Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/ccc53d80-2f45-3d8b-be73-6830ae2028be.roa
File:                     ccc53d80-2f45-3d8b-be73-6830ae2028be.roa (raw, json)
Hash identifier:          gRAIhtK+0+x9p3x9tODzYNWkF1xj5SwxBH/gulBvDp4=
Subject key identifier:   7D:EC:AB:C7:35:42:01:31:55:2D:3D:94:0F:9A:5E:13:BF:29:74:43
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DA1D9C2A4BC4187C6F2C0
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/ccc53d80-2f45-3d8b-be73-6830ae2028be.roa
Signing time:             Thu 06 Aug 2026 20:23:25 +0000
ROA not before:           Thu 06 Aug 2026 20:23:25 +0000
ROA not after:            Wed 04 Nov 2026 21:23:25 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3c::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:a1:d9:c2:a4:bc:41:87:c6:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:25 2026 GMT
            Not After : Nov  4 21:23:25 2026 GMT
        Subject: CN=7062c8e8-f8b0-43c5-b192-f40cad09479c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:77:2b:bd:5c:82:49:56:4e:ea:05:8a:80:
                    36:91:47:31:cb:28:c3:b8:cb:23:2f:f3:d5:e1:69:
                    b7:95:b7:a1:51:f6:c1:f7:e7:fa:fb:bf:93:63:28:
                    d8:e1:90:8b:3e:ef:00:16:c5:65:d0:5c:72:24:61:
                    c7:2f:68:5d:3a:6f:47:30:38:64:9c:bb:16:c5:12:
                    41:48:8d:a6:df:84:b6:9b:99:a9:58:6f:3e:6e:a8:
                    ea:ed:d7:6a:ec:2f:b5:d2:c4:6b:f4:4f:d1:b5:8d:
                    f4:04:15:50:d1:67:46:b8:df:f2:dc:ac:5e:36:36:
                    15:1d:f2:db:a4:64:4e:28:68:e3:0f:2f:82:8b:21:
                    f7:f3:a2:c9:16:d4:cb:08:4b:e7:ff:73:9c:b0:6f:
                    91:d5:ba:03:d6:63:17:73:25:5b:3a:63:03:04:3a:
                    f5:aa:06:99:77:b6:95:c6:43:ce:f7:09:c9:a4:5f:
                    bd:4f:6c:bf:12:44:2e:ce:b4:66:56:1e:17:2f:00:
                    03:14:0f:ad:50:06:a7:c8:d7:07:65:31:57:07:ae:
                    0f:97:26:4b:c4:40:7c:31:cb:19:0c:1d:cc:87:07:
                    98:a9:84:19:e0:a3:e9:d0:88:59:90:57:34:9c:3c:
                    b4:f3:63:71:ef:ea:60:11:9d:75:d9:97:aa:11:30:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EC:AB:C7:35:42:01:31:55:2D:3D:94:0F:9A:5E:13:BF:29:74:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/ccc53d80-2f45-3d8b-be73-6830ae2028be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3c::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:40:8c:a8:47:cc:e7:d9:76:a9:93:b9:30:0e:af:50:cb:36:
         8c:a1:a7:36:ab:6d:95:9c:01:16:c3:95:81:2d:ec:1b:a7:6f:
         c2:ff:9b:30:6e:24:c1:a3:9c:84:6a:26:47:97:44:7a:d1:43:
         b3:f9:0c:ee:60:16:19:48:59:29:1e:f7:1e:2e:d9:90:c8:42:
         c2:bf:4d:7c:22:5b:14:95:88:92:b5:25:48:32:23:79:6a:14:
         89:bc:e0:55:68:54:b2:1b:09:21:1e:e8:03:8c:2a:e4:25:d7:
         d9:41:6f:7d:10:02:40:cd:3a:6a:30:8b:1f:06:6f:c3:af:32:
         08:ec:39:01:7f:51:f3:46:a6:5c:fa:6e:40:b8:ea:81:56:b5:
         5d:c2:8a:53:d5:5b:26:57:68:2c:40:b4:bc:66:ee:94:38:24:
         2f:14:aa:1f:dd:d5:0d:80:b1:01:97:3e:fc:3a:b4:4e:58:58:
         9b:ef:9c:c5:9a:cb:8c:13:fe:1f:9d:36:f0:ea:20:e1:c7:10:
         bb:7d:cc:19:1c:cd:8c:40:29:81:6b:58:ec:10:ff:a0:d5:52:
         1c:28:95:9b:f3:a1:18:4f:45:b9:87:f1:93:35:ce:d6:1f:9b:
         16:2a:8c:a8:71:a7:d1:c8:df:14:7d:9c:ed:9e:9e:c3:f7:93:
         aa:c4:29:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:36:02 2026 by rpki-client