Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/cf2bd8c5-b027-3742-b41c-33b453f1bc86.roa
File:                     cf2bd8c5-b027-3742-b41c-33b453f1bc86.roa (raw, json)
Hash identifier:          lNDgcgnIbBRtcV7JT4NCHXvYtK69YL+tXOLN+NQSZuM=
Subject key identifier:   FD:4F:C6:87:FF:28:46:4F:F4:55:9D:3D:21:BA:D0:C4:0D:AF:5F:0E
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DBFA2F45962C27CDCA040
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/cf2bd8c5-b027-3742-b41c-33b453f1bc86.roa
Signing time:             Thu 06 Aug 2026 20:23:39 +0000
ROA not before:           Thu 06 Aug 2026 20:23:39 +0000
ROA not after:            Wed 04 Nov 2026 21:23:39 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:25e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:bf:a2:f4:59:62:c2:7c:dc:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:39 2026 GMT
            Not After : Nov  4 21:23:39 2026 GMT
        Subject: CN=a88c2036-e3e4-440d-ab4c-e0bfcce2eec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:04:fd:1e:a2:05:7e:e9:1d:a4:3b:93:2c:
                    cf:87:fa:92:ce:50:da:c3:cc:37:01:93:b9:bc:7a:
                    de:21:2c:df:e2:39:57:13:07:1f:56:b3:d4:92:dd:
                    fc:d5:09:56:13:2b:f4:b5:80:cc:2a:0f:68:25:42:
                    67:80:c0:e3:bf:ce:0b:a9:2e:0e:f7:f9:79:50:f2:
                    83:c2:17:73:44:9c:6f:72:15:6f:20:4e:29:07:df:
                    d2:e7:66:2b:86:a6:b1:86:0b:40:b0:f1:88:4f:b2:
                    be:66:cf:03:01:f5:97:9a:9d:42:73:a9:c5:43:9d:
                    d0:df:5e:f4:e9:17:a3:a6:52:5d:f8:c7:1c:22:d4:
                    49:85:f8:bf:c2:26:f2:7c:9f:c6:59:8e:3d:03:44:
                    db:70:9b:51:a6:63:19:da:08:aa:af:88:4b:0e:99:
                    31:b7:47:28:ba:4c:13:c7:bc:88:91:9f:19:33:39:
                    33:a5:7a:4c:ce:51:0b:55:d1:b4:5e:8d:cc:20:7b:
                    27:aa:6d:33:3a:d8:c4:cc:9c:23:fd:54:7e:47:bf:
                    3f:c6:9a:a1:86:e8:88:a9:00:8e:10:26:f7:39:2b:
                    a5:1a:fb:3e:e8:80:30:5c:9a:6a:68:e3:dc:71:3c:
                    cc:d7:89:25:32:93:e4:2a:f7:ab:5f:4d:af:93:53:
                    eb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4F:C6:87:FF:28:46:4F:F4:55:9D:3D:21:BA:D0:C4:0D:AF:5F:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/cf2bd8c5-b027-3742-b41c-33b453f1bc86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:25e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:33:6d:2e:1e:87:c1:a4:1f:7d:53:f8:0b:69:f2:65:fe:37:
         23:ae:bd:13:e1:99:f6:1b:0c:45:09:da:69:ab:da:8d:62:38:
         7a:e7:a9:f5:a2:2a:8c:b6:e4:e1:b3:3b:81:99:94:17:9f:76:
         19:ce:07:70:a4:56:c4:14:55:d1:e8:eb:74:44:e9:ac:e0:de:
         b8:20:46:fb:d6:93:15:7d:00:dc:f4:6f:4d:c4:e9:16:fb:07:
         89:4b:c7:3c:7d:73:47:a9:cf:66:cc:17:44:0c:d9:98:4f:8a:
         b3:80:2b:98:20:73:c6:10:df:c2:b3:75:d8:d1:5a:d7:30:9c:
         cc:41:cd:6f:b0:1d:6b:2a:a4:e7:fe:00:ca:4d:b5:31:4e:8b:
         9b:92:24:b6:25:8e:7f:10:01:00:28:80:15:7e:77:30:7f:d9:
         88:0e:33:12:fe:41:ec:5b:6f:19:e5:3e:14:62:5e:53:d9:28:
         9e:e6:eb:0a:9d:a5:87:b6:59:5c:76:da:d7:eb:93:4e:7f:06:
         37:9d:e9:1c:76:70:74:17:fd:39:1b:e6:bb:0c:2c:13:95:a4:
         ff:28:b4:58:63:66:d6:99:73:f1:99:39:0e:0f:3f:9e:ab:46:
         a6:5d:a9:34:24:5b:98:e9:d6:cc:ee:d0:4e:d7:e4:59:1d:6c:
         00:dd:9a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:38:01 2026 by rpki-client