Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/db78908a-cef7-3fb0-bb44-b9a1567efb31.roa
File:                     db78908a-cef7-3fb0-bb44-b9a1567efb31.roa (raw, json)
Hash identifier:          L+3fO4zRDRboB8kMIwTRPcWIn2VlNS20lNVRGa8u7+4=
Subject key identifier:   38:04:0C:14:F4:72:77:AF:40:0D:00:8B:4B:41:BD:6E:06:EB:98:06
Certificate issuer:       /CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
Certificate serial:       010D0C9F4328584EC01DAB46226FC1E5F3ADD280
Authority key identifier: BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/db78908a-cef7-3fb0-bb44-b9a1567efb31.roa
Signing time:             Thu 06 Aug 2026 20:23:30 +0000
ROA not before:           Thu 06 Aug 2026 20:23:30 +0000
ROA not after:            Wed 04 Nov 2026 21:23:30 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:f5::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:1d:ab:46:22:6f:c1:e5:f3:ad:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d6c2ee-86c5-4a18-9c4c-de61969ab339
        Validity
            Not Before: Aug  6 20:23:30 2026 GMT
            Not After : Nov  4 21:23:30 2026 GMT
        Subject: CN=955defb6-0ff5-427f-a874-9aff570a5c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fa:eb:8e:de:61:b9:1a:b7:a7:3c:47:f1:5d:
                    87:4d:c9:3d:00:b5:ca:90:aa:4f:3b:9f:26:9f:0c:
                    4a:33:fb:c5:90:b8:72:f6:43:fe:ae:a9:d1:bf:a9:
                    89:fd:aa:03:3a:a3:04:38:14:6f:1b:10:03:ff:fa:
                    ca:b7:cb:af:73:95:16:e8:50:65:09:6e:7b:99:08:
                    10:a5:b7:59:a7:32:c0:2b:0f:b8:ab:d4:8f:9e:3d:
                    4f:e4:11:32:a3:ae:17:91:99:4c:90:78:80:85:1f:
                    6c:82:c0:95:53:48:18:c5:23:34:f2:26:7b:7e:c1:
                    0c:e2:40:04:78:bc:a5:5b:46:b2:c6:7c:66:64:ee:
                    64:1d:c5:ca:61:3e:06:01:dc:6c:29:a0:a2:d8:b2:
                    17:c7:53:33:48:93:fc:11:30:28:58:07:49:a4:88:
                    ba:23:dd:37:5b:e8:6a:6b:27:50:43:65:a3:c9:2a:
                    8a:d1:c3:50:e6:c9:2b:2e:d5:05:2b:8a:20:a5:f3:
                    3b:73:89:7d:db:42:2c:bd:cc:a7:3c:91:c3:1b:28:
                    bd:eb:89:3e:71:6f:3d:c5:6a:28:ed:ce:50:89:ef:
                    b4:fb:85:ca:73:0b:bb:cf:5a:37:5d:86:1a:fd:aa:
                    16:51:3b:b9:58:b5:52:44:fb:67:41:5d:34:15:73:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:04:0C:14:F4:72:77:AF:40:0D:00:8B:4B:41:BD:6E:06:EB:98:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/db78908a-cef7-3fb0-bb44-b9a1567efb31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.crl

            X509v3 Authority Key Identifier:
                keyid:BA:EC:BD:20:5C:A6:4D:31:D4:9E:39:9E:0F:B4:51:DA:7A:8C:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f2d6c2ee-86c5-4a18-9c4c-de61969ab339.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:f5::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:33:b2:1c:5f:a4:29:b0:bf:b1:20:ad:79:ef:e5:ef:54:44:
         7d:04:18:70:eb:95:3a:10:98:b6:b8:cd:a7:3e:78:94:f4:67:
         08:55:ee:c9:2c:42:6d:f6:6b:b9:74:ab:a4:8a:c2:f1:52:2e:
         74:23:f4:0c:67:a3:12:89:1a:d2:dd:63:3b:d5:e3:6a:c3:08:
         c1:23:45:7f:77:3e:63:fc:58:45:26:08:a8:c6:40:d9:9d:08:
         bc:b4:de:cd:6b:3a:2a:f4:33:90:58:c0:fa:b2:3f:70:ef:a0:
         69:72:48:95:f8:d9:65:44:d2:ab:aa:ee:58:37:7c:3d:a0:b4:
         56:b2:82:5c:f1:65:89:02:ae:85:68:4f:b9:5e:b9:29:7b:f2:
         ad:75:af:b2:30:d2:fe:5c:57:15:f6:39:03:4f:70:af:83:3b:
         fa:62:74:05:4c:18:e9:4e:57:8c:e4:2f:fb:86:79:29:bf:35:
         29:43:f4:5d:03:96:63:c8:45:cc:2e:73:11:87:06:30:a9:27:
         cb:b8:01:b4:18:f1:9e:18:4d:19:6f:90:91:bb:3a:2c:b6:4e:
         33:74:ae:e3:0d:10:a2:b9:d4:c7:39:85:aa:99:c9:f5:de:84:
         21:44:bf:7d:cd:4a:45:57:f7:62:1f:f6:eb:d8:20:31:ef:4b:
         5e:4e:9a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:37:39 2026 by rpki-client