Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/d647382a-93ab-3a7d-8f95-c2f2ffdcb34b.roa
File:                     d647382a-93ab-3a7d-8f95-c2f2ffdcb34b.roa (raw, json)
Hash identifier:          bVPUo3b77TDlpVpsbbni65U8W5OjNl1tik7B+w8PiYE=
Subject key identifier:   4E:ED:BE:DF:66:9F:03:36:AF:B7:8A:11:E8:F2:8B:62:4F:89:18:A9
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DD7021C5C564F22841C40
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/d647382a-93ab-3a7d-8f95-c2f2ffdcb34b.roa
Signing time:             Thu 06 Aug 2026 20:23:50 +0000
ROA not before:           Thu 06 Aug 2026 20:23:50 +0000
ROA not after:            Wed 04 Nov 2026 21:23:50 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3c7::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:d7:02:1c:5c:56:4f:22:84:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:50 2026 GMT
            Not After : Nov  4 21:23:50 2026 GMT
        Subject: CN=9a9499e7-eb95-4b17-bb97-94b2061d023f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:5b:49:24:fb:13:96:2c:49:fc:d2:ba:ee:
                    90:cb:f8:39:93:8b:c3:f1:03:52:b2:45:c5:f2:2b:
                    58:e5:55:50:1e:c8:aa:d1:bc:ee:f1:74:d5:76:8f:
                    68:60:df:45:15:a0:26:1d:04:15:41:34:88:58:30:
                    36:72:7e:23:64:60:ce:7f:70:c4:b8:3c:c8:ad:4f:
                    07:2e:7c:13:6f:23:7c:37:56:2f:6c:a4:52:fc:7f:
                    29:bc:25:df:d5:4e:80:13:2c:ad:8e:50:e5:8e:d3:
                    37:c5:fa:e0:b1:3a:cb:0f:81:8b:54:86:36:b9:13:
                    bc:32:18:18:29:92:1f:c2:8a:13:ff:05:1d:9a:12:
                    9f:9a:19:93:0d:81:2d:7e:85:74:d4:d1:57:1e:d9:
                    77:49:75:f2:2d:18:ef:0a:2a:6d:d7:7f:1d:59:ef:
                    45:ba:a3:ac:7b:56:fe:bf:20:02:ce:f4:5c:95:d2:
                    5e:3f:a9:1e:83:5a:d0:d0:65:7e:29:74:68:e3:e4:
                    ba:1e:48:6d:67:cf:ac:bc:08:0f:1e:e9:23:aa:d7:
                    ff:f1:3a:c8:2b:45:2e:f1:2f:20:15:30:7f:3f:46:
                    b5:74:ba:86:97:62:77:92:8e:d8:36:d0:ab:d9:a0:
                    f0:ab:a5:ba:b0:f0:1c:ab:7a:31:21:88:f8:20:ec:
                    ed:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:ED:BE:DF:66:9F:03:36:AF:B7:8A:11:E8:F2:8B:62:4F:89:18:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/d647382a-93ab-3a7d-8f95-c2f2ffdcb34b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3c7::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:4d:4e:57:ac:93:75:d3:24:7d:96:bf:e4:10:db:ed:46:66:
         f6:6c:55:e9:20:07:0f:05:2d:fe:79:f5:55:41:98:8e:da:e5:
         99:c6:49:62:a7:3a:9d:fd:26:a2:7c:fe:66:89:5d:e1:92:ef:
         5c:a4:13:83:4d:e7:21:5f:c3:63:5c:66:7e:e0:69:cd:9b:59:
         3a:5e:e4:99:61:91:a2:9c:0d:29:f0:09:b1:89:c0:de:ba:13:
         8a:de:57:57:ae:8f:17:f2:f8:34:f0:f2:ec:83:66:5a:57:c1:
         e4:33:90:7a:a2:e5:ef:a2:e8:27:3a:fc:0d:97:ea:e6:cd:cc:
         9a:6c:75:63:c9:5d:58:2d:94:1a:48:ee:cb:25:3b:42:1c:74:
         ed:db:72:ae:a7:62:4c:f6:8c:1e:79:92:6b:43:cf:50:1e:10:
         a0:4a:25:11:d1:d1:99:1d:a8:00:b0:51:32:b4:c6:ad:06:35:
         43:f4:e3:58:23:de:80:c0:06:5e:e9:84:5d:49:a5:87:cf:ea:
         5f:2a:88:09:03:8c:e3:ce:00:45:f6:c3:45:40:c7:fe:74:06:
         f5:40:a1:b5:43:35:ed:0d:23:e9:cb:5e:df:84:c2:0d:57:48:
         dc:25:d8:42:5b:bc:e6:62:88:b8:9c:3e:db:73:f5:bd:aa:54:
         25:cf:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:36:30 2026 by rpki-client