Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/ce5d67d2-a8e5-39ed-b9be-ec9ef4d77283.roa
File:                     ce5d67d2-a8e5-39ed-b9be-ec9ef4d77283.roa (raw, json)
Hash identifier:          b6sopKFOIWhSgzFpAedCZqnouOQv33pEZW5DwNHMnl0=
Subject key identifier:   86:54:D8:2A:51:EF:A9:79:DC:3A:6A:90:D3:71:BD:D0:AF:FF:C7:67
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DC31010A9336779A2D680
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/ce5d67d2-a8e5-39ed-b9be-ec9ef4d77283.roa
Signing time:             Thu 06 Aug 2026 20:23:41 +0000
ROA not before:           Thu 06 Aug 2026 20:23:41 +0000
ROA not after:            Wed 04 Nov 2026 21:23:41 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:295::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:c3:10:10:a9:33:67:79:a2:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:41 2026 GMT
            Not After : Nov  4 21:23:41 2026 GMT
        Subject: CN=0fc5a728-bc03-48dd-8644-0c791d20756a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:3b:b8:79:3a:c0:8c:ab:a0:ac:0d:0d:87:
                    bb:9a:91:c3:5c:88:c9:ee:5c:67:a0:3a:bb:57:b1:
                    4c:81:11:f7:f4:20:25:02:4d:63:c9:c6:85:1f:71:
                    21:6f:9a:bf:08:40:d8:a6:aa:eb:37:ed:fe:86:50:
                    94:fa:4f:0b:bd:70:02:36:4a:6e:88:5d:1c:42:5f:
                    7d:5b:2c:f4:a7:b1:a2:a9:4e:02:65:1d:6f:88:86:
                    fa:35:a7:4f:a3:4c:10:b1:a3:ad:6d:f7:e9:26:94:
                    f6:5d:ec:29:7a:62:5c:99:85:d6:b7:2d:c1:90:8e:
                    fc:5e:58:86:10:bc:5c:f7:c3:52:c7:53:6e:5a:1e:
                    65:d7:1e:b1:65:ca:87:24:8c:73:ce:9c:ef:15:8e:
                    09:84:84:90:83:f3:00:14:65:d1:56:2e:33:65:fd:
                    67:96:fb:1b:bc:a6:70:2e:c9:db:bf:d5:d7:8f:c9:
                    77:d9:62:8d:bf:4b:b8:1b:19:2e:1b:07:1d:90:23:
                    a0:16:30:39:50:55:84:3a:e9:b1:41:fd:f2:5a:d7:
                    30:ec:9b:dc:f1:96:36:c4:32:a1:22:8b:a0:4c:8a:
                    a4:df:2a:f1:6c:95:0d:17:87:d5:5c:ba:4a:85:ad:
                    6e:eb:b5:c8:42:ec:b8:ef:80:81:c8:0e:5f:d8:f5:
                    a4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:54:D8:2A:51:EF:A9:79:DC:3A:6A:90:D3:71:BD:D0:AF:FF:C7:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/ce5d67d2-a8e5-39ed-b9be-ec9ef4d77283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:295::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:1f:72:df:7f:e3:d7:74:fd:6d:75:92:e9:2a:96:23:24:6c:
         85:04:c8:e7:08:6f:80:d1:91:a6:6b:3a:b8:09:2c:0d:63:94:
         81:59:4c:a0:79:c5:3c:bf:8c:aa:c8:f0:43:0b:ad:a5:f9:3a:
         a0:b4:15:27:29:be:44:a0:27:6e:60:71:6b:95:05:47:ca:e5:
         08:bb:20:36:e7:9f:4f:87:da:e7:b2:00:35:f7:c2:6b:5e:49:
         e7:89:cc:a4:ce:e9:29:26:fc:bd:60:71:67:19:c3:bc:34:88:
         a8:cb:0d:9d:92:92:20:1a:61:b4:0c:0e:ee:5f:2f:f6:48:52:
         bc:a9:c6:23:a2:16:11:77:8d:a2:47:47:89:fe:66:52:51:93:
         29:4e:05:22:8b:e5:9d:1d:1b:69:10:2e:7f:25:d7:a4:56:d8:
         cd:10:d5:11:70:db:41:d1:ba:b1:c1:7a:ec:78:51:1f:60:05:
         5e:ca:13:68:1c:f6:bd:aa:45:13:be:ec:cd:45:d3:8e:1f:b9:
         ce:d8:15:2a:c5:43:8d:c8:1d:55:63:d2:12:e5:4c:a8:55:1e:
         54:e5:ae:e4:9d:07:87:19:17:22:45:bd:c5:71:b6:d9:93:d6:
         d4:dc:df:5a:36:fa:f0:39:c1:a6:e4:1c:6f:e5:9d:65:0b:0b:
         35:98:2c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:35:54 2026 by rpki-client