Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/be2b5fb4-0e1b-31d8-86d3-c66e7d99c386.roa
File:                     be2b5fb4-0e1b-31d8-86d3-c66e7d99c386.roa (raw, json)
Hash identifier:          2X5k0KI+uCOa0iHEHxCOhsE3h+WBf8+oHQ+23icBYpE=
Subject key identifier:   E9:38:9E:09:68:A8:68:FF:7A:D6:E6:5A:EB:14:56:FF:5C:71:9A:04
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DB85CDA00E5F3CEC9B780
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/be2b5fb4-0e1b-31d8-86d3-c66e7d99c386.roa
Signing time:             Thu 06 Aug 2026 20:23:36 +0000
ROA not before:           Thu 06 Aug 2026 20:23:36 +0000
ROA not after:            Wed 04 Nov 2026 21:23:36 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:1e3::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:b8:5c:da:00:e5:f3:ce:c9:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:36 2026 GMT
            Not After : Nov  4 21:23:36 2026 GMT
        Subject: CN=868d891f-aa0f-4f4c-8836-4ae5accf1809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:53:66:60:52:4c:53:77:5d:2c:b4:12:13:2d:
                    78:3b:52:b2:11:dd:4e:4e:89:e3:8f:dd:aa:08:6a:
                    9d:f1:c8:83:72:85:0f:6c:06:23:d6:3d:24:a0:6e:
                    11:c2:2d:ce:37:ed:63:6f:b6:64:6b:05:28:1a:ae:
                    85:98:89:3b:5f:fa:cc:30:ee:c8:b0:a4:61:39:e7:
                    5d:2b:f5:56:5c:e2:59:95:84:bd:41:de:ad:77:b2:
                    7b:cf:06:47:38:12:f2:8c:f0:38:f1:6a:33:ce:61:
                    33:f1:8d:25:41:db:25:5e:12:b0:58:ec:7c:5c:39:
                    e7:24:58:c7:34:47:f0:73:16:95:fa:b9:3e:70:3b:
                    da:62:21:b6:26:fd:6f:9c:01:b7:e8:cd:40:95:ab:
                    7a:8e:4d:54:68:53:5c:97:2c:b9:be:74:63:ec:fd:
                    ce:4a:10:74:b1:be:02:46:96:46:5b:68:16:b7:c6:
                    b9:99:8c:96:ea:66:6d:33:98:ec:8f:26:38:c0:76:
                    29:2a:c7:37:49:64:3e:85:88:e1:e9:c5:7e:97:5b:
                    3b:f9:22:cb:ec:2e:af:a3:0c:3c:c9:c9:e1:67:ad:
                    fe:ed:ac:34:36:ac:72:56:7e:5d:6e:74:73:49:80:
                    1d:30:08:69:f5:24:6f:18:f1:2d:5d:87:50:b4:36:
                    d2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:38:9E:09:68:A8:68:FF:7A:D6:E6:5A:EB:14:56:FF:5C:71:9A:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/be2b5fb4-0e1b-31d8-86d3-c66e7d99c386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:1e3::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:3b:2d:18:74:68:16:0e:38:17:f4:39:3d:b2:c8:be:01:64:
         51:46:d6:62:03:d2:2b:ad:fd:a6:73:14:5e:e6:08:a9:cb:08:
         60:84:39:9c:a5:67:0b:6a:55:28:59:61:25:db:26:f7:58:37:
         37:6b:8f:58:db:9d:ef:8e:10:0b:af:f5:9e:2c:69:6d:eb:c6:
         22:17:41:0e:16:e3:d9:73:a5:39:ba:46:60:ac:0d:ba:66:1d:
         63:63:7d:ce:a5:9c:16:2b:ff:4a:67:08:5e:10:32:e6:a6:53:
         09:55:f1:69:70:d9:ec:71:70:fb:a3:d9:c0:c0:bd:74:5b:41:
         45:c7:22:68:4f:23:58:9a:33:6a:a8:5e:ba:d7:e2:1b:4b:7f:
         47:82:11:06:e4:86:57:91:6b:80:4b:04:c9:60:55:a4:01:ba:
         66:6e:2b:98:54:34:b3:64:5f:c0:bf:f0:cb:b3:b4:d3:e8:b7:
         73:fb:69:06:2a:e6:ee:db:43:81:28:0c:7e:7b:b4:6f:e8:e3:
         79:a4:7f:1d:cf:ce:f6:d0:07:6f:d5:5a:c0:d1:8c:ce:33:ef:
         74:91:87:7a:af:a3:ac:9e:fb:b4:71:1d:60:f3:26:10:f1:ec:
         8a:e6:df:9d:49:4c:67:3e:1a:af:d2:be:94:51:ff:f3:3b:04:
         17:64:2a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:37:13 2026 by rpki-client