d5:03:9e:0d:71:32:1a:1a:ef:16:0d:56:7b:03:bf:3f:5a:17:
         b9:c6:f8:4a:fa:e2:a5:b8:43:ff:7b:3d:fd:77:8b:41:c7:b8:
         aa:4e:f2:55:1b:e2:13:ee:8a:f0:c8:4a:20:16:85:5f:7d:5d:
         1d:5a:fd:e8:7d:b2:ec:0f:89:cb:5e:16:3b:11:85:9f:e2:e4:
         61:55:2d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:40:36 2026 by rpki-client